{"report_id":"df2c701f-253d-412c-9f66-88c85a7c305d","version":0,"status":"done","tags":[],"date":"2026-07-22T10:11:01Z","url":{"schema":"http","addr":"rainbets.de","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"title":"Rainbet Casino: Bis zu 500 € Bonus für Neukunden","dom":{"size":252072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27251)","md5":"ef748f7772cd1bb155563a6bdfd83390","sha1":"26ee7250e3686055356897519550abb5e7645605","sha256":"5ee123544c05e3524c7278ddf63856865ac74e867bf123787a25f96f3d913e9d","sha512":"1db412ffdd85408f9e89f691d859ec5e8c9755d78cfe06709c84de1949c172833b8c2930f0102218a89e2da9bf466c7c5e844a73954f1c7e1a233a872398e7e5","ssdeep":"1536:HCuN68e5YP/9oa8upPPnIorKcik9ng4XSU9T4M2ZhbNkE75rIW5l1J+D98Ju5r+z:0WzpPwGKcY4CAA7baDOf2a","tlshash":"0034f7b36285707d733ba6a6e414774c706df20bcd0205e8f2eed59893c6ea14a76e4c","dom_hash":"domhash4e151a6110ba7992c8be0281007d2356","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbets.de","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:11:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbets.de","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T10:05:39.245155Z","last_seen":"2026-07-22T10:05:39.245155Z","alert_count":68,"request_count":34,"received_data":762596,"sent_data":18808,"comment":"","tags":null,"fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/ab6f45fa87deb6e8b17be5377571d331.js?ver=1d331","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5733,"data":"","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-07-23T01:20:29.919102Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-i18n-js-after","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4019dd6cb141789b0796bd32152afc05","sha1":"ea76fcdb8d076bfc9fbc92d294deea51c44a2e78","sha256":"324dc04fd83b08195a001ad518b617f95ff9804545f149015c0e34a75c289db1","sha512":"9670483ee019a785c7f88d6587290663a166a1c716a3bd98bb180ed7b6df341e92218b5af35f2722d62910ab6ac056310747a20444eb9d3d882be8e0aa16a99d","ssdeep":"","tlshash":"20f012cbf4ab3d50828fc7b48d23ba0145502487c2afd50875e59d3496718c0b4c362f","size":624,"data":"","first_seen":"2026-07-22T10:05:46.311323Z","last_seen":"2026-07-22T10:11:03.219001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/contact-form-7-js-translations","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd2193929c7b781ce21561a4f2393bf6","sha1":"774fb5f7898b4d9938bd8a23256ae7b307ab7532","sha256":"22610a22d4b60c716b272ce7b720bae0bef7016720eb8c91f3d9754eba03b6e0","sha512":"566eb5a4f577e9f5b63d58f6b83822ca07b73c9d7fb2dfc0f4b92e869488d3825eaacf3a437057bbe06fae125ebf233842e20b55f032d5181df356664e962d9e","ssdeep":"","tlshash":"db216084dcbcde22418192ba30ab7e4570bcf500d32b1c03610e040a1650abca9f390c","size":1210,"data":"","first_seen":"2026-07-22T10:05:46.309334Z","last_seen":"2026-07-22T10:11:03.219657Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-22T10:52:12.485375Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"47b45ce21056ac6c72d50148d1e0efa8","sha1":"9e0f9c4e8addc6b401eddf9c86f30477c2f83761","sha256":"7f5d8f24ff373c50f31df29e3c3990986bfb4e98c47bc7920d17e1c170b3e3d6","sha512":"8076b28c3a920f876d59428a50bc912e1c5c8a613be43bbf1c668cdce5bca4f145facdfe3be68ad4324663192d0dd59bfc87ab28b6188105aaa4a6d271d86700","ssdeep":"","tlshash":"6e41fb31f3bc243147bf64b529a5269e2a3990823e878ca7cc9c9c0624c1e9d4875cfe","size":1902,"data":"","first_seen":"2026-07-22T10:05:46.301318Z","last_seen":"2026-07-22T10:11:03.220977Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-23T01:33:28.536522Z","times_seen":31753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b6bda0b4b332e963630023ced55dbbf","sha1":"8a82d510cbc039200e5e8d95211aebf4f518b007","sha256":"de113eed10c9d81e34eb3b382a3ded27b0645ef1d9f90ce98d3568dc62dde5be","sha512":"87acf5bef5ce2d059dfd4955e9721e4145e1e483e109b045292f3eb1ea6c3add040d1e71cb054f5040df010fd1d83fda3fd813c0b0ce7c700e2007fe4c9089d9","ssdeep":"","tlshash":"ad0144841cbcde264591928a346f7e4571bcf510933f1d03610e050e1650ebce9f395d","size":682,"data":"","first_seen":"2026-04-09T00:20:33.410098Z","last_seen":"2026-07-22T10:11:03.222135Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc00a78ab000f58f50668db7f47885c1","sha1":"60ad1414fe8182c2a16475edc83d79d75eec8a5d","sha256":"6de99c52464398f5ed5702e3d6f217cdf18544d00acc03592541f08