{"report_id":"d444b808-be6a-4c06-a049-ebb7dbadbb2b","version":0,"status":"done","tags":[],"date":"2026-08-31T09:39:22Z","url":{"schema":"http","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"title":"Rainbet Casino - kasyno online, gry i bezpieczna platforma","dom":{"size":133749,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"2268b77d37ba03c0dc1124a1a18755fb","sha1":"3f8ec090f476c3a658fcd644f515e3c1f6018494","sha256":"f39fad8edbd900e4ac1a90db5a096e652c23e8f33e3e48c2280f7746abe39d64","sha512":"d372f1f18688b0ff9c4558cd3f1dcccb12070fa1cae7e4903a1b3d34b8e31dab37c456cb6dea30fe597e5dee6e209625bf4cc90ad8f7fd76accc7a21b88d60d7","ssdeep":"1536:UGwozxypeNMYe9RnXlZtSNaMpaXn9dgxfKul6JGX+59dBXqRRh:Uxozs4+ku9o8JGX+bdBXqRT","tlshash":"26d32b6712a53069251ba77d8e953349722dd003da06ddf4bdeec0a48fc97a148b2f4f","dom_hash":"domhashfe47b535d9a5364c2874121d06b526be","first_seen":"2026-08-31T08:08:57.440539Z","last_seen":"2026-08-31T09:39:27.406554Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:39:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbeteurope.com","ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":1118718,"sent_data":32176,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":2,"received_data":48770,"sent_data":1219,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/main.js?ver=1786353430","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53815266660f392bb9537ab7a34a31c","sha1":"db6c0b8ab56c61881c65fa3d20b46b482661e7cb","sha256":"fd592f0575e8bfda5b814ffd136e39b44644a810f0c2b76a817b358d8a675074","sha512":"89558dcaf19d113ec4e026e9f5051ced348415353829899efcbb99d57c5074b01a78e405fad04f37f3439a03a968bc4688dd5f069f2d1799839ac63415c6bc03","ssdeep":"192:RRUIulGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FwxtUfq8v51ToTOiIpkT9","tlshash":"47f16559a2b13c7c40b35e589e7fab09797880a72987c912384fb4894fb64f043f16ed","size":8009,"data":"","first_seen":"2026-08-26T10:24:05.285398Z","last_seen":"2026-08-31T09:39:27.410739Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff21218738c991f5db98d244f1134967","sha1":"453f0cee0b2bd1d159fe38a3baf8f87e5f6a177c","sha256":"f4ae3142f0141a8266debfa59327dbd859a7c60c9c1fb1d510df2e8e5b0e09a0","sha512":"b9dc06fd099212e2273e9b1ebb3a9ebced454dcfccbcfa14d5e872ab8dc5fb5c9acb925a2955275c572e5bd5a475b8c1ddb99fdb58fd4650a53a29da5a627d79","ssdeep":"","tlshash":"29f0e25812f33176017771798b9f5584bb2b5493604bdc6a3eadc6898fe44640472ecf","size":506,"data":"","first_seen":"2026-06-26T20:50:38.984626Z","last_seen":"2026-08-31T09:39:27.462122Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79e3988a3ec12edf99816caa5006223c","sha1":"5fe144ae90375ed2f2f323d64d93450f101e0366","sha256":"8ce75977a19eec627c14f37e77ae3858fec6de0e8e844b237ea6c3c625f396ff","sha512":"6d8e1b030360b88a210d815d27f0de577c8980b6bde84cb7da9843a5ae99aa515c44401bb8cacdf00ea39cf190b127edcf37631f57be747b65017dd80b1130ad","ssdeep":"","tlshash":"3a31bc1931a1203240aff53e67cba24a7279e04378468e293d0ccb461f52eb199a5edd","size":1571,"data":"","first_seen":"2026-07-17T09:18:25.980282Z","last_seen":"2026-08-31T09:39:27.463215Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8ccc441e1dc1f48d8ea9ccf526ef0ed","sha1":"4dc702b629046323d1b2bbbc8ea0c616f1bf4191","sha256":"57ca477447a106d68a61a79503964117432efd7599e0643bfbde407a5fd4fad3","sha512":"fd7221e8fc2e879d6dd89e579dfd9e815bde973866c125d1405896c0af6c175ebd8e7b2fc389b37fb6e0013b7eb1ca954ec0e1d06bb0cab3ec1fa04167acf557","ssdeep":"","tlshash":"8b01992835e50568432336341aaf43141c38e0933346c88d7e5cdb741fc243994665fe","size":813,"data":"","first_seen":"2026-08-31T08:08:57.501129Z","last_seen":"2026-08-31T09:39:27.463697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-08T20:35:02.606308Z","times_seen":55159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6622f92412aa9930b5b36c3d937a1ba","sha1":"2bdac53e4eedba4f6924f62de2925117f6ad1178","sha256":"0227b944a3a2e120561938c29033c17163160a36bd0d09b988b7d03cf240bb93","sha512":"e187fe24f60826154942386920e93b129eab018099e5fabf6e517fcf134e7c68325cd2e5a4c474699816a973a9434d3ddf19bccaae178f6cb8d18f07476147ef","ssdeep":"","tlshash":"1a0141891cb8ca2584829289797eb70db0acfd50d33f1c02b61f054d2b647ac9ed364d","size":791,"data":"","first_seen":"2026-03-04T15:00:38.618919Z","last_seen":"2026-09-08T04:44:31.381677Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16d0debb7a81ccda3171ccd23f00bb0e","sha1":"d560531d23fe4c5db473baa3f6bbc7dae920d974","sha256":"743e40fd5817bc7499a9aa74e7a8e56a2e9350199158290df5f3593264086fd1","sha512":"7c852dfdcb1be5fc9d663f56741a98e32d49ed7747bb8294fee616aafae4d40ffc9089d3c9837916022096755f11f19d134b5faf62c055cdb26db7580bbe73af","ssdeep":"","tlshash":"4ac0809998982c4514eac558457c13157114a413ca1f5e55f34d004c9ff407969145cb","size":174,"data":"","first_seen":"2026-08-31T08:08:57.503105Z","last_seen":"2026-08-31T09:39:27.465513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/contact-form-7-js-translations","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2863970310f13f466280a9bc6420cb50","sha1":"bdf2c58e6bee7c3037a57b4bcad48d3807b27c8b","sha256":"f561a4bd1e05a64c20a46052b0022558dfca19839b47064c37646a87514517f5","sha512":"4b3279f5bfa8fb34932896960465ee0d9f4cbd74c5b151206bb7ccc8e0149b0931e0288fc27154fd4433857886ad05a9c6c91139373f26057697902779a39e95","ssdeep":"","tlshash":"19612f85dca88925848292b5796a770d70acfc50d32f1c02721f004d2b617ac8ad350c","size":3221,"data":"","first_seen":"2026-08-31T08:08:57.497621Z","last_seen":"2026-08-31T09:39:27.466509Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-08T20:16:24.993557Z","times_seen":502758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad8ee7e122f11671caa63e64ad36ab6","sha1":"a9a156fe405f114cea4c846cd8a124b2ba63b11a","sha256":"d689f9113e5c0dcf6bd4ddc19bb48735b7e35d10fe324d1e3331676514886952","sha512":"44535f1ca87da661dc6dab4f7c48a72a290522c599271d5291807cc123340cb02ae5d67c5fdbfafee89d77eb5735679bd2e780f0ed281d3c5c798a5e5ed77f4a","ssdeep":"96:IrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJn:8s7NAME0+eWjQvJBA","tlshash":"e9b1a759eb7538df33fa01f3693a4d4beb614436e784d038c9ae631414b1893c375a5a","size":5509,"data":"","first_seen":"2026-08-31T08:08:57.504623Z","last_seen":"2026-08-31T09:39:27.467513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-08T20:35:02.543972Z","times_seen":235656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-08T20:35:02.586302Z","times_seen":242510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T20:35:32.265487Z","times_seen":51542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T20:16:20.746634Z","times_seen":432067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-08T19:41:34.199683Z","times_seen":7277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-08T19:41:34.369381Z","times_seen":7183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-i18n-js-after","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c475781f88e8798a40881d5e996ad2","sha1":"9a54e164bde3aaa00120413b57c782c7bcae53cd","sha256":"a65bda80d40bbe91d979c1ab423b25131822e3eb52b6aec105fd2add5ae91668","sha512":"6d3ab583b00c01e5aa316866251b9e1dda7e47d3bc4d8b2137efe509b0f66475d13a55685aeb296b8b410d99588f8835fe492320f66eeadfeb1625fa2f63c1b4","ssdeep":"","tlshash":"755112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":2522,"data":"","first_seen":"2026-01-12T15:05:41.96813Z","last_seen":"2026-09-02T11:32:42.442421Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/contact-form-7-js-before","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"311596b5855c65e6d9e3cafb5b983268","sha1":"fc424296e5b00302cf23f1fe7a1a279541eeb0a4","sha256":"a5e3a9962819ce426ed1aaa6fae0c2da08940bf326b7f6121ace754b3cb2b22d","sha512":"b2eba1999257d0e1e943522e2c6a93938806e6237fe2fee99c422eb769a9718f8d909b098ed502b8844bbc37bd26427fffe263c2b40a26cfdb98c7ec42f3a8ac","ssdeep":"","tlshash":"64518099d9982c4514eac578457c1315b114a417ca1f5e55f34d004c9ff407969185cb","size":2612,"data":"","first_seen":"2026-08-31T08:08:57.505565Z","last_seen":"2026-08-31T09:39:27.469397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68253,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-09-08T16:28:35.701145Z","times_seen":28955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/css/dashicons.min.css?ver=7.1","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.177Z","timestamp":1788169133177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.1 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 05:40:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fcd31-e67c\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrYyMjbSiAejIvKLlEWUMoCC74VCZfTSKfe4B5A2spc%2F2zvzkFYzOn5S6OEH3JJK%2B2b5gZl%2BbOkUk9F7V7OQNEolgMcI2kSL8wAtxv8WFXCLr0Rl3ChmnNfj%2Fcy6SWy98BKSyg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a5bbd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59004,"size_decoded":36541,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-09-08T19:54:34.990079Z","times_seen":72443,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/main.js?ver=1786353430","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.223Z","timestamp":1788169133223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/main.js?ver=1786353430 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 10 Aug 2026 09:17:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a799716-1f49\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiV7PKps4jvXGMz%2FuIw7f72UsNg4LIOWLtKyniWgZ5Ed7clu1IjsFwVoR2X%2BXjj9O1sbTE32Vz4iVySbOfUcd0PKb5y6caSmaBDU27OFl9eon1Fm7cKHBaOlf6yWGyqwpkTCVw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109aabdb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8009,"size_decoded":3454,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3428)","md5":"e53815266660f392bb9537ab7a34a31c","sha1":"db6c0b8ab56c61881c65fa3d20b46b482661e7cb","sha256":"fd592f0575e8bfda5b814ffd136e39b44644a810f0c2b76a817b358d8a675074","sha512":"89558dcaf19d113ec4e026e9f5051ced348415353829899efcbb99d57c5074b01a78e405fad04f37f3439a03a968bc4688dd5f069f2d1799839ac63415c6bc03","ssdeep":"192:RRUIulGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FwxtUfq8v51ToTOiIpkT9","tlshash":"47f16559a2b13c7c40b35e589e7fab09797880a72987c912384fb4894fb64f043f16ed","first_seen":"2026-08-26T10:24:05.285398Z","last_seen":"2026-08-31T09:39:27.410739Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-zaklady-sportowe-panel.