{"report_id":"deb9360a-934e-4198-bcb1-a9a42209cf01","version":0,"status":"done","tags":[],"date":"2026-07-17T09:18:19Z","url":{"schema":"http","addr":"rainbetapp.co.nl","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"title":"Rainbet app | Installatie in 30 seconden voor iOS en Android","dom":{"size":161269,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"a0605c0529cc3f3d23b1d6f42df2aa2b","sha1":"c4788209b569dddcd4bd2da4c162a223a9440352","sha256":"8cae46a8091a3396b769eb2acd19d0e01019f703b3a22b5c32d5587f3ae3c23a","sha512":"cdd1748ceeabecf859d53095221085e55f76680371c8a7dce3625834e9b7e945984f834cca2eebeb17dd82c945c4ef6dc94161e300bff14127c60fef2cac7a14","ssdeep":"1536:WvupPNypE5oO9hnnBkMlPzYxfdRrx8zYEgwGG5nYDY:WGpPotWBArxPjG5sY","tlshash":"46f30b235296206d3137a6aa56adf7497b7cb103ce0589e879eed0484fc7e9049b3f4c","dom_hash":"domhash2fe3b720f25f744d73b4b861a9a86093","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetapp.co.nl","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T09:18:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetapp.co.nl","ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T11:16:43.82032Z","last_seen":"2026-07-16T11:16:43.82032Z","alert_count":134,"request_count":67,"received_data":1005443,"sent_data":37842,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":1,"received_data":26012,"sent_data":606,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-18T15:13:20.598487Z","times_seen":491678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68253,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-18T14:07:14.330303Z","times_seen":27450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/main.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f95c5aab8c0665043a1ffa80c7734cc","sha1":"3e1cacacce30bf047a69756ab92b27a381950c26","sha256":"549b2b15c3b618b063b3d7bae50ee1df806f972e758f4de82599180c185bb3d5","sha512":"3a78335e377f36aede85f2c2c3f59cef5cc4e3bb8a48a08759256d0902cc6656f8047f3490888f79e835be24b5d24c975b4048ddc6f1e8c26e93a2336ae815d7","ssdeep":"192:RRUIukGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FPxtUfq8v51ToTOiIpkT9","tlshash":"49f1545992b13c7c40b35e589e7fab09797880a72887c912394fb4894fb64f083f16ed","size":8027,"data":"","first_seen":"2026-06-07T17:44:23.788146Z","last_seen":"2026-07-17T09:18:25.917921Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/cmplz-cookiebanner-js-extra","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0287ec298f297f9bcbb796e0d299766f","sha1":"733eb70f8ac80be22831e411dcda2381f0717947","sha256":"e04f2122dc6790af57eca20562112a4c63f72ecd199e035dc946a3c7b7c73e57","sha512":"80c9a63060d6a6f166fdc15e983a3ec5b07f4a48c511de1adbfcf5dd193c24720d1ee4f4925b4045ef8e3e52bbbc266f79d94f05f760bf4bd7afcae715249f2f","ssdeep":"24:PRWNe+j3ya+6GGaDuQei8qRfL328GGFxEeqLqO2:PRW/HeGMZ8qRfrNFSFOO2","tlshash":"6591ad36ee6dc0f987c46bfc12488c1fa6cc5545e59ac14cd245dc2c05b836a5b4ca57","size":4507,"data":"","first_seen":"2026-07-17T09:18:25.969621Z","last_seen":"2026-07-17T09:18:25.969621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1783077976","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6864ebeb6e3ced2462393fa20791ae4","sha1":"f3b3609777c917bea592f447d8c935ef39eade6e","sha256":"230b3557e1953ab8f1f81e4ee6fe82931fae3b5e562893014d44ceaf914859cd","sha512":"75ab24a0daf502b88345aeb149a2b679fde20271d7fb87fde5f530e6c7dd2c212035896d180956ca0d4d7c83c046c07e77ca1fe0d522a653d45c27ad87f04010","ssdeep":"768:0h4p4cj/WZaGSJjv+YfzwLpstNvuWBxurxesKNVhIkYJO2ybEXoHgFC1aRHC5kiX:YZanLBmHC5kVQ0KRmDECIr","tlshash":"2513d9b93adcd0b511ee47ed37abab48e4303962d80fc8609565dc542268dc70f9bfa1","size":43043,"data":"","first_seen":"2026-06-15T22:38:25.845012Z","last_seen":"2026-07-18T15:12:58.866841Z","times_seen":1469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff21218738c991f5db98d244f1134967","sha1":"453f0cee0b2bd1d159fe38a3baf8f87e5f6a177c","sha256":"f4ae3142f0141a8266debfa59327dbd859a7c60c9c1fb1d510df2e8e5b0e09a0","sha512":"b9dc06fd099212e2273e9b1ebb3a9ebced454dcfccbcfa14d5e872ab8dc5fb5c9acb925a2955275c572e5bd5a475b8c1ddb99fdb58fd4650a53a29da5a627d79","ssdeep":"","tlshash":"29f0e25812f33176017771798b9f5584bb2b5493604bdc6a3eadc6898fe44640472ecf","size":506,"data":"","first_seen":"2026-06-26T20:50:38.984626Z","last_seen":"2026-07-17T09:18:25.978103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"79e3988a3ec12edf99816caa5006223c","sha1":"5fe144ae90375ed2f2f323d64d93450f101e0366","sha256":"8ce75977a19eec627c14f37e77ae3858fec6de0e8e844b237ea6c3c625f396ff","sha512":"6d8e1b030360b88a210d815d27f0de577c8980b6bde84cb7da9843a5ae99aa515c44401bb8cacdf00ea39cf190b127edcf37631f57be747b65017dd80b1130ad","ssdeep":"","tlshash":"3a31bc1931a1203240aff53e67cba24a7279e04378468e293d0ccb461f52eb199a5edd","size":1571,"data":"","first_seen":"2026-07-17T09:18:25.980282Z","last_seen":"2026-07-17T09:18:25.980282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f2192e6f6349d74d2411bcae2806a8","sha1":"b7aa4322993636b5304e6d55475badd9dc02b4f3","sha256":"7a4b21e09347403e14a759d88c609b463f45feabf3162421e46298cc2dabcc3d","sha512":"e9666de19b1de2013f21a2231297437d09aa81d80129d7b6984e3c619b5650bcfec329ecd8c462005bb78d535359562b070cdacedbedf1372f0a6375d9df61e9","ssdeep":"","tlshash":"f901992c35e60558432336344aaf43542c38e0933306c88e7e5cdb600fc243994765fe","size":813,"data":"","first_seen":"2026-07-17T09:18:25.981379Z","last_seen":"2026-07-17T09:18:25.981379Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f220d2c910faec704936042d7f6d8bb","sha1":"7975a29e23f184a971ad24cdc6f401ae6b37199c","sha256":"5935ff05359996a346eec34230323c95e0a199191be34c3630361aae8f0a1f20","sha512":"918580b165d86175cf2956cdc5cac3c4c03ae531e302691fb5dd60367ad96a1842940a56bec58e0ed493a191dfd751d33e20bff31711b19b8a7016dc5cd57728","ssdeep":"","tlshash":"a511cc372e7ec0fa87c46bcc12488c1fa6cc5545e59ac18cd242dc2c05b836bab4ca5b","size":1089,"data":"","first_seen":"2026-07-17T09:18:25.982361Z","last_seen":"2026-07-17T09:18:25.982361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbetapp.co.nl/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1783077976","line_number":1,"column_number":22786}]},"http":[{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.245Z","timestamp":1784279871245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/jquery.fancybox.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-31fb\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12795,"size_decoded":3443,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-07-18T15:04:18.38213Z","times_seen":49907,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.278Z","timestamp":1784279871278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/style.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-1bce\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7118,"size_decoded":2164,"mime_type":"text/css","magic":"ASCII text, with very long lines (7118), with no line terminators","md5":"e888c9868943300570f7c516065bafd8","sha1":"307a6438d29609e9fb9e8c71784fb3f9165bafd1","sha256":"dd165b87604ccc2be88a1587cf7296f94f0bfccbf5e72256a6d3df78e43aba1e","sha512":"3ebb180335ce885b7082b5d5fc1042b0cc4b0d74f4a27048aa90d90d91ba648e07efe164eb29e5a4ab9f8ecf4b15d4e4b1244d1e7b8040b36b0ad87b4ac207ef","ssdeep":"192:5YDo3Km2Omtm7mbmFmcEmDm1mHmhm0m0m0mFmamxm5Emcmsm4CEm1mXmZmZmhm1x:Jd2poySwczqgGkjjjwt05z7LHzgWssk7","tlshash":"29e1b83e0235e2b059524c1535ce2a052307f72287f1b6efd6fc89dacfc652b2669b15","first_seen":"2026-03-28T20:05:45.617056Z","last_seen":"2026-07-17T09:18:25.847195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/casinolab_logo-13.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.368Z","timestamp":1784279871368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/casinolab_logo-13.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30128\r\nlast-modified: Fri, 03 Jul 2026 12:36:32 GMT\r\netag: \"6a47acd0-75b0\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30128,"size_decoded":30473,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f96f3d28d31c4cfd5521879427fede45","sha1":"dd1bc6fcf4b27472349d0c9637e0b2b696d24c55","sha256":"a9324ce9d167e8e77c331afe020c97bea593e51f0fe1ac9220e43b053878b30a","sha512":"ed165fc2c53ce01f5b6654bb7523f33903d8d21d2a680dd5137e84f1709a1296197baf6027ec53d5af104cad52d560ebe1b1330c9877cbab89dddc5b91f553b2","ssdeep":"768:yT7djYZUOfDc2+6VAtID6XtOlp38Ti3RoiK:GylDM8AtI2dWH3T","tlshash":"a3d2d09676b500bff23c013cda198ef2b5303a896c0274a6e1937399527d8ce973127b","first_seen":"2025-11-13T03:52:08.190132Z","last_seen":"2026-07-17T09:18:25.84986Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/trimbos-institut-e1783067844808.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.398Z","timestamp":1784279871398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/trimbos-institut-e1783067844808.