549d61f1e","sha512":"2a7b25ee59e369b189dfc3f900cb634199a6afedc7b97d0aca33740b2c798b5ddc05f7d44b20d311209372bcf75d4f51dbec80db7fc6683edb51fd876f024057","ssdeep":"","tlshash":"8fc0809e94981c4524eac149057c131071149513ca1f5e15f34d004c6f68078a9145c9","size":168,"data":"","first_seen":"2026-07-22T10:05:46.303352Z","last_seen":"2026-07-22T10:11:03.222669Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8d4130f1ff541628021d8a9cb65a54b","sha1":"393bf0d9f52e01b3483e909b087af9f9c65db1fa","sha256":"952e0494a0ebf6cb3d1b2cdd46d729c3ecab3beca67e4e5474816eda04ebc53b","sha512":"50176a6c38c2d05bce177b5e58aefa3cf6042575b77096bc10c16314fdc000f71966ed9b3ad4325cc260036d89af41ca56d3f3b8982068f6ca5e9e7cf8b57893","ssdeep":"","tlshash":"afb02b9d48c00f1122900fd544305376225874108c1058008787c8500025555c958104","size":117,"data":"","first_seen":"2026-07-22T10:05:46.304469Z","last_seen":"2026-07-22T10:11:03.223323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"31219381122327662d8e5a871d675ad2","sha1":"3cb4bafc93ffe51d8e804e5d89c7a3212d23c6d8","sha256":"5c09bd2ce3fe66cea9105163747be8288ae5aace08d0769e0bde65063f0d6dbc","sha512":"dc6cb8c80760b75ba7c6895705c277749b6e633737483758274c9c0ba9ffade87f142562f66ba4569f40a19cdaea631a9d837d92a7165033fb0114c7a1958aa2","ssdeep":"","tlshash":"f82133bb69ac80b987c463d803044d5f65cc2119e2a9665cd242dc3801a835f5f8cb17","size":1129,"data":"","first_seen":"2026-07-22T10:05:46.305392Z","last_seen":"2026-07-22T10:11:03.225635Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd29938f1ad524bd6ba87f4c0bdf291c","sha1":"ccce2f1c6e49b96f686e080b7b85695a08b0adba","sha256":"c98099d4cd33c13298dc59ce0c8cf912d68a0ab756ffe1fe733dd2b224f08106","sha512":"7a3a9237343dd8840f4d9788b4e88875c086b4ca6703759708bf9ae22e1d7d781eb0f9c96dda0d3d2d1b7a2ad3f2f73262ebf8c149440c5b4865e5cc2d5d803d","ssdeep":"","tlshash":"04f059db6b5c0432c25f305e105eb3cc3d7d803269412d67fc78c45248e0d98966289d","size":545,"data":"","first_seen":"2026-07-08T11:52:31.658162Z","last_seen":"2026-07-22T10:52:12.494352Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9ade5d9c8fc3b175c640f717f2ee827","sha1":"f227c53e487d9256d7b8159dd4cb29c4e53a74eb","sha256":"f93e056a9d30355b8e868e9b5e3fc668fdb189bb2cb5bc0b4ee7d5747f1b02fe","sha512":"255ec582896d343076b752898c3abdbda1cf5b970716ca126acc6b125c15f73e1ffc3b89ef65039a5d3129d78fccbe3321e89010f52e1d804fc42c704e904ec3","ssdeep":"","tlshash":"df2149d2f74c1532c5ff357ea45a92cc2a2da071bc2018ba3d68623c0172e8c55a67ac","size":1386,"data":"","first_seen":"2026-07-22T10:05:46.306858Z","last_seen":"2026-07-22T10:11:03.226989Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-07-23T01:43:09.186879Z","times_seen":27089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/4ef21fae5d73ed4fa904a551a6c551cb.js?ver=551cb","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-07-22T20:14:24.066655Z","times_seen":9832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/4f55602b4a600665a0e54d4a2faab6a3.js?ver=ab6a3","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-07-23T01:43:09.051493Z","times_seen":10109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/scripts-js-extra","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"42e16f38143a71df1dbb62672748fce7","sha1":"aee2d7daad941a6ecd87a74bf5c25e95b20e8ae9","sha256":"f11dfd2b1f00f67ddd71675a4706ae68cf29e654493a939d4a813f8f6d0c89cd","sha512":"00158b6383a6661d5094e061024851b5b733e10324d814daf9e9d5ac9f20bde00eb5bb085c4419b9918294737aa5bf445d8160c7d1228619bbdc827ff91edde0","ssdeep":"","tlshash":"b2f02b9dc8c00f1162900ff54834537622987410cc109800878bc8500025555c958104","size":656,"data":"","first_seen":"2026-07-22T10:05:46.310267Z","last_seen":"2026-07-22T10:11:03.228573Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/6b26e292a8f904a232de8465c3cba30e.js?ver=56e20","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0837e15225d806b81b489aa5f3c74b9f","sha1":"10fab4e5f4dd140ca188964fd3901a34f71e9d5d","sha256":"7b3fa05c9b3f22332fb32cd6b5b72501f9b9225779b45ef9a189abbea51cbdc6","sha512":"4e7e80540aff7d595c9449b712e49320a53586e558847f8bda964937daa03f49b1d58a48e9d5715fbb7dd17121eec56770a8dd0a520b7d305d20dc01b8f6a5cd","ssdeep":"192:ajmU5FJoVRaeWljWgbuw9rPWImzgcxh2xEaM2DbnJ8:OFJ+RYbuw9r1ny","tlshash":"b7d194e563a47cbe05f64e459d3aaf86b8bd84bd5d83e016140bfc885c7c4d383816b9","