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.243Z","timestamp":1788169133243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-zaklady-sportowe-panel.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:25 GMT\r\netag: \"69a08d45-7f56\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMob9MOs4CMKGxTkeHCT5mGKJpbibiRTFrVh7ANnk%2BzfYivzvotHfhBwjAAPyuHBg5l7uXrzYcsCQn43lDru%2BRTT2Ku9vTZJkMOVEy6jFepUZxZdH888mEIsoczfv30OAsb%2B%2FQ%3D%3D\"}]}\r\ncf-ray: a33b109acbe6569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32598,"size_decoded":33394,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04555ebfd61571e75f69396f1b581fa8","sha1":"25aa56daef564ffa4414c232831b88b3a41e923b","sha256":"55c8366b2b93117be432a538bb79db285ab44781db0f9a1eb71d9eb2ed1d57a3","sha512":"c31dc33ef133f6ada5bb5af199ad827592ed0a58c46371efaa7835f5a707b088b1021f674bc9bf251c1028b4802d38caf00b5a60e17e108f46688b8fd45c30d2","ssdeep":"768:hTDymIEuuVZEFfbVKaK6CG6Wn7v3JzS3VJdZ9mWMr:RDIE5VZsQN6Cg7QF59mr","tlshash":"80e2f216fbef0d4acb62413e77db131ce4f81a5d8f68a26bae4688c7090c64d2a31564","first_seen":"2026-08-31T08:08:57.495653Z","last_seen":"2026-08-31T09:39:27.412727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.195Z","timestamp":1788169133195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-65b\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgRe4nma1TF4tIqimsLufjOCQE%2BJbzumIMlHLPkQTDjz5BRm9ix%2FIpj4RPDV2W1FZwJ4wCoxMZyWn874auJBDbgmqihKBx4WYAHX80Njyz%2BormCwSbe0Vov97A%2BJPD5kSJiYkg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bca569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1627,"size_decoded":1392,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with no line terminators","md5":"43fd47acd8c6b6b99ec00ace6271fb48","sha1":"4ac095168a9c622551dbba34ca00d0b0a021a4d5","sha256":"ea2a953a5031f7805c827cb77d94a9ed59fd84181dc6edf4fee43d2bf702a067","sha512":"db91e6bf34db0b96b8d67f01935a7f17117b625acf7033e034226f64ac0e06e956c1c6ae6ab0ea89e30b53f95cb2a9002ce46eb17376b95d0a60983ecd439ca7","ssdeep":"","tlshash":"843110335020032df07bc526b6c55eef71adf813967227adefd5f0229a81b561f51542","first_seen":"2025-11-01T17:37:40.358856Z","last_seen":"2026-08-31T09:39:27.414147Z","times_seen":15,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/gamblers-anonymous-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.254Z","timestamp":1788169133254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/gamblers-anonymous-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:32 GMT\r\netag: \"69fb2a54-105c\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0q6Qja54s2gOdrJLQe7uBJ98MKp5HIDWP3CeO7vz6%2BlkhkM2ifCHPJxWlrwmoVJ4mZo22jLrRoCC9C%2Bsh1Tj4Ke0zCheFL0XQ%2FyRTL1KbZqD5sRXdEUl31Zg3k3Yqli91yYJA%3D%3D\"}]}\r\ncf-ray: a33b109adbef569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4188,"size_decoded":4981,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d679ae3bd48192653c8c8a6e5942ce7","sha1":"c56b71f5996147947ed4a92afa2ad43885f1111b","sha256":"2e580df9323a347044575ef2b4eeac85b12affff720e913d8b91a7252207a994","sha512":"3883caea8078264cfa3cf455f1d5322d221ba5ab748684a1b2b224722ee42f3d480e4f9fed0812ddfbb777d9fbc867312254251be3d4f27e562ccafb30b58bbd","ssdeep":"96:2Elbw+iXQ0o80SkEglTOFU5v1P0gslhX7kQZid4vO8uu:zwTWKgZOK1cHoQZe4Ou","tlshash":"a0816d6df3b62356e8031bb8e42257563e1ebc744b83f06b864513b23d400e6669c353","first_seen":"2026-07-08T12:11:29.148058Z","last_seen":"2026-08-31T09:39:27.415148Z","times_seen":17,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.193Z","timestamp":1788169133193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-124d\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CYllIWcLhqgKBedpAIJsJSFM%2BT9CCeC%2BCBZLYT%2FX%2Bxp7JDo9MsojTaXFAqZ9q6Bq4uzjiJY8onaXVcs%2BPLQVtrwSRMbZbr9VIEX4HV6DEpDSP7gsLyQz9k1EOSUs79gdOPfjQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bc8569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4685,"size_decoded":2149,"mime_type":"text/css","magic":"ASCII text, with very long lines (4685), with no line terminators","md5":"cf883145742fa2e7149d53fc9b87ca5c","sha1":"b96c32d296450b0f37a2fbcf8dcf9d99eaf7ceb4","sha256":"a546f4c12258c7608989eef7f2c60f925c4d67d7e332dd565c0b2005cdaa5061","sha512":"1b13cb5e65c4bce3b152c272102facfc3bc89c7c2cdbf56e07138d337789e61714b2876b27cf7bf98b6bd535000c5c57344d63fff83ef79385582681be7c9f84","ssdeep":"96:p2Gh/Af2sKhmlGizCRCbeGMfbsKYbsFvJ:p2Gh4f2sKd+C46GMfYKYbsFh","tlshash":"51a1526731412268b11bd8a696e1697ca539d8239b163eefec33be20c7062d7c61384d","first_seen":"2025-11-01T17:37:40.373628Z","last_seen":"2026-08-31T09:39:27.415855Z","times_seen":15,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.217Z","timestamp":1788169133217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 08:52:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a009c3-30e0\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awku1jmtywkS9UnIlYbUzXrh6cPVkJ83MKBbfb0EFXtT7ILCYmKOYb9lV500UMmkAzlx0UMjVywKeM1GPIyxZrqlWZ4gzuO21DESsm4IE8nNQFvHLmsK7YU%2F5iPUBHgf3VZhlQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109a9bd7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4327,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-08T20:35:02.543972Z","times_seen":235656,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.234Z","timestamp":1788169133234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZKwzvcIj2XKTS%2FNEh37zT1Hyp5jIo0vO2gFvNrXILvn%2FtjRaiP6Tv00rMEp9qNurp5IZcXsclNCGmyZasGkX61s4FC35k4xeNvDpUu0enwLsHlmjI89qU8r5IQ2UhAJDhrjbQ%3D%3D\"}]}\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=5,i\r\nage: 5432\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6908c3d2-e4\"\r\ncf-ray: a33b109abbdf569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":953,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ab1d55e55b7e86a3c817d8892d6b584","sha1":"5f069d522bea52e2782797a10f47a83895349682","sha256":"ef70e23d1c9179aec2b49e0afe79521bfdd051abeabf220b3ab19977ca285e6c","sha512":"717be6268baea441f60d4df0221a7cb6181040f438e3a0d5f7d7d314b5517a04e1530f5894b0bdc9a8e5e7f1761ddaa0f85690ec3865a4f63732bed9697ddb4c","ssdeep":"","tlshash":"afd0a99f524c0e2cfa228520e35932b5007b2143034c526ec8636534aa0919fa83faec","first_seen":"2025-11-01T17:37:40.348381Z","last_seen":"2026-08-31T09:39:27.417019Z","times_seen":15,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1785192406","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.197Z","timestamp":1788169133197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1785192406 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 22:46:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a67dfd6-3b11\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ekbq1xafHZhy7qbPiiBPG6U7fT5er3zGxbwZbyiNReS4QPFd%2Fad21dC2VU1Esb7anro6bUI2QGIB5OomNLhLekljRCclznLRToKgbPncusmuQySViyuVHMNQzxGRcYE5XbGZ8g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bcb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15121,"size_decoded":3255,"mime_type":"text/css","magic":"ASCII text, with very long lines (15121), with no line terminators","md5":"6e7e397c94751203e86f819e4ed40a22","sha1":"969a9b8de9cd08a86470f9dd5070138a45f7af94","sha256":"e77d9ac5152bde7565928ad504153e69afdd2966abcc8ef74fce63fd28309f89","sha512":"7040fc16f0f8191ce59b622aa2702624e899f7b1c144424cc1da46cb0b4cce3fbfc40eab1225aac03ccbfa1c56070cfe48597bfcb4b4b7b8da5432d6381d66c2","ssdeep":"384:Ww2A45z6xvvP3cieIsIPryZq8yGLGRXB0Ed5f1a9IKAKwqGDS+wATL9uqmmTl:Ww2z5z6BvP3cieIsIPryZq8yGLGRXB0O","tlshash":"566241335058631cb517d430579862aab13cd2a692132afddedb6110b7cbe8583e6e8e","first_seen":"2026-08-26T10:24:05.309351Z","last_seen":"2026-08-31T09:39:27.417674Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:38:51.751Z","timestamp":1788169131751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=pl; expires=Tue, 31-Aug-2027 09:38:52 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbeteurope.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbeteurope.com/wp-json/wp/v2/pages/434\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbeteurope.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAlleQrh7PJWWLcEG2u8TPJqFB%2FB2WsbMRnMBB6JQu5U2B8HoOCOP%2Fp%2BSKC8ktc7ieY8CuOcLWcQUCQ8%2Bv4xMdhjcXpUM%2Ba0%2BLv1tbpKjNFFKHqJNJUf%2BI2kenPqAO7dAsoYeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33b1091ab58569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"pl","quoted":false,"path":"/","expires":"2027-08-31T09:38:52Z","raw_expires":"Tue, 31-Aug-2027 09:38:52 GMT","max_age":31536000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"pll_language=pl; expires=Tue, 31-Aug-2027 09:38:52 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":134431,"size_decoded":31371,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"300cf36fdad5c9017408b4d9eb0827a2","sha1":"ba60ed7df842401fb8a604359abf46dc08b45506","sha256":"6f1f397a6b40f8293ae7fcc7dfe16778d7f85ee47f0965f2d40c67a109b5ba99","sha512":"92fdbd433d129d492df53287a6bafb3f92c9336ae56c806075b83b645aece18291810484e5b5c7a22d4c37bf0c9abe6a52a7b0d04421ff25da167f45c9b5482a","ssdeep":"1536:FGwozxypVggCYe9RnXpZ2k2YZlxWn96gWJGX+59dBXqRRu:Fxozsd+z096tJGX+bdBXqRI","tlshash":"f1d32b6752a13069251ba73d8e963349722dd003db06d9f4b9eec0a8cfc979148b6f4f","first_seen":"2026-08-31T09:39:27.418282Z","last_seen":"2026-08-31T09:39:27.418282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":-1,"dns":7,"connect":18,"send":0,"wait":1097,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.202Z","timestamp":1788169133202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-5a8\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOszKJVMjCTuLOzDmPeeyhElNyWSphCswZjPf4xKbVeKoYEzL0dSrwumD8b0GgnJJK1lcMH2mDoqvqrHA%2FDMz7yhs%2BotoTL%2Ft7MAf9zFcf5uuEDOHLQLZPY7CGxnMrpDYb0Q0Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bcf569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1448,"size_decoded":1314,"mime_type":"text/css","magic":"ASCII text, with very long lines (1448), with no line terminators","md5":"4bd777296c725c48e6b6e1791c635152","sha1":"0b4e71c8c715a3b429792e963c5b42aeb9d6b40b","sha256":"968201979d57a6dc6d9657c4381e1e2d34c61eaaa38def66e3d9ff894af77fe0","sha512":"9c6a2067f14b6aecb9a8709ce6098baa59d92b0521847e005b8f16d70558deac6960f75db95895c672aa530e2d22d7dbe69abe906d748b8142dbcc7d186bd4f6","ssdeep":"","tlshash":"02318b331521bb2cf423a82507a10d59724dc026b35bf7f59d597a28c3cab9219721ce","first_seen":"2025-11-01T17:37:40.403423Z","last_seen":"2026-08-31T09:39:27.419479Z","times_seen":15,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.212Z","timestamp":1788169133212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 02 Sep 2026 09:38:53 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2FjQIuDuCj4ZYr9HNhhNetisS0vXWBh28ylETCze5NqL3xmgBy9CGh1YfYZRo47583lp1SKkLBxjz6LoGh%2FES3Sk0CwFpPcB7Pkt5lkR6pzTh3xcdXu1kx2qoy33TkBQZTR7BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\nserver: cloudflare\r\ncf-ray: a33b109a9bd4569d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T20:16:20.746634Z","times_seen":432067,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/03/opinie-graczy.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.236Z","timestamp":1788169133236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/opinie-graczy.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Mar 2026 17:13:55 GMT\r\netag: \"69c56953-5258\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5F1R8mADOjyEuMZ3l4WaJmjsN2CMPXQqpUXjXgvEVKbDYhTJ1PZRElpU%2F5J%2FAeT6Y38JMAef%2Bn2i1V%2B0OzybezFZdfmEtxXBhvhCFaWYXl13dbp21smSvLLzSKv4SEGWP3XxA%3D%3D\"}]}\r\ncf-ray: a33b109abbe1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21080,"size_decoded":21876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52ba6235fc19efc1f71f9e1209e7d99a","sha1":"ff106c63393ca3e35aae1405dbf01446116c8434","sha256":"ca05b5da4d28ed710d129310a53cfa61ee0f57964b8cccc3c2c031b1a7c6f0b0","sha512":"7ad60602581ee3630368b41d6dac0dcc030603e3dc57be905046e403b897ef51db1a79abec22174f8a14f33cf4e600d331c0948e221c9b41b37e83433e239207","ssdeep":"384:awTqJM1U/rYkwjGwM7ZP8O4FdE/drvJlDPSt+q2AjCP5ms:bTIM1Eskwjmp4+drvXbLZEC4s","tlshash":"2392c05e9294e31de0b42f3dfc222f5432b86635809ba475b43644b24a20b56bf6e272","first_seen":"2026-08-31T08:08:57.465695Z","last_seen":"2026-08-31T09:39:27.42055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/gamcare-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.250Z","timestamp":1788169133250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/gamcare-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:33 GMT\r\netag: \"69fb2a55-1496\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRDH4B2vENuTle%2BzB8w0OJLOHOZjZOzdukGXcFq1%2BsYQwo5HY2etl4FqB49agOHy8D%2FjJ7nSjCDt%2FxWtoJOnFc%2FqjfMYZUx7yCnageETEh16mmEneIYpoo%2Fi%2BtRunfQQD%2BFjcw%3D%3D\"}]}\r\ncf-ray: a33b109adbec569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5270,"size_decoded":6073,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13a4c0199375d4cd3588a0b0024d6b57","sha1":"939007e67050a62cbd2c7f6fc3f73a9612fc197f","sha256":"64227876fa2b8ef9038309462cd8d8c0c0460ee0d2cce0f4ba1117fd1f629bd0","sha512":"5708bf31ccaf3b1c25cbcca5f7fc2111748656d32371970453f26b26a72d2088d5025320aec18f1b3f19616675bc0b3affa64540e90a81da1156fa6fa8a12bd3","ssdeep":"96:8Elbw+iXj+J4arxOc28cEMbbRrYDdVW60g0bd+yXLdYN2+qtY++H7Ooj4eoGZrQ:JwTWanbbRrYDnE5+Kg++H7Ow4RCc","tlshash":"5ab18f9432588b49fc937bb170c04f96d5047b1b4a509d9647c892e7a70ddc24b0e753","first_seen":"2026-07-16T11:15:08.65552Z","last_seen":"2026-08-31T09:39:27.421619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWHVlEP2A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.584Z","timestamp":1788169133584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWHVlEP2A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbeteurope.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21944\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 20:19:19 GMT\r\nexpires: Sun, 29 Aug 2027 20:19:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 May 2023 20:28:35 GMT\r\ncontent-type: font/woff2\r\nage: 134374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21944,"size_decoded":22757,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21944, version 1.0","md5":"fe4d58246dc815a20319a8727a6a0584","sha1":"9278b1a587f373b372183ba8103b5d347c47c1ea","sha256":"70acfe34a8a9a0798149facf2f25a7ff45a46f0fff43a90eba47eeddd444f396","sha512":"ae0e3095dc4fba9f02bd1aac942b96112970a12922b4bcaf147998bfd22aad6e34a285dee8f6ce5975362d256b0d1981bb62034627ef4bcf87495c297235402e","ssdeep":"384:UqEo+ZI5F4HVYS9u+MOcnQto58oHOU7hewvGiomzdrkpzS:m9+5FYYS9u+MOuKo5lHlyiomypzS","tlshash":"d2a2e1984d95bef4ff87d83e1348dc865d3ea6e5e91cd6490ce02ac20a04686786477f","first_seen":"2023-11-07T08:33:52Z","last_seen":"2026-08-31T09:39:27.42227Z","times_seen":39,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":30,"dns":1,"connect":0,"send":0,"wait":22,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.621Z","timestamp":1788169133621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl; cf_popup_unique_name=GVgRBVsdH1wNGVYIDhcbBFQ=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 10 Jul 2026 05:05:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a507d8e-58e0\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Trrs3%2FfmydKoAemnbi018EufP%2BiNR%2Fp%2B%2B1ARUGpFkZYVpmtU%2FtBouzZYHr6IhhSCU3lo4sVDyfKgxUWwHqKlMufdCobvW8Bw%2Fmo7ugW9j5%2F6ek5pPmG1wT6aWZrbeNwUsf7bg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109d2c0c569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6222,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T20:35:32.265487Z","times_seen":51542,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1786353430","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.204Z","timestamp":1788169133204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1786353430 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 09:17:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a799716-1bcc\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=En7322YlWHqh1u2V5wtOfxpagorb2WEaaILTIl%2BmwnZbLbsGgZ8DcBN5483YbCBijXLor5XK%2FEn%2FERVduBqSSXT1gNNwYG37q4XStRqrZ079JUl3RDEIoDsrk50zp7r2X8pkOw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bd0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7116,"size_decoded":2619,"mime_type":"text/css","magic":"ASCII text, with very long lines (7116), with no line terminators","md5":"5278ece4ebb3f1b42d07b64eb882d6d9","sha1":"03c8ac8d51ff4dcb31c62c0459d8d134512791d6","sha256":"d632d5aa4416880990e358dd47265e06da36236918e78a37a69f24d64a762f30","sha512":"32c461389eec17c1ccac5ec79608fadbe1250bda8c912d2a0bd7c3fedb62395c3e3a1b040475f5b66d41886844467056c91216ef4f3c387635d81168c56f3a5d","ssdeep":"192:5YDo3Km2Omtm7mbmFmcEmDm1mHmhm0m0m0mFmamxm5Emcmsm4CEm1mXmZmZmhm1P:Jd2poySwczqgGkjjjwt05z7LHzgWsskp","tlshash":"11e1b83e0235e2b059524c1535ce2a052307f72287f1b6efd6fc89dacfc652b2669b15","first_seen":"2026-08-26T10:24:05.272588Z","last_seen":"2026-08-31T09:39:27.425425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/03/wyplaty-rainbet.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.207Z","timestamp":1788169133207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/wyplaty-rainbet.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Mar 2026 17:13:45 GMT\r\netag: \"69c56949-4744\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pKme5FvEsML5hGVs%2FIzkHxibZqvX0cHhkYTTTSuX6zSEv0%2BC3QMGl82wfQhMXvDvPDcENnUy0dzhBc%2B%2B%2BrVgCqf%2B1whIliskYs%2BV1as4j%2FVUW0H4lqUSmO7R6ooFanFvzaqvQ%3D%3D\"}]}\r\ncf-ray: a33b109a9bd3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18244,"size_decoded":19048,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1103b5f431c821d2feda54902529b88b","sha1":"67a5be93c0ab1e82a8d0be4e2f35208ae0280b0b","sha256":"fb4eb3bd550a75b6da3531e726a40b77f3fcab9dfbe387b67e34dea1ff54803a","sha512":"35d8b271c2bcb836f9eb766203609deeb3f69067594934e5dace1c94c4ad29fb9cdcff36b2b69f47e6668a259842118273e0dde5dd35bf50bbe329147db380b3","ssdeep":"384:/wr+d+Z0dxZKDgN/atgOMTe45DrB0/5jx7uBgf0oLUHXUBmX:Yr+KExZqgNOgl5PB0/j7MxHkUX","tlshash":"1482cf84527ce2ccc5f539b210234a495b9af95bb2e9282123604072759b8fed4f8b3f","first_seen":"2026-08-31T08:08:57.488811Z","last_seen":"2026-08-31T09:39:27.425944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-panel-glowny-pl.