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3062\r\nlast-modified: Fri, 03 Jul 2026 08:37:24 GMT\r\netag: \"6a4774c4-bf6\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3062,"size_decoded":3404,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit gray+alpha, non-interlaced","md5":"3181d6d973ddd74571a2756b22bc0856","sha1":"03edc39c3ac8dac26b184dfc255b703daaaba609","sha256":"106a00f3f123eabb7759df948081c07de15afc68bef10c1da66ca27aed9b6bd1","sha512":"1c9436e55f392792239a63915a1068d989f18c69e0110be356a0a66e638ac2d8d02559623812069063975cd271a395dee27663eecb68a38c203af20a94133570","ssdeep":"","tlshash":"a6515d99edec4522999f6d2fc190e6b09e27316a61a31cb7330e786504f339c4290b8b","first_seen":"2026-07-16T11:16:48.562798Z","last_seen":"2026-07-17T09:18:25.85288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.246Z","timestamp":1784279871246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/header.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-3a93\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14995,"size_decoded":3102,"mime_type":"text/css","magic":"ASCII text, with very long lines (14995), with no line terminators","md5":"03a883d119396e93f7972e1d98cc67f7","sha1":"2fcbcee2c4114fba44c065eef7440e4c82d35709","sha256":"645b1c7739b6f6a3e0baa2638e30b765d0f6a42eb818138b0b2b85fde91836e5","sha512":"f17b836c56fb96eaaec34cc9cee1bf8748358ac389b0a6dba3154291ec1ac7914326c55c8473122455f8cdebf6a57ab43add5b32892ecfbc7b4a2597d5772fd5","ssdeep":"192:WkluZlFhYP2NcAtAt/avtOikaLSFbX2GXM:rluvnWJc/","tlshash":"956223a246543318b023ca53c3d96e6d713cd0225a121ebe6b556a1bcfc37a6c3f9747","first_seen":"2025-12-22T05:17:51.184337Z","last_seen":"2026-07-17T09:18:25.86313Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.273Z","timestamp":1784279871273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/screen.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-7645\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30277,"size_decoded":4522,"mime_type":"text/css","magic":"ASCII text, with very long lines (30277), with no line terminators","md5":"40d9a6048c9cdcf34493c481af007216","sha1":"840f3313f083b02dd5ed750bbc5ec2d78875a883","sha256":"f95b7220fbe7c80dabbcf843b487e1058974257576dc2fdd8b5926623f032c95","sha512":"ea3bbdfe88d9bd32dbfb7bded61e7c2530ca53fdd80df910612c467593d45d2159209dcf1a601f4d91dacda9ca7a5d3d8909de8b074a2369eaa3d82dee986994","ssdeep":"768:FfCCUF2Z2ks++z5tuwLghFUCzoO4i9KyueFUgMb:9ds++zfLgZe","tlshash":"4dd2edf3a0831369f00b8e2753d4f2a9b278a41eb6063bfb9851b73197c77d206b1549","first_seen":"2025-11-01T17:37:40.413818Z","last_seen":"2026-07-17T09:18:25.865222Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/nederland-e1783078674510.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.350Z","timestamp":1784279871350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/nederland-e1783078674510.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 883\r\nlast-modified: Fri, 03 Jul 2026 11:37:54 GMT\r\netag: \"6a479f12-373\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":883,"size_decoded":1224,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"512fc382f8e33a651125eade2a7f759f","sha1":"e2970e344b827f8f568172ec16820bc91e2e0ae5","sha256":"e4010ca918a4017423ba3b66bb2d5a85704980022056f74abaa149e3d5487d45","sha512":"3632fdfeb7564c028d1462bb153f8749b67cd09ae4538773a71502b81ff5cf3b5fa619d7eddb70ccd0c5709660c4856c1f1682bfdd7e78acc617af446a42cd1d","ssdeep":"","tlshash":"ef11b3f5cf64ed08c927813843b2020281693c071e8e29a085aef1172f86aa026b1900","first_seen":"2026-07-16T11:16:48.533075Z","last_seen":"2026-07-17T09:18:25.866383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.777Z","timestamp":1784279871777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/geologica/v1/oY1l8evIr7j9P3TN9YwNAdyjzUyDKkKdAGOJh1UlCDUIhAIdhCZOn1fLsig7jfvCCPHZckUWE1lE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbetapp.co.nl\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 11:16:14 GMT\r\nexpires: Fri, 16 Jul 2027 11:16:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 30 May 2023 20:21:35 GMT\r\ncontent-type: font/woff2\r\nage: 79297\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25200,"size_decoded":26012,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25200, version 1.0","md5":"351540371bc840ffc95e0b3e670d727b","sha1":"ac66c6c30243c81b820efe5732770273d24537d4","sha256":"62429575b7d315b6ad0c016109842a5e4a0532d06eadc973132dbec61169dd86","sha512":"616a8d1d068b41d6c56e604bf7da8b589090fe00400f3676806b1bc914d043f7a1c3c46b8636433b2c43b2e825dfa884124a2ab03ab5f94660b213732c5da930","ssdeep":"384:RQA8Qmg6JMNFG8NuPLHnqDGj+/+UNQ5MykXq/UT8f3m3W+u+jvcmmF2IWr:RpgWNA8NeHqDN+UN1mcTRjE14r","tlshash":"bbb2e1515097fb2619285f26c93b102035e872b42929f992315ce4b1c6adfe8d8fcadf","first_seen":"2023-10-28T08:32:32Z","last_seen":"2026-07-18T07:26:23.933355Z","times_seen":286,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/rainbetfav-300x300.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.852Z","timestamp":1784279871852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbetfav-300x300.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl; cf_popup_unique_name=GVgRBVsdH1gIGxcbBBcWBw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3768\r\nlast-modified: Fri, 03 Jul 2026 08:07:04 GMT\r\netag: \"6a476da8-eb8\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3768,"size_decoded":4111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ecd14b4037aab18af49c0c24bd43d97","sha1":"34174cb594165b8aa92fa4fd28114a00ef779f8e","sha256":"b47701b3befdef1d213d351741c2f7ef6a4c88d3a26854f041b760f46c94be29","sha512":"03b0c1ac961caedba30c69b8b85267e8de2568e13a02599b3ea0dbe1bc456fa137e0997359ff13fd3c154df378331d7fa11f985443b429fa5df0d677ece25ed8","ssdeep":"","tlshash":"38717eb517376779c6701eb4e06036e2ebd07517ca023566a0280eba03407c17d7f5bd","first_seen":"2025-12-08T04:02:28.687932Z","last_seen":"2026-07-17T09:18:25.873805Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.276Z","timestamp":1784279871276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/table.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-213f\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8511,"size_decoded":1891,"mime_type":"text/css","magic":"ASCII text, with very long lines (8511), with no line terminators","md5":"c30cfc9aef326cb22fac45478a7f21f4","sha1":"b0e96f388478f19a1775ab6d8f7a8880fdc7d3b0","sha256":"f036ff84165ea8e2adc23e10db7f2c7663588b837d77e70dfe16360c10c505c6","sha512":"e48106f3916e33685d29e306c3b5bb9e7b1c3cd72c4d6be228c06a449693e93a48f01642bbf001c84d133b12e7bbd05f0fc3861302020976757a97eecd4abf12","ssdeep":"192:HseoMih3kYNKYpDCl0kOsgvEE9NGxELnV/3H3TL7373BEDrlOlr5N+WgwXWxwblB:Mt/Qdrl4V+AHp5/C9tm","tlshash":"0d02b92b933331fb305bcc69d599e55d7223f31221b726f4a780269cef8069e074796a","first_seen":"2025-11-01T17:37:40.379574Z","last_seen":"2026-07-17T09:18:25.874398Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/hoe-installeer-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.289Z","timestamp":1784279871289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/hoe-installeer-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12156\r\nlast-modified: Fri, 03 Jul 2026 11:11:33 GMT\r\netag: \"6a4798e5-2f7c\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12156,"size_decoded":12501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c85da50023c3db07052a92dd4a5023b","sha1":"448003ec1ef5d3d10047fc9a64ce1a7e6ddea668","sha256":"48e710f97fb43b67cc55a63fba4de5bce411cb6a3f4b2a14d4e7ec418eff15c5","sha512":"40baf210ecb618a6dad9a67651b1ed1d7778b9e7a7da4156c438c9c2b1403afab7924e13794d45e3ceb46ad0a7447fd507c2510089f575de457499b306b73a71","ssdeep":"192:dMeNKwOmJK/lNqo18ntbfg86t3MMCMwNttzTdq/ZNjfvspmLWRGOMMtPHCWrnjc:NN2B/11AtbY86t3jRwNb8xNrsNRGOMck","tlshash":"4542c0998f27bf20d8b1f9bf98466516120bfc56f881485c24e6b9c77fe3064e9f4250","first_seen":"2026-07-16T11:16:48.516107Z","last_seen":"2026-07-17T09:18:25.875659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/inst-icon.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.339Z","timestamp":1784279871339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/inst-icon.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 07 Jul 2025 09:37:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686b956e-746\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1862,"size_decoded":1150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e383fc528dd6d7d762226618c778ee1e","sha1":"c307952a92882d6d4682912ce653aa3b9b1b5acb","sha256":"c1aaddd0dfef55aafdb3d1343d7d1b1bd0614a82077bcf56ebbf8fbaba257edd","sha512":"7fa40c80653a075b3cab7b2454d552ea9d5a44200cb06803cd5f7b0a472a68fae3d75bba55705398055cd7f8d96cf8cc46abadf5fbef35c712e36e3bd5b22a65","ssdeep":"","tlshash":"653165f3d1a4d2d4448edb2ddc6bda156267acf73f568694418545c2f834284dd4fc88","first_seen":"2026-07-16T11:16:48.521253Z","last_seen":"2026-07-17T09:18:25.87679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/screen-list-icon-3.