size":6558,"data":"","first_seen":"2026-05-19T22:55:05.219867Z","last_seen":"2026-07-22T10:11:03.214722Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/129454cea3740acc33af23a513a4f662.js?ver=4f662","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","size":861,"data":"","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-07-22T10:18:04.987693Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/d1127a61b230fcb9f292c05055cf7add.js?ver=f7add","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bac0e224173b2ad101d5a489a3459cb","sha1":"acf0ac079a406b6fb0f03a6e07b6152c2f2ca4bd","sha256":"d19c8480175b0e8fda98b48e531afe4502cc84ccfdf34abaccc4737f3ba70ce2","sha512":"12d66c066f089c3b0d4e01eda375093235309784f94b8d2ee391937ac0b1ac7364019a6b42805dc6df6301b6987babfe9043ce3c5bb743d6e39cffc84a9c34b8","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiF:KZal0BKHWpkrM0KtmuECEA","tlshash":"0f13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc70e9bfa1","size":42053,"data":"","first_seen":"2026-03-18T12:47:37.565627Z","last_seen":"2026-07-22T10:11:03.211814Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/contact-form-7-js-before","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed7e5ba24de660d89a6ded00aec38273","sha1":"77fda25b33d43fce3e3cb3a580fe877afad9fb97","sha256":"98adaffe3a9c5e19b13f37743b2761fce00076a30e5d8c315e2302975166a109","sha512":"6e45d04abb4d3ed89d1c94e32978169ab9296ae0d183b765fe1a4b6add6904f9c7f3b57089b53f20ca0e29577107b2d1b0f720edb130feeccf17d81d97208c8f","ssdeep":"","tlshash":"8d01809ed4981c4524eac179057c131071149513ca1f9e15f34d004c6fa8078a9145c9","size":701,"data":"","first_seen":"2026-07-22T10:05:46.312151Z","last_seen":"2026-07-22T10:11:03.229281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/cmplz-cookiebanner-js-extra","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eab6a7eee47285e00bc0694e57766f36","sha1":"02f540d0b2c4d1bbbeda323bd18624d5d8b784a9","sha256":"92798edc1336b4cade7a1978292d2c8548a277499339762e6c656f1fb7bde104","sha512":"e33b7030fbb61bd9cd57338be0911e3997f72cc89217afe86aee1f9fbd9a77998c032b390e906c64ec7bf73098f9398a63c2f51e5bb55068d99426ca4b09a783","ssdeep":"","tlshash":"b83133bbe9ac80b987c463f803084d5f65cc2119e2a9665cd242dc3801a835f5f8cb17","size":1669,"data":"","first_seen":"2026-07-22T10:05:46.308345Z","last_seen":"2026-07-22T10:11:03.22995Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/11b3b3f32e139293e7c0eea80687b8a7.js?ver=7b8a7","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","size":493,"data":"","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-07-22T10:18:04.971803Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/1bf2a5388264a11ebdf7fd6ecc08b7f3.js?ver=8b7f3","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5051,"data":"","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-07-23T01:22:08.20331Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"opt-in","filename":"https://rainbets.de/wp-content/litespeed/js/d1127a61b230fcb9f292c05055cf7add.js?ver=f7add","line_number":1,"column_number":22242},{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://rainbets.de/","line_number":595,"column_number":7768}]},"http":[{"url":{"schema":"https","addr":"rainbets.de/","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:10:26.101Z","timestamp":1784715026101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nset-cookie: pll_language=de; expires=Thu, 22-Jul-2027 10:10:27 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://rainbets.de/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbets.de/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbets.de/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}],"data":{"size":253132,"size_decoded":49840,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27281)","md5":"3cd58575345a4731cc1bf92136825d55","sha1":"5d48a41f088086abb6a9d7201a2b7b249596cfa9","sha256":"a394663cde623c6acc167ac4a6b0bcc18456a4963038440c08f8ba6137d1d606","sha512":"cff3908edc35fcbc35835331e082711ae6132e37d099c83527b419a037de8f908d3fc95686231ff4c8410ee3ffe2a769caca27516a857e71cf818d41eff3c951","ssdeep":"1536:/CoN6815Y+GLEKqs6upPgrKcio98gyX6U9T4epMhbWkx219IwPLSjXV98JuCI98x:JWjpPkKcJyKANqb5VOEq2S","tlshash":"2f34f6b36284707d723bb6a5e454774c706df20bcd0205e8f2eed598a3c6ea14a76e4c","first_seen":"2026-07-22T10:11:03.200041Z","last_seen":"2026-07-22T10:11:03.200041Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1612,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":1559,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/css/4614f71328c721568607f03de6ad23d0.css?ver=d23d0","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.032Z","timestamp":1784715028032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/css/4614f71328c721568607f03de6ad23d0.css?ver=d23d0 