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.240Z","timestamp":1788169133240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-panel-glowny-pl.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:22 GMT\r\netag: \"69a08d42-8704\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW%2FIJeNwaPVIxkbRB1esfz5Jp2CyiQxvzqhQG8e6K2ddXX%2BYTQslLSG6gU%2FU6%2BFg5wE5PmGt5ovK%2BUABaSpfB85sWfgehZJc08gjJz5xvakLoDGscT56vlcHCLErPhsOkYExEw%3D%3D\"}]}\r\ncf-ray: a33b109acbe3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34564,"size_decoded":35362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d3ec46fb611eb5f051c1421426e8339","sha1":"1f4ca3070a3fb7b1be0978c2ae46861b6d007479","sha256":"83505209b643950687986f1631d17dc18eba5806e43f438991f522830179980c","sha512":"6e174cd3653b77ddb3ca917213a3488a89bd445f4b61d5d37efb4fa3520b7cdfd6862a58dbcd1acdf799613de3fa1d5aa5deba65f6e0c0b4a71fbb4e2980c339","ssdeep":"768:oTDymmWMXFUt0JB5fLO/BtzNdZ+HoS5qISVL6+sLvL:GDmWMg0J7fa/nx+FbVvL","tlshash":"f3f2f134f26523a6fc81547caacce32012151dbcad01e1ad522d938bd710b05beb6bdb","first_seen":"2026-08-31T08:08:57.474058Z","last_seen":"2026-08-31T09:39:27.427443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-metody-platnosci-pl.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.244Z","timestamp":1788169133244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-metody-platnosci-pl.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:21 GMT\r\netag: \"69a08d41-3ce2\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il7nfa6n4nZe3nnC4HwexbYdp%2BL2i31u9s5jtdAURchI3FpPwOLDgyvN9iWsvB5DaMJD83G8B1bUZFjSPyXrPB%2F14o32SGXEx6DoP7ix3TDtqyu6ePfPpmqz3EQean%2FRqXuH8A%3D%3D\"}]}\r\ncf-ray: a33b109acbe7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15586,"size_decoded":16380,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a5e15724e8331631496d3138ce527e2","sha1":"b5e3cc8cf3978c18e02231d41666d5de94de2637","sha256":"deedf9dae9df431b54db1e76c197268fa618ca834f8ae639ea82ff093d0c8617","sha512":"bef1204ae4c3145a0d8d0b8d4fe6e6aaf39b6ddbb39081e584ead3a356f8d299cd470dbe49b37b41a4768b38c96d983edbe422d269bf47c5d1ccf7e15f5e0bb5","ssdeep":"384:vwTAIts9rKITXeaa5KDX5YVBgXosIEJEj+hHpPIOYHY:oT3ts92wXeh55gXpIBj+hHBIC","tlshash":"8862d0e60b1ebf5bd0a6a8341427f291deb54713e20a7fb5920957e47310f384e0d59a","first_seen":"2026-08-31T08:08:57.456214Z","last_seen":"2026-08-31T09:39:27.428653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/dmca-protected-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.248Z","timestamp":1788169133248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/dmca-protected-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:31 GMT\r\netag: \"69fb2a53-c44\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRCUHEVHdA2o7qaGu9sMSmfTjO2P3lE3CZUOK82nW8BPca2OKkTCPYvNvbMg9zwHZSIqVv2Qw8%2BjJtJiCbkWspeDgWaVRf4Yxduevk8rU0Qu924cXdpIOcznhXiJcU7YpUFwmA%3D%3D\"}]}\r\ncf-ray: a33b109acbea569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3140,"size_decoded":3928,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4580e6da433fc59c555d0b4c3006f2e2","sha1":"573a0e22d03cdb7aa794e5409c317018e146f5b5","sha256":"884b61ebd16a2bc9b304383975a232d0b8a9ea1ce32fd37e49a6dd613d94a5bc","sha512":"eba650982d72662f651a18a63e546aac2ece5f807a088242e09979ba575b32d121b0ce460d3739ecce8d1e53dde909f22beba9d38eea6f3e0d03d3df8c9538f4","ssdeep":"","tlshash":"74515d9f17ad4f1cefbcb5b932c21f52e777a92fc2af5d128041076309053d222040a6","first_seen":"2026-07-08T12:11:29.195932Z","last_seen":"2026-08-31T09:39:27.430787Z","times_seen":17,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/gordon-moody-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.251Z","timestamp":1788169133251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/gordon-moody-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:34 GMT\r\netag: \"69fb2a56-20dc\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BUje6KVh7AIGra61Jr5LQm6qynCvlQ%2BF2hnNkPvuVxUkKh3%2BGcMSRTzBeLEkyIzkofKtSp1wvNjDqLswXQobcd1ACvW%2BsDd8S3y4ijWHGF6BCequa7lOeJRDK8WF2CmoWqI2Q%3D%3D\"}]}\r\ncf-ray: a33b109adbed569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8412,"size_decoded":9205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b6801447e2a0eb8005ea9b1ea536b2e","sha1":"04b25d7031d68f1cb58c359d69152f88c0ab0407","sha256":"0fa8da4c5da56ff8399c43b87a0358f96eb5de05b69fa5f3fac75a5ca94cbb28","sha512":"629ee0c1001ba59596518e1dabe32ed8edd8492086fe36474397de9d9f01e38d5d27278fd4a95c74f3272156af1acaf97629a8f542108ad254c71c8a6da56b7c","ssdeep":"192:DwTOz4Izc2gY05FFP/k99+jn2qYlt28b0Ro67dWbHbp6par/ss:DwTOZzd70xwYHYfe7AsarE","tlshash":"7402a073bf2b9315c4b19b3951a6f3c145e06c770742e49ea25601f826c623b799c0ca","first_seen":"2026-07-16T11:15:08.679292Z","last_seen":"2026-08-31T09:39:27.431513Z","times_seen":10,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/18.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.258Z","timestamp":1788169133258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/18.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 09:08:13 GMT\r\netag: \"69a00d7d-c50\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hyT16ftlsAZcFqtvdvCnNLmHZ0Tv5Hx0jp5D3TmbwSKvk7g6S%2BETVihINntXgBlbZcArZEmlUWfkNk9CAKjjcYZ7Gn8JZN325AQA4NsaUjJPxT51sHarlERHbPIBwqzor53uw%3D%3D\"}]}\r\ncf-ray: a33b109aebf3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3152,"size_decoded":3940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4dc2d5bd883e48f99a0242bfb4bbcc12","sha1":"d19b711546152c357d43804a390f3899b30b0634","sha256":"bb21ba62c611e2c13951f599a2c9b52b6a9734d4e763d02dcd0b48abd48ef548","sha512":"11b4379b80f5dd8f1e3d5bd27d0e083633d683de248892e82d946556009de9deb42ea9f1b46c384820a36715c7f8e1315091dfd3c99780ff280ca704dc4535b2","ssdeep":"","tlshash":"ed510c3536ab4b21f518b67578b3434099a5d601aa2372a7474b1f7303640e86d9139f","first_seen":"2026-07-08T12:11:29.175132Z","last_seen":"2026-08-31T09:39:27.432355Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.194Z","timestamp":1788169133194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-efe\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wu2E79IRqbfkLqlXj%2BGS0CZur3olcheoflGOzKntaqDPvNPI1cAU4TMNWXGVmHZffgY7%2B%2Fzp99bprd%2Ff84kXuoZpEvgx%2BFJTSv1%2Bkpeti8fz30905bo04XyDskNiy1faCICQlg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bc9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3838,"size_decoded":1859,"mime_type":"text/css","magic":"ASCII text, with very long lines (3838), with no line terminators","md5":"5af496299aee6059a6687001a99149f7","sha1":"df0ae8357939657efaae1583f49356637d3d97c5","sha256":"2258580c9c5f9cb25da88a189d17a48fb67cab59150b395bae3ffff16a57c991","sha512":"3128fae8b08a80eccc4cc8aaefb4b8604a2c46dcfdd5f526e1de19a9550cbe7595473ab39c1a7a5aef207098d38a4e9553a6b55de59e00641cf14d27931c2725","ssdeep":"","tlshash":"3f814235e1f12c8ef32fe54c91e0a6b5a21c830ee81f5f9c9915b5a265c6584803f64d","first_seen":"2025-11-01T17:37:40.393924Z","last_seen":"2026-08-31T09:39:27.432983Z","times_seen":12,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/style.css?ver=7.0.10","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.205Z","timestamp":1788169133205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/style.css?ver=7.0.10 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 10:46:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7ef213-3188\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1iSh2MprawIHMJosY8zmkZM5rpiVGCxLJZHqu0s%2F4GE1%2BzXi8Q9298TWF15avJeUqbhEyqycu%2FtCU3xe%2FDqqYL%2BDOAAT94jmserGbOK5PAwO4EpJqsGgvS%2FMvFm3PRjyUFd2w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bd1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12680,"size_decoded":3486,"mime_type":"text/css","magic":"ASCII text","md5":"7cdbe1e78d7ab35b6a0d07bb3b69a7b8","sha1":"a7771684810ea46df92913470c0c79a92f56eca1","sha256":"8b59dd25f558b7f8cf844f01ca0359335a19b2660cb544d71e85de2e6c31a842","sha512":"e78b71898a3654d6537031489e078c5d1348f93c7db026308ad3edad8171ecc1e3c5418edea7efc65969d9d240b9d0fd8ce9062d14e9c0a9ba13fdbfd6243364","ssdeep":"96:Ct669FM1EzU0z2JuZdUy3A6DvC2FCwnK44WYBsWFsmXXnXydFgjeLCO49s/u7ZnK:CcZ0aJqUy3rh4dLsqYFiemb9kuxlAo8","tlshash":"b1428591abb366f0b93ac1352247fa647b6c4043570ea974e6d0b1887e04be819b3f5d","first_seen":"2026-08-26T10:24:05.359137Z","last_seen":"2026-08-31T09:39:27.433516Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/mastercard-pay-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.255Z","timestamp":1788169133255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/mastercard-pay-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:34 GMT\r\netag: \"69fb2a56-986\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTvEmBszfy6mX2CslMVTZNCrQohxhnriPQzI5MSLKyITYt1qK1O5jPt38RqVV%2FaiVm8nQNFYYsxLFf8SwN9eK69cl9JCmf7%2Fm4eFTxSlaxC8heYRv%2FjQ%2Fm%2FtepCi0fHwk00spg%3D%3D\"}]}\r\ncf-ray: a33b109adbf0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2438,"size_decoded":3234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6968f39faae0d732d3d6d02730c48a08","sha1":"c98a785fd8f09f59155c7c710656f02900cba0d2","sha256":"97a26f2f138427716e4627473687b73aeb12cae8dcf8953f31afafccc83db38b","sha512":"48ce2333248945922b1bb7f6616b3efb1478e41895b90abf3a45792829ec693fbde1e5953153a3a2bd053f60340ecd555fd53cdd8bf0e6a97d2d8edcd13c2830","ssdeep":"","tlshash":"a9411ab13735872aece012ba50912725614319ba4be782aac04453b867529d67ded187","first_seen":"2026-06-22T07:10:50.43264Z","last_seen":"2026-08-31T09:39:27.434173Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/ssl-secured-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.256Z","timestamp":1788169133256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/ssl-secured-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:35 GMT\r\netag: \"69fb2a57-12b8\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5Bw8SBAcBLzflAZbhWy%2FaM6qp7SIogqyFhZbhY6SGKabxyod2O3pNaQ%2F6sIlL71ZfyyjlHX17C6nxbl7eDnjfsscOQSBn65Pl3ltWuZDfJ%2FeT2TSPthD4cMmkk84OM4%2FrWRHQ%3D%3D\"}]}\r\ncf-ray: a33b109adbf1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4792,"size_decoded":5587,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2852abb5d2784a21f7af235e332f6d32","sha1":"cd836f41e0e47bab1729096e8ad29e8085e2be65","sha256":"f19c6225cdc5789bef81e53a10e28265a5185bbcbb33bde7181be362ce8c83fa","sha512":"1e02c32c8635c6f6db2d673b0a185de7bcbeccf6751e77999bb9463d7eb5e84da8d940cec19c0dfe40547ed410f63b2255b3ad81b380182a71acfbf14cedfa4e","ssdeep":"96:wElbw+iXtcFUwALK6FBhvWn4z0lqjyQHlyJx+UZ5isOYgetltGau3yYAkmbpFBe:VwTiyVK65ug0gjyQFyJpZ5dzbtijafe","tlshash":"c0a1ae7dd69172c0dff72e38a0906d505f5e1d294fc2c28392ed1201ffd4982a45a00f","first_seen":"2026-07-08T12:11:29.150265Z","last_seen":"2026-08-31T09:39:27.434805Z","times_seen":19,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/favicon-300x300.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.671Z","timestamp":1788169133671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-300x300.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl; cf_popup_unique_name=GVgRBVsdH1wNGVYIDhcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 08:55:59 GMT\r\netag: \"69a00a9f-f30\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEzonHgw5hmjVdUWVUpFtaaWJtthuh3ssm3ntqerlIkk0g6OaWMHMcwVVsq2JybCw7L%2Fbqvc%2BQp2uOeUYIWNIc3ZGouAEDYGWcHVBWM5VsgTfjCHWWC7%2B7WDFx8RhxgUXqJeww%3D%3D\"}]}\r\ncf-ray: a33b109d7c12569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3888,"size_decoded":4683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25880aac5ebd275c79ac797c9e6cb31e","sha1":"421efab306a23b6d2b1a2553097ff3a4960386d7","sha256":"4b7eabfed2d05a1d115c2d7d05342f963f01609053631903aa5a22a09c951073","sha512":"1f04fd009dc2b87ff779887d3786c837c80dafb61a008147ecab6b6f5ddeaaee16d90cd789971ff35b91616c3f29db9c367966015b5f5d4f65fabdd2a51384ec","ssdeep":"","tlshash":"e2817c601770834be7a9c97850a22fe1e75dbcf58c180eb6c2cd61050e708eb74ed26b","first_seen":"2026-08-31T08:08:57.478107Z","last_seen":"2026-08-31T09:39:27.435355Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1785192406","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.180Z","timestamp":1788169133180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1785192406 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jul 2026 22:46:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a67dfd6-207b\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2B%2BDJubZPljbUkEa045fURUQD9j%2BeypIw3VC5kfGypXUFumx9Z%2FqsbnN0hqwh9CSqaq8VcgroawhI1GHeaCCzHuro59vlmPsnUDdB4wCMgLELM7dgvpgYP8G%2Bw02aEeIHGEMdA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bbf569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8315,"size_decoded":2162,"mime_type":"text/css","magic":"ASCII text, with very long lines (8315), with no line terminators","md5":"b7fab1e40af1d3b813b4566f445fbb36","sha1":"d835d2c166c4429ffe4bcd83f59de9807e47605e","sha256":"a643d461c96804ea4ac71b3cf84732e94a95a3e2de9576959ff0efe3c12cec31","sha512":"34f9ecae8a60528b1ad7889f5e01831160bb3c1bb185fabfd5911d594b6377f41b5f6ccfc168b6c4f5fe11b0bda5c0317a6a028d97311b9f3493fc5a1c68b429","ssdeep":"96:sRQr2NvADkzwQXcl6CPO85TmgHFqf6tpAtxi:sRQr20+wQslvFqf6It4","tlshash":"f0021f62f4c2523d702f917c52f2b73c7e3d9852da022f3ca4a6b7b523871db1662685","first_seen":"2026-08-26T10:24:05.354183Z","last_seen":"2026-08-31T09:39:27.436673Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.185Z","timestamp":1788169133185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-51e\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQkhWA2A2BbquqI%2FfGABqEXtYXxiY4y9XhO0cRYGk1HNzbjRmUv%2FgoKMfCP0rChf%2FzMXnGY1%2BTxnI5ZUCWlEpzG85Ve0LKqoaUjc%2BGTA6K%2BVdo7ag9iRpRVQIiyLb5ppvQJ8SA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bc3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":1350,"mime_type":"text/css","magic":"ASCII text, with very long lines (1310), with no line terminators","md5":"49511f8bc74a2e403b9a1111ae593156","sha1":"54d4ccd0e0c2b45fb2f5c86032bda2e4a039ed27","sha256":"e90754ef95eb9e4a22bb6ff12c57dd5d428b93f463b60e079801d9e48dfdb4d1","sha512":"6da7715ac374ea3f1fd99df45f0d00b04c19436505fc23fd7dbee0118f8c92c0ddb0d26ef9e7fb8b270cdec52c85ff1c56d44e24066a89af69370af8a0ded576","ssdeep":"","tlshash":"3c218777ea50f61da02ed568e242559db279d029b306aef7c845fdb583c62c300b11ac","first_seen":"2025-11-01T17:37:40.366875Z","last_seen":"2026-08-31T09:39:27.437267Z","times_seen":15,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.214Z","timestamp":1788169133214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 05:03:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a868abe-13f3\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFasUSneAsSKCkvShWnd0pYUtfxBFpnritqB6AD%2FlJIOoB0VlcCGMY1jXGxsbR6QPE9Z3zkQvPR9jc2vUJ4KC%2FdmTechg4rt%2BK%2BKzMJtEp9x1RRV3h5%2B0QWWD6da%2FYIuSe5rGA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109a9bd5569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5107,"size_decoded":2694,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-08T19:41:34.199683Z","times_seen":7277,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/gam-stop-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.249Z","timestamp":1788169133249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/gam-stop-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:32 GMT\r\netag: \"69fb2a54-11e2\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJTE3irfqsV61Fs%2BoWkuabtcIv9NCHjErR%2F3SAQrIhP9v562%2FZGEZrPUuYVSZN9VaClYVwKEE6xwmPWN7aJQGfYVUi4dd7AaFBkfsjzmWQJ49aNRxWItA4lKPKISs%2BmHj706TA%3D%3D\"}]}\r\ncf-ray: a33b109adbeb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4578,"size_decoded":5375,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68273ee78cb0a572602b04987c2ec5e5","sha1":"f7abe89f849b5951bd7787d5078bdb9d52b54ce6","sha256":"0c9a7ee15e0494134c1756d89c54cf887a84ab3b28aaef31dae30d7a558df6c9","sha512":"75a0a11961b946d49f20176c3ed58335073b5db71b566a96ab237d4993835075df28863785714adedf67d44653bff9d19e8f3bafc0a10865f4cb291da026e234","ssdeep":"96:RElbw+iXF/E3icgCBUIULfgIlbVJ+h3DRkAZG+IX24kjA/BhYAZeWlPugz4T:8wTF/EySB7ULfgIlbERBEXRwAvlWd","tlshash":"d3913ce05255c714f4e03f71b072db13d1326a8a9f87963c890286d69b0d9da3aae8d3","first_seen":"2026-07-16T11:15:08.684555Z","last_seen":"2026-08-31T09:39:27.438465Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/visa-pay-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.257Z","timestamp":1788169133257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/visa-pay-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:36 GMT\r\netag: \"69fb2a58-d1e\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZzTlXsivTqQjzod1RRjN9RG5MteD%2B1aC%2FlyI0mXzvtRhobLMSmqtJ6%2FWL0FiN6BnPEnbiICT9pL5vH7dZmBqOL3W7pzMrOITj4Wt2AdXEfRluMuecjPAIZCYiYm4iu7t3g5yA%3D%3D\"}]}\r\ncf-ray: a33b109adbf2569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3358,"size_decoded":4150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf9209b13206fc9b1a84b20f7e6ac1e4","sha1":"f031767f8e5a55e7a771b7c5858027a06d20b2bf","sha256":"3136bc4be55e0f6fbea7bdbfd1197cd0184b1db9e46fccafff7dc7a26131532a","sha512":"2d66b597c8cbe7ce0f5ddb3cca758961a75140872741a1fca5ed30dd046417a979a76d3a0bfc344281ce6fb7de2ea63d7c4e603712a50a2a942278c207e4ba10","ssdeep":"","tlshash":"c2616d52b775e2c5cec460ba75684b66209d9778f595fe4080c633d7cd250dd505de02","first_seen":"2026-06-22T07:10:50.430639Z","last_seen":"2026-08-31T09:39:27.439013Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.581Z","timestamp":1788169133581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbeteurope.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 20:19:19 GMT\r\nexpires: Sun, 29 Aug 2027 20:19:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 May 2023 20:21:35 GMT\r\ncontent-type: font/woff2\r\nage: 134374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25200,"size_decoded":26013,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25200, version 1.0","md5":"351540371bc840ffc95e0b3e670d727b","sha1":"ac66c6c30243c81b820efe5732770273d24537d4","sha256":"62429575b7d315b6ad0c016109842a5e4a0532d06eadc973132dbec61169dd86","sha512":"616a8d1d068b41d6c56e604bf7da8b589090fe00400f3676806b1bc914d043f7a1c3c46b8636433b2c43b2e825dfa884124a2ab03ab5f94660b213732c5da930","ssdeep":"384:RQA8Qmg6JMNFG8NuPLHnqDGj+/+UNQ5MykXq/UT8f3m3W+u+jvcmmF2IWr:RpgWNA8NeHqDN+UN1mcTRjE14r","tlshash":"bbb2e1515097fb2619285f26c93b102035e872b42929f992315ce4b1c6adfe8d8fcadf","first_seen":"2023-10-28T08:32:32Z","last_seen":"2026-09-01T04:04:56.426737Z","times_seen":294,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.171Z","timestamp":1788169133171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 08:52:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a009c3-b83\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s18HZX4Eg4%2Br4u2Lgyjv08V3ivmmdbr4IOt2KGVcINOo2PDUt2yvkZI1w6A9eZ0EGNynl0VBZXQ%2Ffm0qXFArNqBj3KAaOn9qHjFGEIlY%2FXvi0nDnooh2g2u66xO3q7pJlH%2BMYw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a5bbb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2947,"size_decoded":1831,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-09-08T18:58:01.823441Z","times_seen":141239,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1772095691","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.179Z","timestamp":1788169133179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1772095691 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 08:48:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a008cb-ade\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Jt4JCN2w7jiKZjstQ06s7YYStAoZRC%2B1Y2k7X968BQY4ZPHvxPAq%2FrB9fPysdA%2B5eG9IxZsTTtsGb2bQJvCHK%2BlBvb%2B1%2Bd2SNz0%2FYEwLdG%2B6i8Be%2FrKVrpkWybFylo2h9ztNQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bbe569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":1533,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-09-08T19:21:06.272788Z","times_seen":34324,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1786354359","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.198Z","timestamp":1788169133198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1786354359 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 09:32:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a799ab7-751f\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=um8gPzrC9ONdwvxkqRWpIebZlcylmdOWvQ7y5RJx07vHpcUP68VODmqlXUDaIZbtoXIZfrXpcPZof7EsQEGrSbHYXUoAGKNbLD20wn994lbE5jYI54G1P5DI0AnIYo0iYu3uRg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bcc569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29983,"size_decoded":4952,"mime_type":"text/css","magic":"ASCII text, with very long lines (29983), with no line terminators","md5":"a88c43d696d9a52586f038cbd7ee87a1","sha1":"c2fee095b11c3983439c013b321ee28a8b1ae872","sha256":"49637d662bb49a5d59ce6a9b91c7dab59063ccec9be64f380ef2d13a308b0012","sha512":"4890c3dadfbe43bd511be2b65bb8202f909ca81a7380ab3c69b88f18e5e556171f9372a06228877c0648c573c7be0bf8be4cdea3c0992e7b4eeb7c4810b2f710","ssdeep":"768:FfuuUFyY4MsQMz5tuALgd3UCzoOGwdKY4mFUqMb:PisQMzpLgvu","tlshash":"0ed2cdf3a0932369f01fce2752d4f2a9a23ce41eb60137eb9855a73197c77d206b154a","first_seen":"2026-08-26T10:24:05.362636Z","last_seen":"2026-08-31T09:39:27.443088Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.216Z","timestamp":1788169133216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 05:03:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a868abe-169f\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NJdMbJO6PiHL9QEEnwUsRCE931R7YJ0P3j04bhkZNCCfrThe8SZOzqR05%2B6lRR1XDJRq0yZNa7wYYigqdabz%2B20aDDySUNBOQMTuQ6mnzmDuo1csG5twSQWzDCtO5mTgdAawQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109a9bd6569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5791,"size_decoded":3318,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-08T19:41:34.369381Z","times_seen":7183,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.218Z","timestamp":1788169133218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 08:52:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a009c3-348c\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYfK0hA7oVpNjFvMxKpUZDJvVdYRWAYmtAawnLt6192chZnFGrGEV%2Fz%2BLwT55RnaE%2FSlhfSsqP1LZ9yvCI%2FQLTPWK%2F9KmhN8K3qyoNbE3Lwdug8EN%2FSNP42qnk5mU8JHaZPdSg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109aabd8569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":5099,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-08T20:35:02.586302Z","times_seen":242510,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.220Z","timestamp":1788169133220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-15d9d\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvCCPcnJjOpmD4%2BhvpV3CPQJr9MgSbovo5yXMLiGXoN6qJVZSxKPhzlY%2BSPzrJIpKuwIMUBvfF13i5JZzgb7V7fKr51344E62pxkPZ9QWPFbXlcG9R7cTfYHdQa%2BJwjL2BwVAg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109aabd9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":31776,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-08T20:16:24.993557Z","times_seen":502758,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.233Z","timestamp":1788169133233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lllHh6Csn3HoJyVbSS5Q2wWBHlvbpU8qXhX6XBRQyBBGAW79Zl%2B4j5m8hJZJ2or6bh6bLHWeIK64RyoNkLI%2BorWoXeOLbmw6l09QXpMylnpOvcfsXNbnd6RNZ4%2Bu2voUF%2FRxVA%3D%3D\"}]}\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=5,i\r\nage: 5433\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6908c3d2-173\"\r\ncf-ray: a33b109abbde569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c74bffa53f2ad73d1f225ddad7cbb95e","sha1":"62bb13e1b2e972f7a3bbf390a664f87ce4ade0be","sha256":"f333ef7a6c03e39fcbebcd825cdd1751661a56a180dc9bb0ccdcc6fef3366554","sha512":"7e682b9fdfad974aaa0cad7359ce44b25ccf9dffa8099ad382ef6839c8d6d12711891a543d269b3546d1935c407e6941927eea3566be3aa2389924c4d1874f44","ssdeep":"","tlshash":"6ce0df49531d0c3cb5224620d34836b4202642a3a648f998cc331938312860fb87f6ee","first_seen":"2025-11-01T17:37:40.39679Z","last_seen":"2026-08-31T09:39:27.445169Z","times_seen":15,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1786354359","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.183Z","timestamp":1788169133183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1786354359 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 09:32:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a799ab7-3bc4\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EY%2FxaX%2BP0JolV%2FOoWfPS2SiIOrcRUBv%2BRJhijkNR28S%2BKUTWqTvPWfGvfnSGSzE4cj9ZleXPHlP2IOWo8uIdpvKovR0mKn8zIYYGsfZM7CAw4GPfsVzal42JkAqRv5yoSKE3IQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bc1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15300,"size_decoded":3733,"mime_type":"text/css","magic":"ASCII text, with very long lines (15300), with no line terminators","md5":"ec98025e5cacd27cc9f3f24a11d3dc14","sha1":"dcca26d428f171cacf2dbb7edff34ecd90883e12","sha256":"8d5171f1eb8147bc5e2285baafd01d99fb7f2bd862f836b06d8ecf5b02990195","sha512":"78c93dfea961e1a28abbd9e3820d50f6fda2c271ae68c14a2df38e3fd97213fd6ea0b44ac037e7a0af0df8a8f4575fe42ceb82323a3c67e55b7f2e57beb3a90f","ssdeep":"192:A8X9KP2/E85FXGt5aFV414R484si0ipb9SFbSU2d7nZK:hrkdRL4","tlshash":"3862449246583318b023ca57c3d96a1d713ce1125a121afe6f666a2bcfc3766c3f6347","first_seen":"2026-08-26T10:24:05.320013Z","last_seen":"2026-08-31T09:39:27.44585Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-bonus-powitalny-konto.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.245Z","timestamp":1788169133245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-bonus-powitalny-konto.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:18 GMT\r\netag: \"69a08d3e-5152\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nuZ%2FmW59ESiuKpH%2BxhyXllLbLZPqPT%2FmiDDC5x7p5GxK6EDL0mHqbnAXnr6bgf9L4E0sRbVXZ6dmlIXGS%2FZEsGMflLPGYhQzQu90k%2Fw6z7f3pVuVZSvA6PQi%2FfCKhPFgRnEAUQ%3D%3D\"}]}\r\ncf-ray: a33b109acbe8569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20818\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20818,"size_decoded":21618,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ad1fd40a958de24a6ae67a9a7e3d4fa","sha1":"9370f9fa58b6b7ff037fdeb07c9308418a36ffc5","sha256":"04bcdf4af1b2449a8c7faf515a244076bde3b3f697c402a11d63e5a2a8b3a4de","sha512":"7dc45ce50b39e8e94edc10ff1b88fbe6f58f497c791887465d611c549ab821d6a747be2f2b8886c2880d835965bafe2314358a578064473c1b7e6d1ab8a83756","ssdeep":"384:SwTDymmW/rXiWXbGfqbA/fj0DbUBVHddvij0OfnKXa8+mGwYdgmO/DN:jTDym1++yOmBVHdAIOfn84wYdgmO5","tlshash":"6292cf36b32ad215f655fc3ea1d4936467708d1f3e0a49eaee71278c0044e861ae7b85","first_seen":"2026-08-31T08:08:57.492224Z","last_seen":"2026-08-31T09:39:27.446463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.200Z","timestamp":1788169133200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-3325\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5432\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYf8kPpqrhspKXEjTASSuR17SNawR0AgR3hS4prz4lzhNFq%2FTTWwSw%2FwfdMkoYE2vTcouWBq6rxxJnoYtTIvd%2FjcxzUiXANeteK5U%2BeK39L%2FR94H01GUCFBDvsKPWsy9vjx90A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bcd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13093,"size_decoded":2912,"mime_type":"text/css","magic":"ASCII text, with very long lines (13093), with no line terminators","md5":"2bb5e01a8ceef17de0973b1d2457d467","sha1":"6624bafe007bda76ff559baf0e5695cc414c34f6","sha256":"2f0ae51e3499b782e0b800101e65f96c8912a5e5633ddbe52520d67cb5851eee","sha512":"29203f07561709da9b06c307c5145b229e52bc57ad29d1074a605869bb5d4163a5bbbfba718f4d9350c727054d6caa8288aa045aad9613c3c8fe91a2b19cf05a","ssdeep":"192:KN4hj1g9f/S5GyQfLeHHCHYNsOl1AVrFV5rBz:Pj1gJsZKal1WbrBz","tlshash":"594273f261e742adb217cb2a83d4733c722cc0026b461ffff946b6a552553a1c6562ce","first_seen":"2025-11-01T17:37:40.395209Z","last_seen":"2026-08-31T09:39:27.447649Z","times_seen":13,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/logotype-3-1.