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.345Z","timestamp":1784279871345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/screen-list-icon-3.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 712\r\nlast-modified: Wed, 09 Jul 2025 05:45:25 GMT\r\netag: \"686e01f5-2c8\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":712,"size_decoded":1057,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8663b873d317f365bfd7ff7311c1826e","sha1":"7f013cbcaf9f280bcc3bf38423c42b8edaf67323","sha256":"9b22d4107ec949be825b074e08efaf50b93ff458b8b42bd570fdddcb3620d2bd","sha512":"31bcb34ce9f2c711a642944b0119fc0900a68797e2f1131ce60b3fe319bf09720ba8f10ce5b9328d1ae55f79b61f951aede70e89b08d29884ca13b97b027bb14","ssdeep":"","tlshash":"2d017bd493880d3c76364704e779b232116672918f0d6505c57a2ff9f70884c993fcd4","first_seen":"2026-07-16T11:16:48.51708Z","last_seen":"2026-07-17T09:18:25.877831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/images/rating/badge-2.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.356Z","timestamp":1784279871356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-5ef\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1519,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99370bc04703f888842327de74e9150d","sha1":"e5e3c9937949313b24053f6e861a27054aafcdcf","sha256":"c1e562d4bc6ad51f92da18b3bdb8ae9f0c9d1517fb82a39382ff31d6be3612c3","sha512":"c3bdfc451961f425ea03a6cc5460f2f6d9842c4b50399584ecb8af646c4c3cdb2b20897f7da64cc5c8379c028c2aea35878673e8ea76571fed8f69b299d075f6","ssdeep":"","tlshash":"bc31626af21d6935f02846bc9e66c43d147a7cfa0cc2540101e1faaad0a54c61cbaedb","first_seen":"2026-06-15T04:41:24.118809Z","last_seen":"2026-07-17T09:18:25.879131Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/logo-agog-white-e1783067869981.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.391Z","timestamp":1784279871391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/logo-agog-white-e1783067869981.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4586\r\nlast-modified: Fri, 03 Jul 2026 08:37:50 GMT\r\netag: \"6a4774de-11ea\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4586,"size_decoded":4929,"mime_type":"image/png","magic":"PNG image data, 143 x 50, 8-bit/color RGBA, non-interlaced","md5":"6cb7f0eeaaaa83f1122158ac77c14164","sha1":"99621f95f6cd290335568b04212a7e7f05f725f9","sha256":"199159bd1f50181d4dea1f331549f9a49d80e34c4375be9c8dea9333a46c0e68","sha512":"db65235bb6f6a3b18e5c3a971bbf2c20f9742346c3a90dc6a9d5673aa6dd77fafd39e0f24d1954519c264b26a7c3e64eefa5d3071c27deb050d343a70d94b693","ssdeep":"96:fVnPjJi5pg18fKVIJ+3BDUxjCUkzQNxg1uEK+BjcKOKz1:fNtoplwNUxj7kzQNxIuB+Bj5OKz1","tlshash":"68917dd48484561b8bcc71969ccd1bd26dd9671393761c82438645e0363e4a1f177a2d","first_seen":"2026-07-16T11:16:48.52216Z","last_seen":"2026-07-17T09:18:25.879695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.259Z","timestamp":1784279871259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/faq.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-124d\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4685,"size_decoded":1693,"mime_type":"text/css","magic":"ASCII text, with very long lines (4685), with no line terminators","md5":"cf883145742fa2e7149d53fc9b87ca5c","sha1":"b96c32d296450b0f37a2fbcf8dcf9d99eaf7ceb4","sha256":"a546f4c12258c7608989eef7f2c60f925c4d67d7e332dd565c0b2005cdaa5061","sha512":"1b13cb5e65c4bce3b152c272102facfc3bc89c7c2cdbf56e07138d337789e61714b2876b27cf7bf98b6bd535000c5c57344d63fff83ef79385582681be7c9f84","ssdeep":"96:p2Gh/Af2sKhmlGizCRCbeGMfbsKYbsFvJ:p2Gh4f2sKd+C46GMfYKYbsFh","tlshash":"51a1526731412268b11bd8a696e1697ca539d8239b163eefec33be20c7062d7c61384d","first_seen":"2025-11-01T17:37:40.373628Z","last_seen":"2026-07-17T09:18:25.880591Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/screen-list-icon-4.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.347Z","timestamp":1784279871347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/screen-list-icon-4.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 816\r\nlast-modified: Wed, 09 Jul 2025 05:45:33 GMT\r\netag: \"686e01fd-330\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":816,"size_decoded":1161,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e38a6d3261a5a254fa10714d7b8a981","sha1":"db7048d634e5055c4ae7f7c2d32b9769c8c25fa5","sha256":"e120f0fabcf9cb4cd8d7d936022c94b053debbba8dc45f90e1088732c332f82f","sha512":"1d2679e383f8c2d9539ea43b7fe94294f9103061b3ed60a2b42409f9a1672f03e6fc6caef52f364dedcd9ee3e8275f790e832f41edc76cb6f151038586fcb6c5","ssdeep":"","tlshash":"5c0126e68308ad7cf530471ceb26b274502675915faf214894221832ea1128d6c3f9dc","first_seen":"2026-07-16T11:16:48.540401Z","last_seen":"2026-07-17T09:18:25.88142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/images-removebg-preview-11-1-1-1-1-1-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.355Z","timestamp":1784279871355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/images-removebg-preview-11-1-1-1-1-1-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4942\r\nlast-modified: Fri, 03 Jul 2026 12:36:31 GMT\r\netag: \"6a47accf-134e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4942,"size_decoded":5286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"450c192ad001d54bbf2d062c28b60d49","sha1":"15f7b99498898d4a8410a616bef7443553f28a7c","sha256":"c8145f9e1b3e5d0182cfe7b023b3c72c7fda3d71ab518068a62db9daffea5b1f","sha512":"0314a3343eb7ee1563fe726f5ecfa86811ff59859c15cf16c3410670c2f7fa8dbdb7b35685d0169e69e434657455c102d8d4727370d33336ab3c67f2ae25309e","ssdeep":"96:XElbw+iXktmziXg/BSNledpbQ7mmD1rLiJaMVkDq4gkUPRQjWRCug1:KwTktmYHedpbammR2JaMV4qNfZqWRCL1","tlshash":"f1a18e2413096f26feb81fb5cb64778bf92a3e12c5022b1f64414f0104658a76bbf18b","first_seen":"2025-12-30T02:21:12.780949Z","last_seen":"2026-07-17T09:18:25.882546Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.296Z","timestamp":1784279871296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.fancybox.min.js?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-10a9d\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68253,"size_decoded":22389,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31972)","md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-07-18T14:07:14.330303Z","times_seen":27450,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/gransino-casino_logo-11.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.376Z","timestamp":1784279871376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/gransino-casino_logo-11.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11764\r\nlast-modified: Fri, 03 Jul 2026 12:36:32 GMT\r\netag: \"6a47acd0-2df4\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11764,"size_decoded":12109,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/hervitas-logo-1-e1783067836892.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.399Z","timestamp":1784279871399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/hervitas-logo-1-e1783067836892.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5908\r\nlast-modified: Fri, 03 Jul 2026 08:37:16 GMT\r\netag: \"6a4774bc-1714\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5908,"size_decoded":6251,"mime_type":"image/png","magic":"PNG image data, 145 x 50, 8-bit/color RGBA, non-interlaced","md5":"a420b35b75973d0c343a17f07c5c12be","sha1":"5b909615ab7479d6640fa87389a7deb2838fc4eb","sha256":"9be12743d2c53c0b1756349c42c01ff2cee2083eb5a1e375e86468dff421ada7","sha512":"3842c38cb616d2d25b9afa78fbaab9e6279b77054fca44fcadb62d37e5cbf3b8a31be862570964090ab6a76735bfe747e7647929c8e9d3a2ff5f15a076dd0604","ssdeep":"96:HjrJk0rkifSx+p9XWSfORKLtiBD8MSG//9n9xtVILyjEuBn7g01gTg+D7fh:R5/fky9XHkKLtiBD8FG//9n3HI2jEuB2","tlshash":"a3c18de866f93619324e76e34d6c4ee8df381c765e4acbc490b0218a566964c934a0ff","first_seen":"2026-07-16T11:16:48.558193Z","last_seen":"2026-07-17T09:18:25.884562Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/responsible-gambling-e1783067828329.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.401Z","timestamp":1784279871401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/responsible-gambling-e1783067828329.