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-e69a\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59034,"size_decoded":36100,"mime_type":"text/css","magic":"ASCII text, with very long lines (58999)","md5":"71a3ce4b27e2345b0274353459cebfac","sha1":"24f8b72dace992657b9820acb527715971d4c0e6","sha256":"2919b21d93a8e3344e71594996f7da3c1be241b08e9754469338dee2a5beec88","sha512":"e881de9d8a7a95c8e6f5ece5348748781e1d36ebb3e0175c970f7b457a40a0a4deedc0db6173c1516b0793a8af8f83dd4dba354a02f7002e74282a2b054e3ccb","ssdeep":"768:key/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5sJq:kx/ZvB/qPWMiquqioMUXQSJYIMW+sJq","tlshash":"a143c2b1e64a40d677b0c843af65b27a5582bd7df8409cdaf40b821c1af3635069dfb8","first_seen":"2025-12-21T10:12:52.061018Z","last_seen":"2026-07-22T10:11:03.201192Z","times_seen":45,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/polylang/de_DE.png","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.616Z","timestamp":1784715028616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/polylang/de_DE.png HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 357\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-165\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357,"size_decoded":698,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-07-22T17:56:58.283829Z","times_seen":493,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/4ef21fae5d73ed4fa904a551a6c551cb.js?ver=551cb","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.051Z","timestamp":1784715028051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/4ef21fae5d73ed4fa904a551a6c551cb.js?ver=551cb HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-30e1\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12513,"size_decoded":3882,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-07-22T20:14:24.066655Z","times_seen":9832,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.242Z","timestamp":1784715028242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4bc4\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-22T10:52:12.441304Z","times_seen":151,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.246Z","timestamp":1784715028246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4d38\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-23T02:15:01.800223Z","times_seen":192,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/complianz/css/banner-1-optin.css?v=915","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.325Z","timestamp":1784715028325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=915 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jul 2026 17:28:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a57c32d-3def\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15855,"size_decoded":3274,"mime_type":"text/css","magic":"ASCII text, with very long lines (15855), with no line terminators","md5":"12ab70e2c7daad531f5f4eaf52e810ce","sha1":"03d6ace31c16cc1dd5fb8c706c54be1f062b2a9a","sha256":"e35ce3e04bba31850e500bbc96cf39ce2ed156451303b2e6c1a6b29453615a26","sha512":"6621466d79ccd842120f16c531daf86ed7df190fa90400960ace4749f5a841ec90c85ff875df86bc1641621787e62ecc794a267a5641fb3421cf4d2fb3830ce2","ssdeep":"96:su9ppeDJjeWeyne6ngZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6OoP:f0EpVHWDi5cWi2IWRzZbZ3sMBg","tlshash":"d36220a99e0c1164e2cfdf1d3baa960e9114f731b29d1af824a17850f2fe5d11d2e387","first_seen":"2026-05-01T02:13:44.27683Z","last_seen":"2026-07-22T10:11:03.204743Z","times_seen":13,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2026/02/cropped-favicon-192x192.webp","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.366Z","timestamp":1784715028366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-favicon-192x192.webp HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9074\r\nlast-modified: Mon, 23 Feb 2026 12:59:01 GMT\r\netag: \"699c4f15-2372\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9074,"size_decoded":9418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cade65f3aaa88e88581d0739b2e4ea6","sha1":"fbe474f56427376173c725bde058c06c53cbbc40","sha256":"6b1ff21bea21d9df37e29a6ba62d388cd4bc7352f48476550723eec0911b3438","sha512":"9800e4d2c7e5e982ff62fa16d745e91d06cafdbad9ee9571b3cee700543514b88b012c4526fb5130d7646b151bc1c026cb8eacdbac272bdc0d57e84da8c459ac","ssdeep":"192:p3ZxLkMTOTcNS65FipaR6gZxKmJMWIg4vH1BMiUl6oZ0:ppGiMcNS6/damJM7T2s","tlshash":"0a12d070b6e12025a6ce71a23012d008309a9e4a19cc4ff490adfad2b6dbb47e6d007d","first_seen":"2026-07-22T10:05:46.286973Z","last_seen":"2026-07-22T10:11:03.205307Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.459Z","timestamp":1784715028459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4c7c\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-22T10:52:12.442241Z","times_seen":180,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/css/9d34705ad26e4bf3078280ba63988cf8.css?ver=88cf8","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.043Z","timestamp":1784715028043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/css/9d34705ad26e4bf3078280ba63988cf8.css?ver=88cf8 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 733\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\netag: \"6a609713-2dd\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":733,"size_decoded":1073,"mime_type":"text/css","magic":"ASCII text, with very long lines (733), with no line terminators","md5":"c7129c93c822649d49577c7203080f9f","sha1":"5c919215db7f4d6e0bc532335e00af59df5c2549","sha256":"1aec2b29f7d0b94b212e56041e79c1b8c8096767b4a43cab300788bf8e8beac7","sha512":"97905924d6b46ac6a26f390ead0cea1213d81767fbf838c590c071f800adae035f5a0f5a432019c51eddd395681bb964bb93f304127cffe7e7a8600ab1e21a1c","ssdeep":"","tlshash":"10017b11e7113029773ec24e5483e6e5d80e6253d3a146abb3d3f060ba801dc1b73bad","first_seen":"2025-07-13T16:05:55.085455Z","last_seen":"2026-07-22T10:18:04.945456Z","times_seen":21,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/1bf2a5388264a11ebdf7fd6ecc08b7f3.js?ver=8b7f3","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.046Z","timestamp":1784715028046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/1bf2a5388264a11ebdf7fd6ecc08b7f3.js?ver=8b7f3 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-13bb\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5051,"size_decoded":2205,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-07-23T01:22:08.20331Z","times_seen":235,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/4f55602b4a600665a0e54d4a2faab6a3.js?ver=ab6a3","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.053Z","timestamp":1784715028053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/4f55602b4a600665a0e54d4a2faab6a3.js?ver=ab6a3 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-348d\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13453,"size_decoded":4645,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-07-23T01:43:09.051493Z","times_seen":10109,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/11b3b3f32e139293e7c0eea80687b8a7.js?ver=7b8a7","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.064Z","timestamp":1784715028064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/11b3b3f32e139293e7c0eea80687b8a7.js?ver=7b8a7 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 493\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\netag: \"6a609713-1ed\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":862,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (491)","md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-07-22T10:18:04.971803Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.449Z","timestamp":1784715028449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4bc4\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-22T10:52:12.441304Z","times_seen":151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.462Z","timestamp":1784715028462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4d38\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-23T02:15:01.800223Z","times_seen":192,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.623Z","timestamp":1784715028623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606e17-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-22T10:52:12.450548Z","times_seen":58,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.632Z","timestamp":1784715028632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15200\r\nlast-modified: Tue, 09 Jun 2026 13:57:00 GMT\r\netag: \"6a281bac-3b60\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15200,"size_decoded":15545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-22T10:11:03.209409Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.248Z","timestamp":1784715028248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4c08\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-22T10:52:12.469753Z","times_seen":176,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2026/02/cropped-favicon-32x32.webp","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.368Z","timestamp":1784715028368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-favicon-32x32.webp HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 698\r\nlast-modified: Mon, 23 Feb 2026 12:59:01 GMT\r\netag: \"699c4f15-2ba\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":1040,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e60d1cc4faa7952eabddcfb5731d1496","sha1":"8acfa3ad6c2ebdea922da6c238dee0aae464c48f","sha256":"58b37350fecb75838accf010f918ffcf4e33d35ba2701c86657df39ab5a9620a","sha512":"9607ddc8fddae46b52d09348353e7affe9125169786c07fa3cd6c06ca0d51496eea52dd8b9bf9dc11c74da3e373d268f66ccce662cc6f81ea66175936ccb6699","ssdeep":"","tlshash":"e40199fe439a5456defe6d105354374698ae2e203578052b350771b946d7fdf7844820","first_seen":"2026-07-18T17:28:24.598785Z","last_seen":"2026-07-22T10:11:03.210486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2021/06/Logo-black-2-scaled-1-1-1.png","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.651Z","timestamp":1784715028651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/Logo-black-2-scaled-1-1-1.png HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 35674\r\nlast-modified: Wed, 10 Jun 2026 15:01:00 GMT\r\netag: \"6a297c2c-8b5a\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35674,"size_decoded":36018,"mime_type":"image/png","magic":"PNG image data, 240 x 112, 8-bit/color RGBA, non-interlaced","md5":"e3e7d3767b0ec1a8dc053f8a6d64b7c3","sha1":"f56d4cfe52e6207ea2ba7f4727e6f6b78f50042b","sha256":"1e9e342045c462ea2050b85f8489f560c2fc245da8136cae9e98827940748553","sha512":"b080ad48f4b33103f3f1c41a12e0e578f2951cada4ee3418922ffd983499cb37686ef31319eb01ab5dc5d3ba0d1512e627204b7947360b1d1e0b967859f7421d","ssdeep":"768:nLPNALQ1XHGFOHLLT6eDDHhV8x0oLu5agG3oAz9vVq+:nd1XH80LLu6HTN+u5ag89zxVJ","tlshash":"cbf2f1e25e5952b49d18e328cf00d16a573f196e80ff3a9f88f84f24132ee5ee40465a","first_seen":"2026-06-22T07:10:50.454495Z","last_seen":"2026-07-22T10:11:03.211028Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/d1127a61b230fcb9f292c05055cf7add.js?ver=f7add","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.062Z","timestamp":1784715028062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/d1127a61b230fcb9f292c05055cf7add.js?ver=f7add HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-a445\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42053,"size_decoded":11326,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42051)","md5":"0bac0e224173b2ad101d5a489a3459cb","sha1":"acf0ac079a406b6fb0f03a6e07b6152c2f2ca4bd","sha256":"d19c8480175b0e8fda98b48e531afe4502cc84ccfdf34abaccc4737f3ba70ce2","sha512":"12d66c066f089c3b0d4e01eda375093235309784f94b8d2ee391937ac0b1ac7364019a6b42805dc6df6301b6987babfe9043ce3c5bb743d6e39cffc84a9c34b8","ssdeep":"768:8h4r4cjxYZaYSJjv+YfzwLpstNyu+BVurxesKNVhIkYJO2ybEXoHgFC1aRHWpkiF:KZal0BKHWpkrM0KtmuECEA","tlshash":"0f13d8b93adcd0b511ee47ed37abaf48e4303962d80fc8609565dc542268dc70e9bfa1","first_seen":"2026-03-18T12:47:37.565627Z","last_seen":"2026-07-22T10:11:03.211814Z","times_seen":73,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/ab6f45fa87deb6e8b17be5377571d331.js?ver=1d331","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.048Z","timestamp":1784715028048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/ab6f45fa87deb6e8b17be5377571d331.js?ver=1d331 