{"report_id":"df82ec99-b35c-4817-a9a7-5b6795b18c10","version":0,"status":"done","tags":[],"date":"2026-07-22T10:18:02Z","url":{"schema":"http","addr":"rainbetcasinoofficial.net","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"title":"Rainbet - Online Casino and Sportsbook with 250% Bonus","dom":{"size":262786,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9240)","md5":"b37133e241cc50ac9324b21c8be8553a","sha1":"95d40b64244ca4560e297f518e1d738b6beff13c","sha256":"30f8024d17a9ba5016419941fca25d84598f64dfb49f7c8464c1aab034e41505","sha512":"486397bde7f8c96a369c2afb5b62ab0333813681d4778703459bde8a4e4e207f882cab4d8a00ff129bc9ed29d1d59099d10c1dc2f2766885cf1a48fa3bf860c8","ssdeep":"1536:CdyyfFyp1FbUkFOYpPC82Tjap2elsy3bk9Xizr91O02Tjq6BvrkLTfRMBHCWWSWk:fYAJpPJ2apRbiidabBDyWVr","tlshash":"3044d877565b3198262b76789bae7309332d9047c905cca47eded1888fcaa908cf1b4d","dom_hash":"domhash1e08a31d5166635a1bf831ffcd1f7376","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetcasinoofficial.net","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:18:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetcasinoofficial.net","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"2026-04-29","domain_rank":0,"first_seen":"2026-07-22T10:11:48.341206Z","last_seen":"2026-07-22T10:11:48.341207Z","alert_count":140,"request_count":70,"received_data":1818481,"sent_data":46290,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]},{"fqdn":"allrating.top","ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-11-13T03:51:59.857093Z","last_seen":"2026-07-18T17:25:53.446272Z","alert_count":0,"request_count":1,"received_data":3670,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fedf45e334742747337763817da30d61","sha1":"b74f622ac63060b87335534bf968031f7966899f","sha256":"60b633b97683afa52ad3be1cfc4b7ac32a729420725081f6874a1b7e8e2c1ed3","sha512":"81178631e8eb03a7915cfccb5eaa8e5b75e79c8da1246745355c920c43bc39944ecf2b4cc8b042e2216da9f1d74e890c3309a81b1bbf9ef10002556c83b2489d","ssdeep":"","tlshash":"4211123b3b6da5f907d163c816484d0f92cc6480d496c9a8e546dc3c0aac35b1b9db57","size":1074,"data":"","first_seen":"2026-07-22T10:18:04.98863Z","last_seen":"2026-07-22T10:18:04.98863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/af1767be552b6bfcd29041cd2330f3ed.js?ver=0f3ed","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4cd531af9ac4e1dbd6835803c6a0d68","sha1":"0946d3662393a38ebab2f3a3704653893d4b0ea5","sha256":"d8e9ffb24c3a86f35383902f314b9a9bccd2720cb7461e2d4f287e4af206a6f3","sha512":"68ff7e285516f80716ca54c67767fffe338e0bc96f445f89c4965e31df5b9c4ee59e05225a6df1ca6b273d32295ac7cf0a21e2ed13eaee6ff92fdf1a91aca762","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qChN:lM8mibdxPzKg469chJK","tlshash":"a602846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8566,"data":"","first_seen":"2026-07-22T10:11:52.899782Z","last_seen":"2026-07-22T10:18:04.976162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/91a7dbd30b485a9d4398c0e72258ecdf.js?ver=8ecdf","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3c1c6949727187ebbd5b54659a3b675","sha1":"d489c25b2f2d463d3ff7b09fce93404303cf03f8","sha256":"d09c36ce91dc7c2c91afedd2eae593a6ceb617fd3958227528c5a07c719b8bb5","sha512":"670eb6bdd75326d76556f562b690ddf4d4ba40e4fe7fe0b0f0be309178b8bdc9cc92eaa7c62753bb5024071c7bef8e7b77d114f5dccff2413c2b2a2a0ed78349","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbW:IZal8OHQpmZNemLECFKAI","tlshash":"d503e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40649,"data":"","first_seen":"2025-10-13T10:48:57.4473Z","last_seen":"2026-07-22T10:18:04.945948Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a4d682d4d60e33ea2e683285185d977","sha1":"ce9bc4439b7befc76d5abeb28fbf03ca68f490fb","sha256":"2f10a9d6e55ce202b8ace73896a1420ba29eb5f814f050f78da23f898d7c8c77","sha512":"ec304ab4e14ffc034b2a537fc5b7caf7f5c973b8845f718a9aeb35d6bd413c4c460e159b942b2b603b22f4517cdf9ecdd8c989abfc4243d64e408a12d07e5b8f","ssdeep":"","tlshash":"51112613b6002872d8ff2a7fb956524c3b21a151b8206468892daa2c1672fc251babcd","size":1000,"data":"","first_seen":"2026-07-22T10:11:53.034693Z","last_seen":"2026-07-22T10:18:04.989538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/cbcc733f85400874bf7dc2da147ca960.js?ver=ca960","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5051,"data":"","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-07-22T20:34:41.653038Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGFqYXg9eyJ1cmwiOiJodHRwczovL3JhaW5iZXRjYXNpbm9vZmZpY2lhbC5uZXQvd3AtYWRtaW4vYWRtaW4tYWpheC5waHAiLCJub25jZSI6ImUxOGNjN2Y4ZDkifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e97a83a944784c8bed4eb15e826161","sha1":"4d87c5e5e7abcc34a1bbb7e2faa6655fe2fb5a59","sha256":"21f173ca03c2cdf34678b31f7153591ed16018165a47559e45d42b613b8c71f9","sha512":"ec56a910eec9018c9ea2228b5973c87906616e48aa5c5e5badb84fab