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3232\r\nlast-modified: Fri, 03 Jul 2026 08:37:08 GMT\r\netag: \"6a4774b4-ca0\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3232,"size_decoded":3574,"mime_type":"image/png","magic":"PNG image data, 154 x 50, 8-bit gray+alpha, non-interlaced","md5":"28197e13e95d417b3f150343d515a16c","sha1":"7c706d75f4765cd5e012a1e2b1cb96974d2bfa76","sha256":"685d4aca342a4eeadffeb5b085ea2c0aecc7ff2c9922aab7a8b675be2b349791","sha512":"92993ddbfd99dffb1837829d1ca59355c0e249665decdb02beeadc0ba5a83a96528c51903a51e657d3d2826d1cced127955e1bbe68e7650bf701f229e37029d3","ssdeep":"","tlshash":"26616da063d6aa3e0b52ea1861ad1e304751e37ba5ca53953c20fc0cdc3576299a0a67","first_seen":"2026-07-16T11:16:48.527469Z","last_seen":"2026-07-17T09:18:25.885524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1783077976","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.300Z","timestamp":1784279871300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1783077976 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 03 Jul 2026 11:26:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a479c58-a823\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43043,"size_decoded":11602,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43043), with no line terminators","md5":"f6864ebeb6e3ced2462393fa20791ae4","sha1":"f3b3609777c917bea592f447d8c935ef39eade6e","sha256":"230b3557e1953ab8f1f81e4ee6fe82931fae3b5e562893014d44ceaf914859cd","sha512":"75ab24a0daf502b88345aeb149a2b679fde20271d7fb87fde5f530e6c7dd2c212035896d180956ca0d4d7c83c046c07e77ca1fe0d522a653d45c27ad87f04010","ssdeep":"768:0h4p4cj/WZaGSJjv+YfzwLpstNvuWBxurxesKNVhIkYJO2ybEXoHgFC1aRHC5kiX:YZanLBmHC5kVQ0KRmDECIr","tlshash":"2513d9b93adcd0b511ee47ed37abab48e4303962d80fc8609565dc542268dc70f9bfa1","first_seen":"2026-06-15T22:38:25.845012Z","last_seen":"2026-07-18T15:12:58.866841Z","times_seen":1469,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.294Z","timestamp":1784279871294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/libs/jquery.min.js?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-15d9d\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31324,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-18T15:13:20.598487Z","times_seen":491678,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/rainbet-logo-1-scaled.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.352Z","timestamp":1784279871352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbet-logo-1-scaled.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67236\r\nlast-modified: Fri, 03 Jul 2026 11:14:29 GMT\r\netag: \"6a479995-106a4\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67236,"size_decoded":67582,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6d9b41c61e878f6a14e275333aea01c","sha1":"79b0e3444063ecfcdbe24a4684b4b77fbf3d2674","sha256":"31c860e895c70362f6e986c1338d29c85fab967a02c77c315a066b0452da6f79","sha512":"03c5ce1f0b3b0d20c5f9e2f51d0a1656f3d4d1cd99f2421b450db02746e9f43569f04e0fc18f5b81b610012658e4d2a60938f438bb04f180fd4a5e19079ee592","ssdeep":"1536:lqdR0s4drmoUOmDRQ+6cOXs7+z/EYVgDn+X+/l84hvsKxe2Tk:lqP0s6rhHmDEds7+z/EZn+XcCKLxe2Tk","tlshash":"c963024352f9826f6d496c20ba5150796bb23f8c3a40666ab8b601c4d2fe63d0f3f725","first_seen":"2026-07-16T11:16:48.562022Z","last_seen":"2026-07-17T09:18:25.887542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/rainbet-logo-small-1-e1783069118340.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.403Z","timestamp":1784279871403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbet-logo-small-1-e1783069118340.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 25308\r\nlast-modified: Fri, 03 Jul 2026 08:58:38 GMT\r\netag: \"6a4779be-62dc\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25308,"size_decoded":25652,"mime_type":"image/png","magic":"PNG image data, 512 x 494, 8-bit/color RGBA, non-interlaced","md5":"3e710e7ae186475a5e4051ad723437d4","sha1":"f476440f92db54927efc0ebadadd6ef95ca63dd4","sha256":"3c47aa3ab50a4624a6b6546ac76f4782d38f08f8e9b177c2b5daced7268b42fd","sha512":"7e28e20d437962c37aecb4357cdbc1c15459aab1376e7683a74a4dfdc5bc0a25476f95144f2e82ee4842e7a0d116472e906358106413bee640a03b59d0783c14","ssdeep":"768:r1H4+7VkNnx7uVHa0URKm3BAFqQ0nHDsB9:BH+NnxCNnUL3pof","tlshash":"a8b2e04b12b8d8686257bcb461deaab0cc55346cf4bf4d544e5a0d83607b3363ad12ab","first_seen":"2026-07-16T11:16:48.513775Z","last_seen":"2026-07-17T09:18:25.889499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.252Z","timestamp":1784279871252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/footer.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-184a\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6218,"size_decoded":1711,"mime_type":"text/css","magic":"ASCII text, with very long lines (6218), with no line terminators","md5":"e816bbdf90d3281925f5ef063826029a","sha1":"db2521f47213c84f65bac09a9fffb9095f8b0ef9","sha256":"1c0af84d92f7b2a5124340180960ed98ed53a8a34a1385459677884c70f088a6","sha512":"d614024aa1db24a5267421b7a29b297c36ce45be2f3938fbcc864a14bf9fd7c8e6c95abcc3f5cb653e836413a018b989214b9e3c31b6a55cc205b9cb4b361488","ssdeep":"96:RYHpc03DpWR826vBNDpWlVgqGF3bByJLWlZ:gFTpFpcGF3bGy7","tlshash":"0ad1f17361311f3ca013d921a7a613eea178d426d61766ffac5a5712c7cb2820ef22cd","first_seen":"2025-11-01T17:37:40.402031Z","last_seen":"2026-07-17T09:18:25.890562Z","times_seen":9,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.276Z","timestamp":1784279871276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/tour.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-5a8\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1448,"size_decoded":862,"mime_type":"text/css","magic":"ASCII text, with very long lines (1448), with no line terminators","md5":"4bd777296c725c48e6b6e1791c635152","sha1":"0b4e71c8c715a3b429792e963c5b42aeb9d6b40b","sha256":"968201979d57a6dc6d9657c4381e1e2d34c61eaaa38def66e3d9ff894af77fe0","sha512":"9c6a2067f14b6aecb9a8709ce6098baa59d92b0521847e005b8f16d70558deac6960f75db95895c672aa530e2d22d7dbe69abe906d748b8142dbcc7d186bd4f6","ssdeep":"","tlshash":"02318b331521bb2cf423a82507a10d59724dc026b35bf7f59d597a28c3cab9219721ce","first_seen":"2025-11-01T17:37:40.403423Z","last_seen":"2026-07-17T09:18:25.891215Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/android-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.384Z","timestamp":1784279871384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/android-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17776\r\nlast-modified: Fri, 03 Jul 2026 11:11:45 GMT\r\netag: \"6a4798f1-4570\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17776,"size_decoded":18121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6f36db09772c62ed6aaaa42b7f78222","sha1":"b60be61f1dcdb53b4c4fbc6fb89c868d5fe609cc","sha256":"d6fd55e4ec5d0e1e87e1b566c189f1507f29ef1716c5261943cf98a68e59fb97","sha512":"36943193626d08bd4fcf355acc4b196096e3a130dca4ca4e887bc07dd8ac324bf096d95311d371a1a36f0c833f4618bd48dfa95e0fadc2cb436b3a228ebb5df9","ssdeep":"384:mQwEuy0OKLoHfkVPBRGRpT5rDxrpiV2rj806honD3ac:muuOKLEsVpSLPxU2V6Qr","tlshash":"1d82d0a4f3e2cf0fe16d77799929db77659270049b5f2110d0a2e6285483d906f04ff5","first_seen":"2026-07-16T11:16:48.509768Z","last_seen":"2026-07-17T09:18:25.892509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/security-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.388Z","timestamp":1784279871388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/security-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16470\r\nlast-modified: Fri, 03 Jul 2026 11:12:07 GMT\r\netag: \"6a479907-4056\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16470,"size_decoded":16815,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e53d2d346fdd7c9e10520c687613d6db","sha1":"5cf4d9f746730276dd90398ebfc1d9d8a22092ca","sha256":"463e3e5cdfab2e252d1357b3cc3c229f7f166daa797b07d4d0d4e48ac3e2c808","sha512":"edd4720b146ec706ff76f691f542930c07bf924e88977fd1fd86bb6cfb444e312a20d758ba70320d57eb919a88a7d3dbc506d5a7c2ff97d5e3752d12fae9f511","ssdeep":"384:3/m3MJc3sUksY6CaAXmmvCMyC7gCFmUZoO/cqEjwTuuDBsKQHJ14oBJBR8c:vI3sGY6NrMyC7j5tUweUcv","tlshash":"7472c1629f35312ce5c165b4c82ab4a489fe3f61b9451f20ed5e0e62ec543ec02261ff","first_seen":"2026-07-16T11:16:48.526474Z","last_seen":"2026-07-17T09:18:25.894655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T09:17:50.222Z","timestamp":1784279870222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=nl; expires=Sat, 17-Jul-2027 09:17:50 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbetapp.co.nl/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetapp.co.nl/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetapp.co.nl/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164107,"size_decoded":30961,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"97b4f67f2864d5f9254f43194dd340b0","sha1":"7e41ff4d716d01ec2f52aa8eec14cab403c94f79","sha256":"88c99153a450e11d6ab56638a049ad5c6bd883f55149ac2203d9bf5c81d9c92e","sha512":"d8468e7fb0a0949d28d95075a666d6e858cf525eafbe43f53af6672f18441547659f60fcee6a59fa64f2f6292ea1eff91fe160ebc7f97d9be4465e593f72ae0d","ssdeep":"1536:qvupPNypMoIoO9hnn+0xWBuQX1FVvx8xu6pwTG5nYDS:qGpPofW+FvxRtG5sS","tlshash":"4ff31c235396206d3137a6aa566df748bb7ca103ce0589e879eed1484fc7e9049b3f4c","first_seen":"2026-07-17T09:18:25.897383Z","last_seen":"2026-07-17T09:18:25.897383Z","times_seen":1,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":117,"connect":19,"send":0,"wait":616,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.256Z","timestamp":1784279871256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/breadcrumbs.