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.232Z","timestamp":1788169133232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/logotype-3-1.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 10:40:43 GMT\r\netag: \"69a0232b-50fc\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ca%2BC6UlXotvrmuBwazbOO8fwQELni%2FkJEalQxdJQIMfQyi%2FmWiBl8Du4ZPju8XlDH8zk%2BelB78Cq1xGUkT3bD8%2FvkWyU4PrJ24cyCsxb09K%2Fzp%2Bxk84etq9nU2FnT3a8LBAl2w%3D%3D\"}]}\r\ncf-ray: a33b109abbdd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20732\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20732,"size_decoded":21534,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"731386ef479d68f23c1cb7ea5b2fbc2f","sha1":"742bacd1ae0e00dc648df1981d61be477cc8ff3e","sha256":"e669c293d6a72106c2beb0a7ab449e3d7f0bd49e4b5d277b9e0eb62ab040e129","sha512":"acec680f52e0934c7e4b214b83d9f703a5b216ac8f8e1abe1c515087699d829d8635af1d32daf9f310762e2240fbd27a06283146fdc35e214709c6b0be2fce04","ssdeep":"384:cwT96Xo+NHSj/3jBNiWJvzTp0EDcvk+k8wSkRBDF63f7gBV9liaxiB+fF8FYr8f:pTo4+5Sb3jBNFXp0l88wHRDGgf9c8fj8","tlshash":"f592df12135fe5dbebb9afba3d9a060780f22f342132673b8b429318941514b478795a","first_seen":"2026-08-31T08:08:57.44671Z","last_seen":"2026-08-31T09:39:27.448211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-sekcja-automatow-polska.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.241Z","timestamp":1788169133241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-sekcja-automatow-polska.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:24 GMT\r\netag: \"69a08d44-8a40\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7Ud9r2u0zlyFYMeN%2F3vXQGffVs7OCzwOiNAbeZYpG2iR%2FqqsrREUSq3Iq0gj2FcMkn83SjdMqOVpDNPJGn4k%2BVE4Yh%2F4OjgSiaResQMFgdI0zuNTZhS2%2FsRR1Wz33VbH7AQmA%3D%3D\"}]}\r\ncf-ray: a33b109acbe4569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35392,"size_decoded":36190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2c62ee5325889bb1c5a98924eef5959","sha1":"9e8d1c4141bcfb791669877f1dd63fa7527052d0","sha256":"c6a2ab4d7db44a6c0f9348da422c63fe63dbdb0a3fa9c2c0a6a36ecd5450fa59","sha512":"2b063fad5511964c7262816c85fcfebaa66a4d26b8e982c0447b3a89ac8d47ec536fbe1d2419794986521683c17d793619c799609b47a4bba711063d5e7b4337","ssdeep":"768:4TDymzZiQL/ZWJJOUYXhnWLsUwZd3RU9cKd+tjwam4AfxUiY:2D1iQLBKZYXtWLsUwZVRhKdsMOoc","tlshash":"2ff2f2a541a7cb58f12cd87f8dc16b6ba8b031c7ba8674f2cf42b4eb545061121e8f63","first_seen":"2026-08-31T08:08:57.46731Z","last_seen":"2026-08-31T09:39:27.44935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/rainbet-live-krupierzy-europa.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.242Z","timestamp":1788169133242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-live-krupierzy-europa.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:13:20 GMT\r\netag: \"69a08d40-8ae6\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMevtS5lOKhrkJOwvdCpS2at8OFaR7sFpRcuGqoAmTvTkSixMPXrnzfyI6bTAaddPR63QBeTBALu5urvPJfrVsSrtjdCTokyt8iLRRQN8vy%2F6O2ktTe7s5ibyfogDXQ2tzqekQ%3D%3D\"}]}\r\ncf-ray: a33b109acbe5569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35558\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35558,"size_decoded":36348,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a6558966294f8bfa980163aa6817fbd","sha1":"fd68c33ac0aaf00833ed13d91a0ae3b211c71803","sha256":"1b2c78cbeb1b79e27ac6f9dbaca219fb555bfc6995cb744b7139987ff48f46b2","sha512":"4748b7c9a7e42342242e7fb8740c40042f0e9c5c1bcd9dafd5be89fc390c3f56658638660e7092d443c24cb1cc6e4c3b4c9b0e46b8d1cbe32378b681f2ab7dbe","ssdeep":"768:GTDymOyZrpEYQmQpHKg+HfNHBVc4X4SMOilUrTcX61hWc9GslP9Scp:kDj9QmQe/NLcyJrTKw4cFl1","tlshash":"0ef2f1967417a24af0438635c2eb1f01b65e1defc90620c8dbd56bee7a4c92dc9d3312","first_seen":"2026-08-31T08:08:57.476623Z","last_seen":"2026-08-31T09:39:27.450407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/favicon-36x36.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.672Z","timestamp":1788169133672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-36x36.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl; cf_popup_unique_name=GVgRBVsdH1wNGVYIDhcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 08:55:59 GMT\r\netag: \"69a00a9f-378\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5432\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BEA%2B5Wbgphwt%2Fv4PNgo%2FkKM%2BJXhZoFdwfTzYoPkNAtF%2BCO5dS6fLYXWr%2Bg%2BgdBgX88d9TXBEYsVQf2QQfv9DREPm2G9oF%2FRYnSbSrxV1KnDPw3KG4EHzjTDG%2Bjff%2FMjolYZig%3D%3D\"}]}\r\ncf-ray: a33b109d7c13569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":888,"size_decoded":1698,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5028ec7668c60643f8b7d6c0f1d541bd","sha1":"b3114f782a220eb5396a0cf4bdb715b07db49483","sha256":"2b25241184ffa13e8b2b762b876190d2ef7418b8bc3e31add64471a15eafb27c","sha512":"8d1d6105d833cd4ab0c74e587d446c44cc491515e07594b41108956f1564cdaaa6e89904ea530712312633158f36cdaf53c5edea165793ddfcbb13cb729d780f","ssdeep":"","tlshash":"2a111036a3550b9cee1b5af015910b01f7bd3d35832a970be044977a4b089ce6a4e5cb","first_seen":"2026-08-31T08:08:57.461879Z","last_seen":"2026-08-31T09:39:27.451524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.192Z","timestamp":1788169133192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-221f\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e24ZzHyDv%2BPVjVpp9DMMZINiTu0BPHJefmExsEHEoLEVfFf7UPuhgpBFG%2Fl0uLIKZCKmu1Rakg8Lt1jdGLg257aJKMxgiAFMrVcZsJ56VJ5R9aqCF6mmgiVwvTxsoKYjY%2Fb%2BTw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bc7569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8735,"size_decoded":2800,"mime_type":"text/css","magic":"ASCII text, with very long lines (8735), with no line terminators","md5":"3e30683268da9d9237d359c1cbba52a9","sha1":"b4961a86e77b5c03feab8afe2c0c639fc7ad6b97","sha256":"7bed67f793c8eadebe74b344706b615ab13ae48db87615b61b85796f8523b2df","sha512":"430274ea944fe0e8ee11f82c4d263d49d472bedef33ff871e9689386e64233b460d9df3b39e5f53ff19fd2cc3e9ab8fc3ef638432f7e5d663d40bbdaef0eec71","ssdeep":"96:b/XtxMaCOcH6vsXtaXOFP0PONGWK1tYS9+Fdf4vgo0JkRr/u/e/xgXtxMaCOcHMb:bPAaMHwWwc0dVWmGLAaMH2AaMHhAaMHp","tlshash":"510254b2b1632269f14bdb27e960312d3034f076bb831bf7c8935716d39528b0a651ed","first_seen":"2025-11-01T17:37:40.385906Z","last_seen":"2026-08-31T09:39:27.452531Z","times_seen":15,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.176Z","timestamp":1788169133176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Sep 2025 08:36:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c3db79-d0f\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NM8VLzEj91WrnmYjeyQFJIwwM%2BwSC6Pllu0FJoYxGjgbfm%2BMBAC6JDEPcuMfUnGbO%2B8zgDzp%2FGXNBIAYL%2B601mjS7hKN%2F9q0m1kM%2Fe2ZTSw6gkPOMhNr1XNH72QLn6ghS2Ar7Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a5bbc569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1631,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-09-08T09:35:27.886305Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.182Z","timestamp":1788169133182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-31fb\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIPz4MLyQZICRAWL9LYzVgmSJVB1afu2SUJ%2FYvHSNJDiduEinhnYSB6VukPXep8Q5SAUOiTvIpxp5uLtmtdF3DMzRnV69HdPy1ZiKo3PUOrxl8sSEBu%2F310CmOEd27lAlvmhMQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bc0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12795,"size_decoded":3893,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-09-08T19:34:45.52599Z","times_seen":52631,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/main-logo.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.235Z","timestamp":1788169133235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/main-logo.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 10:43:22 GMT\r\netag: \"69a023ca-340a\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV6g%2F%2Fq%2BV4uYtXRnMTdV3oS0yqYgD8J%2BWIV5fb3LCPkIUNALun0kR4IOcuqaCQyCKCPa6fhTw5GFZydn5HbXx%2FimQdzhk%2FD%2FRwUdNKodcS4bKFcPSToDa%2BkX6OBbfPG8tKAZEg%3D%3D\"}]}\r\ncf-ray: a33b109abbe0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13322,"size_decoded":14126,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a23ae0b1c798e726046126756f6c4da6","sha1":"228d04dc7c17a5f60e8c6ebb1e98cc2b3c001533","sha256":"2324bea076e978a8847aefc94fbcbb08f978bf9ffb78a05ed8dee9a2c2a171d6","sha512":"2504e1790cba4a1ea064ed9b681cd53ec1b582197cba940020ff194e9ddda56eee00c78196411722b4bc4de513208ac12272f082be4176cf76e99af200ff005d","ssdeep":"384:YwTb/Q28TwoHB2DJp8zFZ9xpkWb3K0oj6VL:dTU2iwoy6wEp","tlshash":"2752c06cae81834dde4a0e79553b0b0c10fa5f255b3fbb2fc690b598021f4db284575b","first_seen":"2026-08-31T08:08:57.451877Z","last_seen":"2026-08-31T09:39:27.454162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/gamblers-anonymus-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.252Z","timestamp":1788169133252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/gamblers-anonymus-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:33 GMT\r\netag: \"69fb2a55-972\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPPgm7tp5YAkQXaSQkJB3UJoI6owsgwVntrLgv4bAqQuE6Uuo8BfUwKNMRdYZ9v7NvKnI0IBafT59nfKfXGuoasaqW%2BXSdug0ZQeasak0RlFT%2F%2Br67LEoi6ISO6mzfm5CDWMmQ%3D%3D\"}]}\r\ncf-ray: a33b109adbee569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2418,"size_decoded":3210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfe5ba5f7e390d120fd516de975cf192","sha1":"eaa34b43cf9710e613a06a99d5c45a5287e6c087","sha256":"c430af54b4d4f2bcdfcc223ee0833f867afac3a2edb91ef46b46bcafc74e3dd8","sha512":"4b0d97981c1b00568513971034d756fdbc93266d4ff194bf2766f9627c6806ba362161ac7ad6c5aa12187757799bb4804a32933679d52f0096bba6d140c55a1b","ssdeep":"","tlshash":"bc41193ee324275ae54197b2a5c65fc69b64bc5b4582e7b2c315180f33226e83f2d1e3","first_seen":"2026-08-31T08:08:57.469889Z","last_seen":"2026-08-31T09:39:27.455257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.190Z","timestamp":1788169133190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-7b4\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YtdV9WJds%2FkkfkUU5%2FdOEVZgek305gk9wfYHTvZL024pkkRAwPyVYIjjmb4M1Yi4Ns195Ct5WiL099TxiuS5qnWgRuMDABPlEMwZ3R22mSmaQIBbqMohoeOvT%2BjQpTo0aTJ5A%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bc6569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1972,"size_decoded":1550,"mime_type":"text/css","magic":"ASCII text, with very long lines (1972), with no line terminators","md5":"c5d669253477fe521303f6ad9483d097","sha1":"3ccbc26db4ac1e3fb31c62fd6453dc221a46e96a","sha256":"a4b5335f492830d366d4aebbcf181a52b5d1c34da97ffb0e945fd1eaeb5046b1","sha512":"d0cd6b65dacba1eae70c63053e340ccfff6d8eebe05873ee203494af19e9b4866ce7e1b638307731f37c8b8d886414de89da8e0a25afe07744d09dec5184eaee","ssdeep":"","tlshash":"47410071d061263164338a29cb89723c9739be22261b5bfbec01ef01b646b8f55f1a5c","first_seen":"2025-11-01T17:37:40.341391Z","last_seen":"2026-08-31T09:39:27.456193Z","times_seen":15,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/02/licencja-i-bezpieczenstwo.png","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.239Z","timestamp":1788169133239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/licencja-i-bezpieczenstwo.png HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 26 Feb 2026 18:23:41 GMT\r\netag: \"69a08fad-2e5bb\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwhHmnNab5ldPhZqOoeq76C5GBMej256mvLs5KodOltZn%2F0E2ykfd1yXJUJUfMxBMw6R%2FLx6sjdW6VIQiYA436HuP%2BtbrmULOJMiLrgHufOfIIIcKPEFsDryLf1l3wn4fRaJfA%3D%3D\"}]}\r\ncf-ray: a33b109acbe2569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 189883\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189883,"size_decoded":190678,"mime_type":"image/png","magic":"PNG image data, 450 x 300, 8-bit/color RGBA, non-interlaced","md5":"ddc87e1613a55bdb62920bb70e70d59b","sha1":"1540cadaff39ee16804052afbae8c45dde5f01fc","sha256":"647752dbb6296d680e01039d2b71f2df7341b81d80186672ca1807fb49bd8ecb","sha512":"0dac465ac3d41452e79453578ba2e1c98b346ab472b4b4f145b36f524d2d51a26c700a1a830fa07d6f5c073d12dba580b637caea2a0077e94de7299bcab4d8cd","ssdeep":"3072:ElMgY0NE3st8Oj+CO9azHhIh6v9AfVAOKQAi2bilR5Ras0PKZzcxMr3t:U63seOaCOczHhj9oAxyAC5RD04Rt","tlshash":"ea04127893d0c13cddeed91a9ca4c94cd6dc7ca1dba8c5fe82045d3088aba20a17776d","first_seen":"2026-08-31T08:08:57.447903Z","last_seen":"2026-08-31T09:39:27.456706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/uploads/2026/05/be-gamble-aware-6.webp","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.246Z","timestamp":1788169133246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/be-gamble-aware-6.webp HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 06 May 2026 11:47:30 GMT\r\netag: \"69fb2a52-bb8\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 5433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oo13YYed%2BekSJqcccFWfDUMWFL3NGuNfYhAUyid0N0apki6pwSSdlTIkRjctxAWH7heRGli06scRCD3eSljhuW3Vymky3JiCd1q8gO3ZXrVr3VMEqQyAzU0p97cSJ8S6J0WOQA%3D%3D\"}]}\r\ncf-ray: a33b109acbe9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3000,"size_decoded":3788,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c52e6328a591f3cdac45d677374e9ce0","sha1":"1d8ae031be7f3c6add357112a3ee34986a2b21e9","sha256":"7da39093135f7f357cf82fb85aa3196ea84ce1daf840fb6874612d500c514284","sha512":"2aeeeb23aeddc009c26e9311df3634e79313d379d0cccd63dd6ac6101145c9f189daab51ce4088bd972387ed6b71668adb893a7c97622c88dcf60551a9ea75c0","ssdeep":"","tlshash":"da511a9043a14e8ce5628631e4f49f13575c3eb30543da3ff36380a64e286d6b881a5e","first_seen":"2026-08-31T08:08:57.441942Z","last_seen":"2026-08-31T09:39:27.457898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.186Z","timestamp":1788169133186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-184a\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3svbyyZj5L8T47ydEIHyQQ5WIS%2F2HDwRs7huaPpqXpIHrSqNwxFSFq%2Bc%2FY4WwiFidjSlJkDOYgRO5NWyKxDqSJSLJ8s1BEphN3f59%2BxTtI8YI5pZmJlRt%2BgUN4jwCp24gYUrg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a6bc4569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6218,"size_decoded":2167,"mime_type":"text/css","magic":"ASCII text, with very long lines (6218), with no line terminators","md5":"e816bbdf90d3281925f5ef063826029a","sha1":"db2521f47213c84f65bac09a9fffb9095f8b0ef9","sha256":"1c0af84d92f7b2a5124340180960ed98ed53a8a34a1385459677884c70f088a6","sha512":"d614024aa1db24a5267421b7a29b297c36ce45be2f3938fbcc864a14bf9fd7c8e6c95abcc3f5cb653e836413a018b989214b9e3c31b6a55cc205b9cb4b361488","ssdeep":"96:RYHpc03DpWR826vBNDpWlVgqGF3bByJLWlZ:gFTpFpcGF3bGy7","tlshash":"0ad1f17361311f3ca013d921a7a613eea178d426d61766ffac5a5712c7cb2820ef22cd","first_seen":"2025-11-01T17:37:40.402031Z","last_seen":"2026-08-31T09:39:27.458989Z","times_seen":15,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.189Z","timestamp":1788169133189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-94a\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXgKgqPm35oGAPVzcEtzcKoUdJZuQflBb9SOKWdGA%2FVDSHwxJM%2FdOk94zT1QTKBs38%2F3OOjKP5erq%2FtfH4qWOdqidngvehfj%2B6sVrqiTT3BpBEZ5e8LyckWhEUtVQPmowjM65g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a7bc5569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2378,"size_decoded":1508,"mime_type":"text/css","magic":"ASCII text, with very long lines (2378), with no line terminators","md5":"b584c3ce36132f4898ce6dec831a5af4","sha1":"76a32901b198fea26401c40c957f852c1871367e","sha256":"99483cc52f2cbc3f81b001641107156880b9a47c26b9cb4d3f92cf41d30d7b24","sha512":"f0a64241b3bf43cd85fb9318f3992c3305161cdcfb78c62e89f89836d537e070532b43c90081b71f970bf3bcd1a38a6ebcdb407f671bb2ac14af8edf7e19ac01","ssdeep":"","tlshash":"b541cf3361211b1cf813d53d179496dff299e056a21e33e99dc16a98c7c73860ab124b","first_seen":"2025-11-01T17:37:40.346297Z","last_seen":"2026-08-31T09:39:27.459578Z","times_seen":15,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.201Z","timestamp":1788169133201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-213f\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PTDYsc%2Frg24rFS4sgoZw%2FP64U7lIHtGW6GzRvwoYb4vY4BqXTnCcuJOp4PMl%2BcsIy2gKVtWjxIXGYFAOwgulYoABJq0SaMx1krzpoH6uiiGqvPz1in%2BmzNv8zm5Al96t5NU8g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a33b109a8bce569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8511,"size_decoded":2345,"mime_type":"text/css","magic":"ASCII text, with very long lines (8511), with no line terminators","md5":"c30cfc9aef326cb22fac45478a7f21f4","sha1":"b0e96f388478f19a1775ab6d8f7a8880fdc7d3b0","sha256":"f036ff84165ea8e2adc23e10db7f2c7663588b837d77e70dfe16360c10c505c6","sha512":"e48106f3916e33685d29e306c3b5bb9e7b1c3cd72c4d6be228c06a449693e93a48f01642bbf001c84d133b12e7bbd05f0fc3861302020976757a97eecd4abf12","ssdeep":"192:HseoMih3kYNKYpDCl0kOsgvEE9NGxELnV/3H3TL7373BEDrlOlr5N+WgwXWxwblB:Mt/Qdrl4V+AHp5/C9tm","tlshash":"0d02b92b933331fb305bcc69d599e55d7223f31221b726f4a780269cef8069e074796a","first_seen":"2025-11-01T17:37:40.379574Z","last_seen":"2026-08-31T09:39:27.460138Z","times_seen":15,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbeteurope.com/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1762182098","fqdn":"rainbeteurope.com","domain":"rainbeteurope.com","tld":"com"},"ip":{"addr":"104.21.45.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbeteurope.com/","date":"2026-08-31T09:38:53.221Z","timestamp":1788169133221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbeteurope.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 14:39:55 GMT","end":"Mon, 23 Nov 2026 15:37:30 GMT"},"fingerprint":{"sha1":"A2:C4:52:69:CA:1B:13:1A:70:3D:44:03:6D:AC:AC:4C:ED:7C:63:FE","sha256":"B8:97:76:89:F8:B1:AB:FA:4E:9A:17:89:3B:F2:9E:E2:DA:73:61:9A:67:0C:80:0B:FD:9D:8B:13:A2:58:9B:FE"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1762182098 HTTP/1.1\r\nHost: rainbeteurope.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbeteurope.com/\r\nCookie: pll_language=pl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 09:38:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Nov 2025 15:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6908c3d2-10a9d\"\r\nexpires: Wed, 30 Sep 2026 08:08:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 5433\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CPeNXNjam4uiKQ7JX4PuZ0nKU385O%2FywUOg2GlL3lAKSFcjDgnE7uQ1KiAkWQ9m2jYT4KaEOCampVOGRrIrZOdoXjSo1135%2BGI3H7mWC68mgrAJnaRZh6aFoJGO7JI4NUHj4w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33b109aabda569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68253,"size_decoded":22839,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31972)","md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-09-08T16:28:35.701145Z","times_seen":28955,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbeteurope.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}