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-1665\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5733,"size_decoded":2841,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-07-23T01:20:29.919102Z","times_seen":218,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.244Z","timestamp":1784715028244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4c7c\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-22T10:52:12.442241Z","times_seen":180,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.637Z","timestamp":1784715028637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606e17-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-22T10:52:12.463712Z","times_seen":59,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.696Z","timestamp":1784715028696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a606e17-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-22T10:52:12.476612Z","times_seen":53,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/css/56c65ff729748869e0b0369347a46657.css?ver=46657","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.030Z","timestamp":1784715028030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/css/56c65ff729748869e0b0369347a46657.css?ver=46657 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-b1e\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2846,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846), with no line terminators","md5":"f6196bb1d65063d048b732c1c2216b94","sha1":"1c895153246bf45663fd0d684711a3df83abab01","sha256":"0f96f56f605acf21ab53c0c7aae9c87ec3f75caf424cb08950ebeb9d91bb422a","sha512":"c173be6a64bbc7e5b7477cfda12e425dc5a9522545523cc04bff19ec61faa3a97a0f184667e105152c6c1fd5a47119f5c097dd69f91ec4dcdced02dbbfa59c51","ssdeep":"","tlshash":"3e51a8ca965f1137561293a874cfe2f52b760c33dfd2d78467728a28c20a5a193f3236","first_seen":"2024-10-15T14:15:03.276455Z","last_seen":"2026-07-22T18:26:27.502722Z","times_seen":180,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.465Z","timestamp":1784715028465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-4c08\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-22T10:52:12.469753Z","times_seen":176,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/6b26e292a8f904a232de8465c3cba30e.js?ver=56e20","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.056Z","timestamp":1784715028056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/6b26e292a8f904a232de8465c3cba30e.js?ver=56e20 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-199e\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6558,"size_decoded":2763,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3966)","md5":"0837e15225d806b81b489aa5f3c74b9f","sha1":"10fab4e5f4dd140ca188964fd3901a34f71e9d5d","sha256":"7b3fa05c9b3f22332fb32cd6b5b72501f9b9225779b45ef9a189abbea51cbdc6","sha512":"4e7e80540aff7d595c9449b712e49320a53586e558847f8bda964937daa03f49b1d58a48e9d5715fbb7dd17121eec56770a8dd0a520b7d305d20dc01b8f6a5cd","ssdeep":"192:ajmU5FJoVRaeWljWgbuw9rPWImzgcxh2xEaM2DbnJ8:OFJ+RYbuw9r1ny","tlshash":"b7d194e563a47cbe05f64e459d3aaf86b8bd84bd5d83e016140bfc885c7c4d383816b9","first_seen":"2026-05-19T22:55:05.219867Z","last_seen":"2026-07-22T10:11:03.214722Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/css/acbff7c4878cbf7093d630f4ddd3b06f.css?ver=3b06f","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.039Z","timestamp":1784715028039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/css/acbff7c4878cbf7093d630f4ddd3b06f.css?ver=3b06f HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-ade\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-23T02:18:53.184411Z","times_seen":30834,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/css/fa4c7b421ae04f6f1f5c8e5e19d1eecb.css?ver=1eecb","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.041Z","timestamp":1784715028041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/css/fa4c7b421ae04f6f1f5c8e5e19d1eecb.css?ver=1eecb HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a609713-929d\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37533,"size_decoded":5559,"mime_type":"text/css","magic":"ASCII