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-7b4\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1972,"size_decoded":1098,"mime_type":"text/css","magic":"ASCII text, with very long lines (1972), with no line terminators","md5":"c5d669253477fe521303f6ad9483d097","sha1":"3ccbc26db4ac1e3fb31c62fd6453dc221a46e96a","sha256":"a4b5335f492830d366d4aebbcf181a52b5d1c34da97ffb0e945fd1eaeb5046b1","sha512":"d0cd6b65dacba1eae70c63053e340ccfff6d8eebe05873ee203494af19e9b4866ce7e1b638307731f37c8b8d886414de89da8e0a25afe07744d09dec5184eaee","ssdeep":"","tlshash":"47410071d061263164338a29cb89723c9739be22261b5bfbec01ef01b646b8f55f1a5c","first_seen":"2025-11-01T17:37:40.341391Z","last_seen":"2026-07-17T09:18:25.898608Z","times_seen":9,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.341Z","timestamp":1784279871341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 228\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\netag: \"6a589db3-e4\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ab1d55e55b7e86a3c817d8892d6b584","sha1":"5f069d522bea52e2782797a10f47a83895349682","sha256":"ef70e23d1c9179aec2b49e0afe79521bfdd051abeabf220b3ab19977ca285e6c","sha512":"717be6268baea441f60d4df0221a7cb6181040f438e3a0d5f7d7d314b5517a04e1530f5894b0bdc9a8e5e7f1761ddaa0f85690ec3865a4f63732bed9697ddb4c","ssdeep":"","tlshash":"afd0a99f524c0e2cfa228520e35932b5007b2143034c526ec8636534aa0919fa83faec","first_seen":"2025-11-01T17:37:40.348381Z","last_seen":"2026-07-17T09:18:25.899416Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.263Z","timestamp":1784279871263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/pros.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-efe\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3838,"size_decoded":1401,"mime_type":"text/css","magic":"ASCII text, with very long lines (3838), with no line terminators","md5":"5af496299aee6059a6687001a99149f7","sha1":"df0ae8357939657efaae1583f49356637d3d97c5","sha256":"2258580c9c5f9cb25da88a189d17a48fb67cab59150b395bae3ffff16a57c991","sha512":"3128fae8b08a80eccc4cc8aaefb4b8604a2c46dcfdd5f526e1de19a9550cbe7595473ab39c1a7a5aef207098d38a4e9553a6b55de59e00641cf14d27931c2725","ssdeep":"","tlshash":"3f814235e1f12c8ef32fe54c91e0a6b5a21c830ee81f5f9c9915b5a265c6584803f64d","first_seen":"2025-11-01T17:37:40.393924Z","last_seen":"2026-07-17T09:18:25.90083Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/images/icons/search-icon.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.336Z","timestamp":1784279871336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/search-icon.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 674\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\netag: \"6a589db3-2a2\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":1019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"419feaefd79d34311d7d22a4f0145d16","sha1":"4618bc0df79e5043372c8ae93818d05b2b560a28","sha256":"732a374f3a396a0cd2f1934c66bad9cba31951ae1d5d66ab70092eb07dd7df66","sha512":"05d1cc1248e55f875d5d56e1da225d9b327301daff0e5794bd6f52d88721a9a0386272920e01ebb48285dd18eb7b0de48ccb35e3d9af309a67e745181a0c5250","ssdeep":"","tlshash":"3101d3f5e7448c36f02a8324f660702c51f940b7aa91cdb0c0c3fd2bd6288c56e1e6d5","first_seen":"2025-11-01T17:37:40.41658Z","last_seen":"2026-07-18T07:26:23.957852Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/screen-list-icon-1-1.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.343Z","timestamp":1784279871343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/screen-list-icon-1-1.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 725\r\nlast-modified: Thu, 10 Jul 2025 13:22:54 GMT\r\netag: \"686fbeae-2d5\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725,"size_decoded":1070,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82fe01a049214955fb139f467bc85c3e","sha1":"a0f53151d6c6da1e17ac78eb6163b07ef83a6584","sha256":"6a1565382d27b3b19ae5fc79de992c46aa1605f7fb8b9aa50012772cf9bdfdb0","sha512":"608efccde08736828c00e4a1ee3bc16da1d5d77b92cd00e3fd1719530a61a1e52b2597085274ae011f24beed3f712539ac1d6b958e47b693bbd7731d6ecbfa06","ssdeep":"","tlshash":"7a01dcfea3c4aaf4ee81cb35ba29f599a13b30adaf48431981e0086122110d8141b1c4","first_seen":"2026-07-16T11:16:48.548276Z","last_seen":"2026-07-17T09:18:25.903195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/screen-list-icon-2-1.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.344Z","timestamp":1784279871344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/screen-list-icon-2-1.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 10 Jul 2025 13:23:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686fbeb7-11c9\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4553,"size_decoded":2055,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57d22d0f22f1bcaadd13d4057b028c01","sha1":"3018ecd328a390bc4b854dda0fa0c5134617f20b","sha256":"8735f6d26ae9782d5decd0872f5a3f3d99a01909657d6ea35f013565850dc7c9","sha512":"1bc0d3cc19caf2a7f7dede06176c8febaaac4d1b0bffd7571d819693a8fd0792fb85b2fe9bf6e9b75bdeb0562ae345325124cdf5c287efb8a6fd20778358259b","ssdeep":"96:INgpqthsTfoUpCA0zrOXVH909uJsmpGpyDVzNu1l5x9g9:INgpqthsToUpCA0zrO70gJGpyVNu1lbE","tlshash":"7b91e9a293ddd1d049434fa0e2267513329b90fdef46de998160db70feba8d60c19c5c","first_seen":"2026-07-16T11:16:48.532216Z","last_seen":"2026-07-17T09:18:25.904422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/cazeus-casino-logo-9.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.375Z","timestamp":1784279871375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cazeus-casino-logo-9.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6702\r\nlast-modified: Fri, 03 Jul 2026 12:36:32 GMT\r\netag: \"6a47acd0-1a2e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6702,"size_decoded":7046,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9291eccfb3daa616be2abe5ce99f33f5","sha1":"322567ef37e312c68c1e8c8ddf4672b271cfb131","sha256":"280404ef70029ae047c18ae909f914cc1d1f34feda71dfd8111783b7e6e0d313","sha512":"edbfcb43fa5d9b97190cdb138f5b965250fa401261b1de1869083b4fb184b5fba283ff5a444b25f4d38cc30f79020d1dd72d57bdd8675f772275f39e889ced08","ssdeep":"96:FElbw+iXK9xziHKM613MGd6FJmmF/YvQGX9De0xmuz6aBLqk10/RYKPYF2gRxshv:IwTK9cY3pGmmFQVPzeIGJJYNDctd","tlshash":"64d18f389f956737e440a17325924ff9ebf3e3b8c7021657840505365ee8dc8a8ee1a6","first_seen":"2025-12-30T02:21:12.802967Z","last_seen":"2026-07-17T09:18:25.909881Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/js/main.js?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.297Z","timestamp":1784279871297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/js/main.js?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-1f5b\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8027,"size_decoded":3020,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3428)","md5":"9f95c5aab8c0665043a1ffa80c7734cc","sha1":"3e1cacacce30bf047a69756ab92b27a381950c26","sha256":"549b2b15c3b618b063b3d7bae50ee1df806f972e758f4de82599180c185bb3d5","sha512":"3a78335e377f36aede85f2c2c3f59cef5cc4e3bb8a48a08759256d0902cc6656f8047f3490888f79e835be24b5d24c975b4048ddc6f1e8c26e93a2336ae815d7","ssdeep":"192:RRUIukGxzIqX1llGfINn8vbV10K5oJYWGoWaaF45nlzgcxh2xHuukTAe:4FPxtUfq8v51ToTOiIpkT9","tlshash":"49f1545992b13c7c40b35e589e7fab09797880a72887c912394fb4894fb64f083f16ed","first_seen":"2026-06-07T17:44:23.788146Z","last_seen":"2026-07-17T09:18:25.917921Z","times_seen":5,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1783077975","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.242Z","timestamp":1784279871242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1783077975 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Jul 2026 11:26:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a479c57-ade\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-18T15:15:02.290713Z","times_seen":30489,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.266Z","timestamp":1784279871266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/quotes.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-65b\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1627,"size_decoded":938,"mime_type":"text/css","magic":"ASCII text, with very long lines (1627), with no line terminators","md5":"43fd47acd8c6b6b99ec00ace6271fb48","sha1":"4ac095168a9c622551dbba34ca00d0b0a021a4d5","sha256":"ea2a953a5031f7805c827cb77d94a9ed59fd84181dc6edf4fee43d2bf702a067","sha512":"db91e6bf34db0b96b8d67f01935a7f17117b625acf7033e034226f64ac0e06e956c1c6ae6ab0ea89e30b53f95cb2a9002ce46eb17376b95d0a60983ecd439ca7","ssdeep":"","tlshash":"843110335020032df07bc526b6c55eef71adf813967227adefd5f0229a81b561f51542","first_seen":"2025-11-01T17:37:40.358856Z","last_seen":"2026-07-17T09:18:25.919521Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/anjouan-e1783067861600.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.393Z","timestamp":1784279871393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/anjouan-e1783067861600.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4212\r\nlast-modified: Fri, 03 Jul 2026 08:37:41 GMT\r\netag: \"6a4774d5-1074\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4212,"size_decoded":4555,"mime_type":"image/png","magic":"PNG image data, 105 x 50, 8-bit/color RGBA, non-interlaced","md5":"b9c2167f1734351874fb2a30f74832b0","sha1":"a3e524caa6e2d1b210fc095e73cbb4450a68ac3e","sha256":"b506b95c38bf8a434e474a84016fdf17366aa509170550ca2d94088df7d05c88","sha512":"84248455299bdc0cc4b8bcefce11003e0ff80b691294248f1cccfaa92ec2e788bcb1babc462f2ef36d028448117e057a0204e1e201ca0acdddef298faf78ebb3","ssdeep":"48:fXD7x5II2b/0lxMpsCjtxPuSms9iqJAAA1kIGw3iObtZpmsfscKwrsxqIdkjmqlD:fb2o7CsitLp9k1T5bI/QNlV5eEx4ex","tlshash":"c2917d073f77a8b9e53f09096dab4c91509f2aa9e36120dd68bf88d57da204e09ca070","first_seen":"2026-07-16T11:16:48.54478Z","last_seen":"2026-07-17T09:18:25.921189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.274Z","timestamp":1784279871274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/steps.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-3325\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13093,"size_decoded":2456,"mime_type":"text/css","magic":"ASCII text, with very long lines (13093), with no line terminators","md5":"2bb5e01a8ceef17de0973b1d2457d467","sha1":"6624bafe007bda76ff559baf0e5695cc414c34f6","sha256":"2f0ae51e3499b782e0b800101e65f96c8912a5e5633ddbe52520d67cb5851eee","sha512":"29203f07561709da9b06c307c5145b229e52bc57ad29d1074a605869bb5d4163a5bbbfba718f4d9350c727054d6caa8288aa045aad9613c3c8fe91a2b19cf05a","ssdeep":"192:KN4hj1g9f/S5GyQfLeHHCHYNsOl1AVrFV5rBz:Pj1gJsZKal1WbrBz","tlshash":"594273f261e742adb217cb2a83d4733c722cc0026b461ffff946b6a552553a1c6562ce","first_seen":"2025-11-01T17:37:40.395209Z","last_seen":"2026-07-17T09:18:25.922344Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/rainbetfav-36x36.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.854Z","timestamp":1784279871854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbetfav-36x36.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl; cf_popup_unique_name=GVgRBVsdH1gIGxcbBBcWBw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 898\r\nlast-modified: Fri, 03 Jul 2026 08:07:04 GMT\r\netag: \"6a476da8-382\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":1240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"de31e0848aea8621fce848599a2f837f","sha1":"3c38f36c3e1e50bf29f15db7399f88debc350701","sha256":"b9aff756ba31a26aa6100d3c928baad608d06924a23ba037f80423bd0667b297","sha512":"04fdb663704c06bd569a9ebbc895e27947192fd3c5d7587f0d45965f32fa0610b89b57bc0c07721a7e6051f721c970ee5280ae530aa578d7182d2b98b1d22277","ssdeep":"","tlshash":"6811203fa3785b5ee0087d7461e91fa2e326ee07c227872a814487a20b244c2f96c187","first_seen":"2025-12-08T04:02:28.610897Z","last_seen":"2026-07-17T09:18:25.922891Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.243Z","timestamp":1784279871243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/preset.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-206d\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8301,"size_decoded":1706,"mime_type":"text/css","magic":"ASCII text, with very long lines (8301), with no line terminators","md5":"667afa9c8becbcc4eb72ac7640632f42","sha1":"963014f9ab2e78d22be382ce9fa863f75d9ea73a","sha256":"afe84229b5038550a10b99da3b43906043eaf40616befc3a87fb05e109088bc9","sha512":"30d2adf0e78344d02095735666477d313d823188168d0062e82c917cae3b12d7fc3a1e1c92c2360cd0df0d48644e05c1dd3701545cf52c811e74aac92b31ed8e","ssdeep":"96:sRQr2NvADkzwQXcl6CPO85TmgHFqfws4HCxi:sRQr20+wQslvFqfwVCY","tlshash":"1a02dc62f4c2523d702f917c52f1b73c7d3d9852da022f3ca4a6b7b523871db1662685","first_seen":"2025-11-01T17:37:40.406132Z","last_seen":"2026-07-17T09:18:25.9237Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.271Z","timestamp":1784279871271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/rating.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-3a4e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14926,"size_decoded":2800,"mime_type":"text/css","magic":"ASCII text, with very long lines (14926), with no line terminators","md5":"9e4571fcd0166476d5bc2ab7a4f6d8fb","sha1":"18d64c425d6e6899ecbc27bcda685c4e0f63ba84","sha256":"67032ba8ac7e8129904fb9d89dbe192e7645026b768620692a9ad0f3e9271f65","sha512":"058ae0e536257f702e5a129541a814320fc55b5952537be3eb9cc56dc90b7c95f2155a572b26b40af7102c27f8ae67ce78a69aeb4aa60e1607b02fe7848189bb","ssdeep":"384:/LvdJXFIxWolT00UYkU1JLK2A8Qj4qjHkx01AfxKfwXEFFzljEWvsV+ysXTgD:/LvnXFIQolT00UYkU1JLK2A8Qj4qjHkh","tlshash":"916222235058721cb517f43067a8b29af13dd5a79a132afdd8df51118bcbe8503e1e8e","first_seen":"2025-11-01T17:37:40.369881Z","last_seen":"2026-07-17T09:18:25.924522Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/images/rating/badge-1.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.353Z","timestamp":1784279871353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-5ef\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0884de274bae3d6ec31ccd5d9be8c3d8","sha1":"3b63951346a68139406a7cdf2d248b9abd4b0e1d","sha256":"2245fd540f2a4bc8fd960f88a97777333b930813c26101cd633eb6f32c4f7e24","sha512":"dee333a4091183b7aab0b5951e0ac754136698d907f79021201a0b720754e963adc8ee9c09cb081a637bb9787f9d60f418225c975c298eba29f28fa99d1a99ba","ssdeep":"","tlshash":"d731656ab21d6835f01845bc9e62c43d14767cf70cc1500156e1fea9e0b74c61cbaadf","first_seen":"2026-06-15T04:41:24.080103Z","last_seen":"2026-07-18T07:26:23.938123Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/fat-pirate-logo-12.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.364Z","timestamp":1784279871364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/fat-pirate-logo-12.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10304\r\nlast-modified: Fri, 03 Jul 2026 12:36:31 GMT\r\netag: \"6a47accf-2840\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10304,"size_decoded":10649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3abf1b63b529dacbfbce77141d0713","sha1":"d66d7cd249f048046bc3eec8d7eb37c345e6754d","sha256":"de13940234c35f39dc1a5b48c9123b4869f8df868e4290b255fb6683d48f86ee","sha512":"9454bf9ceae50728a7ce9a828c47a7001815531a84397bde6a5731cf3cc357f378fce1599a511f85536c1e6705c38a139d10b89c79111f3e10150865514a9202","ssdeep":"192:wwT9cKAJo9hSHQf5H4Q+uKTWl9S7gFuIM5fiQdPncQ/nQG3Rq8:wwTTVoGYQkWbSy2piQdvcCQGQ","tlshash":"b322c0f022522da8f203fdbb64ea5340d6ba2427961d37519311fbbf1f079c4249e98a","first_seen":"2025-11-13T03:52:08.194529Z","last_seen":"2026-07-17T09:19:36.553583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/ios-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.381Z","timestamp":1784279871381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/ios-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17794\r\nlast-modified: Fri, 03 Jul 2026 11:11:23 GMT\r\netag: \"6a4798db-4582\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17794,"size_decoded":18139,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba09e58e565ac3778c7c7a526364cb39","sha1":"3642fb6d407814eed4a4a9c59ccb9290209978d5","sha256":"ef246d8cbb38f7a3964bab4dee438c510f029ef899d0002a54e9fa044e44bc69","sha512":"0d9ac0effb3f89d0125f3f3c763717875d34bb4dd9a78e845bd6594c403c118f109c7899fa7b1d2fa2be8eb01ee8d6097d5711215fd3d2fc569cb3c6639f42f1","ssdeep":"384:Knd2CbxjwgmOAcAL2TggO27Duw6/e4wzupdh702R1LCZ37aUcbc:cd5igmOk2T3Oi96m41pdhY2bCZraUh","tlshash":"6082e1d4398a2121d47abb74eeaf0f926a607eccedfe150d7b510111ac71d31fe04906","first_seen":"2026-07-16T11:16:48.518564Z","last_seen":"2026-07-17T09:18:25.933967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.253Z","timestamp":1784279871253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/author.