text","md5":"71e8b7be361539fa310fa7de623ca1df","sha1":"8d8ce654a29c53ec2e00d70c7059f7c39fe80417","sha256":"dc528215a993220e64dfa5e8548b0502d245b4a5c6a046395e80b0dbe8a50398","sha512":"8b485fa8135ea6f90ecc4edcbc15e8d15402bda5288998d5c0d8aa8345f7ba72eb71c53a0c6cf1200d2c3843bf2f5a3b29c0c58ab8421c38ad8076084ec4a092","ssdeep":"192:/NqClYjXbi6ZzBOllrQnewojZ815/t4ssaWZZ+y876kCaZQF7hdCkiufoSfufTGR:FZs5IoQFGNKZvOeb7","tlshash":"08f221216ab73899651ff014ef992a0661485007f10addf8fedde28c6fce29485b1b4f","first_seen":"2026-05-22T15:40:37.867104Z","last_seen":"2026-07-22T10:11:03.216075Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/litespeed/js/129454cea3740acc33af23a513a4f662.js?ver=4f662","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.058Z","timestamp":1784715028058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/litespeed/js/129454cea3740acc33af23a513a4f662.js?ver=4f662 HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 861\r\nlast-modified: Wed, 22 Jul 2026 10:10:27 GMT\r\netag: \"6a609713-35d\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":861,"size_decoded":1230,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (306)","md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-07-22T10:18:04.987693Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2026/02/background.webp","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.138Z","timestamp":1784715028138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/background.webp HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57362\r\nlast-modified: Mon, 23 Feb 2026 12:54:44 GMT\r\netag: \"699c4e14-e012\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57362,"size_decoded":57707,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5571be15d7d8bb08c5e2e601fce52d1","sha1":"4ccb0c006a9ba12fc3f6bea36f03cb03066819a3","sha256":"442e1d3d8e04da343393e8dc6a6faf1e25338e088d83ccadc7f2341450dad3dd","sha512":"79cb4929b692ee59d44ef3bfa019a7b3cefcfa02f90845338ac43ec03a7ca563268fbf368fc957067f7fb833dccbc0f5404990007a9c7d78c63f41a3e67fddd3","ssdeep":"1536:nw+FxrqyLrpdVPuT4bjmP0oKPtIqz8UzeP3:nw+FxVLlbzbjmCI+by/","tlshash":"fd43028928e0cab839b4799ffcde0165d9038e66835483cd70cafb964d25b81ddc25dd","first_seen":"2026-07-22T10:05:46.2806Z","last_seen":"2026-07-22T10:11:03.217168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.140Z","timestamp":1784715028140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Wed, 22 Jul 2026 07:15:35 GMT\r\netag: \"6a606e17-df\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-22T10:52:12.47412Z","times_seen":50,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbets.de/wp-content/uploads/2026/02/rainbet-logo.webp","fqdn":"rainbets.de","domain":"rainbets.de","tld":"de"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbets.de/","date":"2026-07-22T10:10:28.614Z","timestamp":1784715028614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbets.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:23:16 GMT","end":"Tue, 20 Oct 2026 07:23:15 GMT"},"fingerprint":{"sha1":"FC:53:E7:A9:F1:4B:A1:34:9E:7C:AF:5A:36:A9:CA:37:35:C5:46:9E","sha256":"A0:8B:16:88:07:6B:24:88:B9:C3:3F:3D:B1:F2:FC:39:60:4B:02:AC:3B:42:7E:A6:F5:15:1F:EE:61:B8:AE:31"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/rainbet-logo.webp HTTP/1.1\r\nHost: rainbets.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbets.de/\r\nCookie: pll_language=de; c2_popup_unique_name=GVgRBVsdH0pWD1w=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:10:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11826\r\nlast-modified: Mon, 23 Feb 2026 11:34:39 GMT\r\netag: \"699c3b4f-2e32\"\r\nexpires: Fri, 21 Aug 2026 10:10:28 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11826,"size_decoded":12171,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7794b129366fd9156aa240f1d9693aa8","sha1":"cd6b6e474b50d6269a7a6a42c089f3fbcbc42822","sha256":"bbc20ec39c61a22b0efeea7bff4df08afebe004451d5f0094bbdd642570eaf46","sha512":"296e39f59b76ee5aa5f7e6dab3287f1ea13d33b468f3f66b90640bfde3f5f9794177128d49ce128fc46c9d2bfe24a27728494f5cb9b8152c6ace36164c321b2b","ssdeep":"192:Eob7nLCY5etJCW5J/Sonba7KODk69ri4bTnDp7xVuKzgTFDW1RuFuLWAd:Eo/nL54qW51SonbYzbH13zKFDWCaF","tlshash":"3332cf7e9ce449c3260751428e70d6f52ece04a5d9c9e80b1be970f4c7e7d0a8e181ea","first_seen":"2026-07-22T10:05:46.296054Z","last_seen":"2026-07-22T10:11:03.218352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbets.de","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}