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-94a\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2378,"size_decoded":1052,"mime_type":"text/css","magic":"ASCII text, with very long lines (2378), with no line terminators","md5":"b584c3ce36132f4898ce6dec831a5af4","sha1":"76a32901b198fea26401c40c957f852c1871367e","sha256":"99483cc52f2cbc3f81b001641107156880b9a47c26b9cb4d3f92cf41d30d7b24","sha512":"f0a64241b3bf43cd85fb9318f3992c3305161cdcfb78c62e89f89836d537e070532b43c90081b71f970bf3bcd1a38a6ebcdb407f671bb2ac14af8edf7e19ac01","ssdeep":"","tlshash":"b541cf3361211b1cf813d53d179496dff299e056a21e33e99dc16a98c7c73860ab124b","first_seen":"2025-11-01T17:37:40.346297Z","last_seen":"2026-07-17T09:18:25.936889Z","times_seen":9,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/rainbet-logo-150w.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.315Z","timestamp":1784279871315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/rainbet-logo-150w.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2596\r\nlast-modified: Fri, 03 Jul 2026 08:13:06 GMT\r\netag: \"6a476f12-a24\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2596,"size_decoded":2939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5b7610d941b9ef0cc1052b3bda5e3fa","sha1":"db47b8d01eb0b9ca50940909da682212b30d62af","sha256":"066701860b77b2a55ec49c15842ac5cb01a83fc84d041f20c7af74d32bcb9d09","sha512":"7398dc0a4212ac68c6a0059e943b75c75638faa87ea64db0d05babd42debbb71672767a20ed34e4ddea8f6b31e14aedf94d536982849361c9dae7ce43c76084c","ssdeep":"","tlshash":"475139ac0f138c26d31b207e83fc97a54a2b4444e53ea8d60084a5fc4ca44e09eb7ae5","first_seen":"2026-07-16T11:16:48.538579Z","last_seen":"2026-07-17T09:18:25.937821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/legionbetlogo-removebg-preview.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.358Z","timestamp":1784279871358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/legionbetlogo-removebg-preview.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 6364\r\nlast-modified: Fri, 03 Jul 2026 12:34:46 GMT\r\netag: \"6a47ac66-18dc\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6364,"size_decoded":6707,"mime_type":"image/png","magic":"PNG image data, 119 x 28, 8-bit/color RGBA, non-interlaced","md5":"b7370aa0ccffac49558538fb439037b5","sha1":"47998847f03d452c02ed2bd1e97dced4109469b5","sha256":"c5698aad4bd453efa7e27e92ac4c607385f0ccf0741e67b94d8376490b094f42","sha512":"56f54e2a63ce29499e3f87d9f06b7b23bd95cff62bb6034fc7685b2442448d82f43cb0356ad811752fe09d58fc891154edd95cd686b60e06e9902032a283fc26","ssdeep":"96:p1CHsMy9UB1W6rLAYZdlzEue+BAaMT4gNZxfKPtxFnWVzULiQ1SPBD0uyA4P:p1BMwR6jlzEue+BAj/Z1KNWKiQ1SP14P","tlshash":"33d17e4615837bf95dae170610bac0fad1acc22107a53d9c1af4e8d802df2aad8b534a","first_seen":"2026-07-08T11:52:31.622868Z","last_seen":"2026-07-17T09:18:25.93909Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/bet.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.361Z","timestamp":1784279871361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/bet.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2900\r\nlast-modified: Fri, 03 Jul 2026 12:36:31 GMT\r\netag: \"6a47accf-b54\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2900,"size_decoded":3243,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-07-17T09:18:25.939607Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/images/rating/badge-4.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.362Z","timestamp":1784279871362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-4.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-5ef\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1519,"size_decoded":1091,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29f2a2ab79f5114bb28356e97a36edee","sha1":"477e35cba5ebc90ab4608662bc9003ea6d19d98c","sha256":"eebfe679d89508815562df7a571fd466b0d2353d35faf3ea2420e3ea63772862","sha512":"5e8ab31e46ccfe166330307f65193794369f45d095d6165c17bb5c542b5c91e72e5a06f04ff6b127901a1e958c7ef0692184b4197ac9263a4be055eab9b7b4e0","ssdeep":"","tlshash":"6f31926ab21c2835f01886bcae62d43c047a7dfb0cc1500144e1fea9d0a58c61cbbedb","first_seen":"2026-06-15T04:41:24.097257Z","last_seen":"2026-07-17T09:18:25.941058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.365Z","timestamp":1784279871365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15518\r\nlast-modified: Fri, 03 Jul 2026 12:36:31 GMT\r\netag: \"6a47accf-3c9e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15518,"size_decoded":15863,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c86e61717fea552091fc5acb99de1f5a","sha1":"978ba637bb978873770b8f14d203d21a1602199b","sha256":"60e31bfbfc92a13f1b97a79d54feac912231b48805db7765d5e9d8249255ba4e","sha512":"4124eb178de9d99b90aab8d1b60db58d2ae36d4acfdde8c6c466447f9f0fc109bb405892f327464b191ee1645f32ba5268e90317a42b14eebf314a120b224591","ssdeep":"384:nwT2k3tkHfMSRiEl+qnrgE/kyGKNh+Uftf:wT2k32/MuiEIcB8FKNh+Stf","tlshash":"34626b1acae3e61cdfd07974246d2707fd6a107f830df991020b993cf6b52a71a36961","first_seen":"2025-12-08T04:02:28.680212Z","last_seen":"2026-07-17T09:18:25.943735Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-includes/css/dashicons.min.css?ver=7.0.1","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.240Z","timestamp":1784279871240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0.1 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 08:45:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589a12-e67c\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59004,"size_decoded":36087,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-18T15:15:02.322205Z","times_seen":62172,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.257Z","timestamp":1784279871257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/cards.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-221f\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8735,"size_decoded":2346,"mime_type":"text/css","magic":"ASCII text, with very long lines (8735), with no line terminators","md5":"3e30683268da9d9237d359c1cbba52a9","sha1":"b4961a86e77b5c03feab8afe2c0c639fc7ad6b97","sha256":"7bed67f793c8eadebe74b344706b615ab13ae48db87615b61b85796f8523b2df","sha512":"430274ea944fe0e8ee11f82c4d263d49d472bedef33ff871e9689386e64233b460d9df3b39e5f53ff19fd2cc3e9ab8fc3ef638432f7e5d663d40bbdaef0eec71","ssdeep":"96:b/XtxMaCOcH6vsXtaXOFP0PONGWK1tYS9+Fdf4vgo0JkRr/u/e/xgXtxMaCOcHMb:bPAaMHwWwc0dVWmGLAaMH2AaMHhAaMHp","tlshash":"510254b2b1632269f14bdb27e960312d3034f076bb831bf7c8935716d39528b0a651ed","first_seen":"2025-11-01T17:37:40.385906Z","last_seen":"2026-07-17T09:18:25.946704Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/style.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.280Z","timestamp":1784279871280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/style.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-340a\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13322,"size_decoded":3523,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (582)","md5":"8d90f9ae6483d327ad939b04d41135f8","sha1":"8bd7407152df6af30f2476dc62ec4a4110c6aad7","sha256":"6f08c0a41b77faa2abbd2ec8fbb630665446828356be8166014d142777a834ec","sha512":"11427472fd2e2a3a381f95cd25728ba8686c399c0e58ad8a32d9565642aa6ff1522ea1693620081679bfb34290039aff0394d72268ed58fed96be70907934267","ssdeep":"192:WEod9OfcZ0aJqUy3rh4dLsqYFa1QuxlAo8:W5MfcZ0wqUy3VeNYF9d","tlshash":"485295a1abb356f1b53ac1362243fa647b7c4043170ea5b4e6d0b1887e04be819b3f5d","first_seen":"2026-03-28T20:05:45.600499Z","last_seen":"2026-07-17T09:18:25.948141Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/images/rating/badge-3.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.359Z","timestamp":1784279871359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-5ef\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1519,"size_decoded":1097,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a03905e08b3814ea391d982b21b62a3","sha1":"7519fc2404245e09e2611c52f2c26b2ff8d48e6b","sha256":"313c6821314204583c776446a3ec134791f39aa4a2542b3086a5be896622a1ea","sha512":"72091a2e34536fcc05e4a9a0e8413e1d66a07ca2be58fe02ebbb02452187555e3eead0c2991dd108bddd6321982df7d4a1e9c23169ed0bb5c43978e7c231ea38","ssdeep":"","tlshash":"1931626ab21d6c75f01846bc9e23d42d147a7cfa0cc2400141e2fea9d4a54c62cbaedb","first_seen":"2026-06-15T04:41:24.068077Z","last_seen":"2026-07-17T09:18:25.949354Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/laptop-1.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.386Z","timestamp":1784279871386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/laptop-1.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20612\r\nlast-modified: Fri, 03 Jul 2026 11:11:59 GMT\r\netag: \"6a4798ff-5084\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20612,"size_decoded":20957,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50ac4efa6231cada292d0760bd1c0e9d","sha1":"ebe4deb52f5eb9cc1d1d7eb7ae0876f6d859a266","sha256":"5741f5e34c80b379c80dd654702ebee7d407ab774a949c9b2b7c64581a67b899","sha512":"3a7db1407f9f89b8dc51a3ac945c0ef0747921ce692212ce582de62ff90c36686cbd7f5559262ccae8d924f50a923de3f5fe8a2568a1c7f26836ae63dbce12e0","ssdeep":"384:R59teS2miEwy1A2/zCJ3ayAk3u9b8u4e1/uiwahsMoz9g9Jm75duE61JqmfAzD7n:R5HJzeLWJT1/u/aW79AJ6jIk/7n","tlshash":"db92e00e674d1120903a3b3d1191d5894bae7b62d2ba113a3f34f1e74c6c859bbcc6a5","first_seen":"2026-07-16T11:16:48.556971Z","last_seen":"2026-07-17T09:18:25.950539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/openovergokken-1-e1783067853434.png","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.394Z","timestamp":1784279871394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/openovergokken-1-e1783067853434.png HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 3192\r\nlast-modified: Fri, 03 Jul 2026 08:37:33 GMT\r\netag: \"6a4774cd-c78\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3192,"size_decoded":3534,"mime_type":"image/png","magic":"PNG image data, 124 x 50, 8-bit gray+alpha, non-interlaced","md5":"e3fedd01d58fe5411e01ce9520726348","sha1":"ed88ff6ee9aaeee7c61d922987e94882f269c4ae","sha256":"15308530fa50b84f6fde30b2eb00a2cfaf19adf86f876524c139c8d4bc75a1d9","sha512":"64bc2f9cf001c11ba5d23a018c46b2f57ed13263204f1822f8d2f908212fda76d78af81f23510fdf49591d86793477a1ce687ca81c1519aab46a851bcf5407e5","ssdeep":"","tlshash":"e4614bfd3099649f9ebb4126a72bc582a5cce1800192ca8af66692399023658c26c4f2","first_seen":"2026-07-16T11:16:48.535007Z","last_seen":"2026-07-17T09:18:25.954902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.239Z","timestamp":1784279871239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css?ver=3.13 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Sep 2025 08:36:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c3db79-d0f\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-18T14:29:13.561201Z","times_seen":4467,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.337Z","timestamp":1784279871337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/icons/menu-button-close.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 371\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\netag: \"6a589db3-173\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371,"size_decoded":716,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c74bffa53f2ad73d1f225ddad7cbb95e","sha1":"62bb13e1b2e972f7a3bbf390a664f87ce4ade0be","sha256":"f333ef7a6c03e39fcbebcd825cdd1751661a56a180dc9bb0ccdcc6fef3366554","sha512":"7e682b9fdfad974aaa0cad7359ce44b25ccf9dffa8099ad382ef6839c8d6d12711891a543d269b3546d1935c407e6941927eea3566be3aa2389924c4d1874f44","ssdeep":"","tlshash":"6ce0df49531d0c3cb5224620d34836b4202642a3a648f998cc331938312860fb87f6ee","first_seen":"2025-11-01T17:37:40.39679Z","last_seen":"2026-07-17T09:18:25.960885Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2026/07/featured.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.389Z","timestamp":1784279871389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/featured.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56448\r\nlast-modified: Fri, 03 Jul 2026 11:42:29 GMT\r\netag: \"6a47a025-dc80\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56448,"size_decoded":56793,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d31a3dbc85941d5eb74ca1d571aec69","sha1":"a282037acd0c1b925ab36081b09bc439d936e0e1","sha256":"ea512bd27745947524a552e61b19623809bbcce40e588a262abe8aa05e6899e5","sha512":"855ab2d68169cea5d3dacbe6c27f7cc93e602e983b3924f43dd7d459c32335d3f9c0c120bdf21e73049b7f17fb5e8c9b6621363706db58eacdd2a650a84defea","ssdeep":"1536:x7IqKIXS9i4VMg21VBtlnSZ3VI9eqF9Ny9pJPzcym+g8lFJ+kr7:x7co4KgYBXs3VI9eqBCpJbcR+g6Qy7","tlshash":"cf43021b41d6555dc9738cbfd0f87c95bda4ad62c764aaf508b0d930fba332453d2045","first_seen":"2026-07-16T11:16:48.512853Z","last_seen":"2026-07-17T09:18:25.964886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1784279870","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.248Z","timestamp":1784279871248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/css/popup.min.css?ver=1784279870 HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-51e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1310,"size_decoded":892,"mime_type":"text/css","magic":"ASCII text, with very long lines (1310), with no line terminators","md5":"49511f8bc74a2e403b9a1111ae593156","sha1":"54d4ccd0e0c2b45fb2f5c86032bda2e4a039ed27","sha256":"e90754ef95eb9e4a22bb6ff12c57dd5d428b93f463b60e079801d9e48dfdb4d1","sha512":"6da7715ac374ea3f1fd99df45f0d00b04c19436505fc23fd7dbee0118f8c92c0ddb0d26ef9e7fb8b270cdec52c85ff1c56d44e24066a89af69370af8a0ded576","ssdeep":"","tlshash":"3c218777ea50f61da02ed568e242559db279d029b306aef7c845fdb583c62c300b11ac","first_seen":"2025-11-01T17:37:40.366875Z","last_seen":"2026-07-17T09:18:25.965894Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/images/header/gift.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.340Z","timestamp":1784279871340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/header/gift.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-689\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1673,"size_decoded":1029,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea3cb6ddc0e5387404a1ae105a823b83","sha1":"b5c3e4e0f2d2aa534a6f0358e85e26aa803868ed","sha256":"c542c748e09fd54d085939feabad78841d1bdc2c0153de00655ea4f63a1faab1","sha512":"7ed9a9d892883b5c035118a6f44c4a55b98653a21b21af541ba8f293fde0ef06454b7fab27cfb9ac2aff5155ce1ad947c9e183bb942e61166033631740185faf","ssdeep":"","tlshash":"57314cf4d5a863d2e4072729fc25f939a55724f09bf8cec4c110ae432eb5899ce9d0e2","first_seen":"2025-11-01T17:37:40.407574Z","last_seen":"2026-07-18T07:26:23.940374Z","times_seen":11,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/uploads/2025/07/tikitaka-casino-logo-8.webp","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.379Z","timestamp":1784279871379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/tikitaka-casino-logo-8.webp HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12990\r\nlast-modified: Fri, 03 Jul 2026 12:36:32 GMT\r\netag: \"6a47acd0-32be\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12990,"size_decoded":13335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d262f08ed4bba5e8a256279f4b5e0f01","sha1":"75151d7a30a761f5dabf220a9b599061d81b0ea3","sha256":"0b396f33adc3c5275ba2d3c02d97d58ca6f57a6b1b4f3a3db3914b96ae45c778","sha512":"563ec10e9f819d5079c0e47c1f48f459b2f54518cde583adec1c09e023f525f773fee16cb259bb5fc31ec00c70a4f3a96a3d5e60649d0f8052b2bcc2261d32d3","ssdeep":"384:5wTR7AAmZWoW2l3OfvVtI8R8I9YQ7d4CYuKpG4VjdkH/H:mTmFZWoW2laVLiI6QOCZl8jMH","tlshash":"e842bf1f26d45669d83c223814caee64a37e01a2d24adf583d5c48c4dbec2858b292de","first_seen":"2025-12-30T02:21:12.812441Z","last_seen":"2026-07-17T09:18:25.967633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetapp.co.nl/wp-content/themes/casino-reviews/assets/images/screen-bg.svg","fqdn":"rainbetapp.co.nl","domain":"rainbetapp.co.nl","tld":"co.nl"},"ip":{"addr":"183.81.169.24","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetapp.co.nl/","date":"2026-07-17T09:17:51.784Z","timestamp":1784279871784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetapp.co.nl","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 08:41:58 GMT","end":"Wed, 14 Oct 2026 08:41:57 GMT"},"fingerprint":{"sha1":"62:48:22:6E:BD:78:B4:B3:B6:95:16:80:02:FE:AA:DF:89:5F:02:B0","sha256":"25:53:8C:7A:4D:90:58:EA:07:D6:26:31:06:25:D0:D7:90:17:75:1D:67:BA:CC:6F:03:9F:07:85:60:14:29:72"}}},"request":{"raw":"GET /wp-content/themes/casino-reviews/assets/images/screen-bg.svg HTTP/1.1\r\nHost: rainbetapp.co.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetapp.co.nl/wp-content/themes/casino-reviews/style.css?ver=1784279870\r\nCookie: pll_language=nl\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 09:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 09:00:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a589db3-b4e\"\r\nexpires: Sun, 16 Aug 2026 09:17:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2894,"size_decoded":1305,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cb9262bc67898cc9b080e459faa21bd","sha1":"039a563e2c944bfd59c6e701512e56492abc0f5d","sha256":"bd72f7787abf502c2fcaafdcaa0d5eb4ca4cc14cbb9a6585d6414d4a5d78f446","sha512":"46a7a97d5356ed8a2219d37992aad25df890c2d59064930330ada2fc51b991f1f8d28f765b335a04ad2f446ab586d479ccc4a87b0fdb0a5e74547e9a6b0b3e8c","ssdeep":"","tlshash":"a251e3af620ebc0087492bddff1976724623c1d1db58c0e85501ab5f7980a7a9e3dec6","first_seen":"2026-07-16T11:16:48.564749Z","last_seen":"2026-07-17T09:18:25.968676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"rainbetapp.co.nl","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}