2b96b532756bd62f8b8bc292d437852b2e43f89d5ce79d906e3ccdeb8464277d88264960","ssdeep":"","tlshash":"edb0123706d81f8321b01bc24418229f471c28622c706c407b4be480c6099945de8251","size":97,"data":"","first_seen":"2026-07-22T10:11:53.029177Z","last_seen":"2026-07-22T10:18:04.990127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/742494d55facd44bbb0bb4495b2c5177.js?ver=c5177","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5733,"data":"","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-07-22T20:34:41.574778Z","times_seen":212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/42c7f697014fda12db2d29edad184916.js?ver=84916","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13453,"data":"","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-07-22T20:14:24.067372Z","times_seen":10108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/05b5364b67d20e326a95863fe6d5d435.js?ver=5d435","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","size":861,"data":"","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-07-22T10:18:04.987693Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/8c26caa3b057b839f654ee170f695aff.js?ver=95aff","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","size":493,"data":"","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-07-22T10:18:04.971803Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/3623ac8178cf88cddf834a92ed630d0f.js?ver=30d0f","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","size":12513,"data":"","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-07-22T20:14:24.066655Z","times_seen":9832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigiY29udGV4dG1lbnUiLGZ1bmN0aW9uKGUpe2UucHJldmVudERlZmF1bHQoKX0pO2RvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoImtleWRvd24iLGZ1bmN0aW9uKGUpe2lmKGUuY3RybEtleSYmKGUua2V5PT09InUifHxlLmtleT09PSJjInx8ZS5rZXk9PT0icyJ8fGUua2V5PT09InAiKSl7ZS5wcmV2ZW50RGVmYXVsdCgpfX0p","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf50de73e80be90907f9d063ab4dc13","sha1":"cf9ff1f3b50e0bcb3c579cf3be2bb90fa2c4c841","sha256":"d2282bff21607221d029139d4da81e21974fd6611ef1ae6cacffa2586753dd12","sha512":"6f556cf39dac1806d4cee11ef05aaeec8601d6c62885f80bfd5001cbb727360992f5fc5b0a87e62acb8255436f45fdce7897fa4cda747ce6c0038a6bd4b35039","ssdeep":"","tlshash":"0fd0c9757f24bab001f9612a267fea60097a54c2e041650476354c596e78888338ae3a","size":210,"data":"","first_seen":"2026-01-03T20:40:12.132526Z","last_seen":"2026-07-22T10:18:04.990693Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f664e7250425ccb6915f2908e1245c5","sha1":"6fa0f252c35fdd87cb308781a3a91e8d86348d17","sha256":"def81363db9d4366d5b1b74f68d4b48b903e5e92373a2cb9b77479f174fa7f7b","sha512":"1c6550d9b82175705de83b2a108c1c21f24cffa4d3732a404b38426a683e374aed8129aba69747c81d946220ecf058af6bd63b635702bca1ac2842da130114c0","ssdeep":"","tlshash":"08214d2c6535b566021f807632ff45f9653f29ce7f409eb27c2c40909ee8889376657d","size":1364,"data":"","first_seen":"2026-01-03T20:40:12.130051Z","last_seen":"2026-07-22T10:18:04.991191Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d3AuaTE4bi5zZXRMb2NhbGVEYXRhKHsndGV4dCBkaXJlY3Rpb25cdTAwMDRsdHInOlsnbHRyJ119KQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"04a9b59b7e49f913a3926f6431334155","sha1":"35f2521d3ab3f75895b02da9c6b5419e1a35be59","sha256":"94c4eed60653e14337c021261a52581e9b6f93ae9ba512912ca30ce656b3ac64","sha512":"40068c8ae55d5f7b8bdd0fcf5eabdf443cd6b033788c1686b0a96adf4f645bfd34d50ea7f0017c9514e3029752b213826373450e791760bf8310e0c303aaa750","ssdeep":"","tlshash":"57a0028530a76805c505d1605967fc00446415cb818eaa181ae5ee30e515598748232e","size":58,"data":"","first_seen":"2023-03-07T12:09:28Z","last_seen":"2026-07-22T20:14:24.088604Z","times_seen":17978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aec9c91f1e6a79de1c326f75a22648b","sha1":"e327de0bc1b738860de5d1db1d100cd465bc767a","sha256":"de28392f12cfe5b1c56d67d33d7cefd535a038fae1d5e6f4b5394c98aea29097","sha512":"ec6812821681940aa4cb14e3e81c143518849c933c3e1dd53d63c82c20346f1dde35cf7ee699614d36fd780ff33467230d8a70c629e3767cccc51b2ac1a2abce","ssdeep":"","tlshash":"7e31bd3473a17a7107af89f8209a1b956f3750863905c8b2ec6dcc5a6d81e460871dbe","size":1659,"data":"","first_seen":"2026-07-22T10:11:53.026955Z","last_seen":"2026-07-22T10:18:04.992178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHdwY2Y3PXsiYXBpIjp7InJvb3QiOiJodHRwczpcL1wvcmFpbmJldGNhc2lub29mZmljaWFsLm5ldFwvd3AtanNvblwvIiwibmFtZXNwYWNlIjoiY29udGFjdC1mb3JtLTdcL3YxIn19","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d82867b189c576c3c12361f5dd99892e","sha1":"84b0c70075a9803cdb342856c5f25df7e2c9bb09","sha256":"96aeb93a0a1b97a683dbc400c37e9a754b3775b66f2253a8319816a06bbc8d05","sha512":"4aa8cdc61c29dc41735ef83793d60b4440ea17252ce771fb8349dcf5961251dc2d3179d552c2a03e11645ee31e9efc2961e0c1a4531498bb33128ca3cbc09bfb","ssdeep":"","tlshash":"c0b0926a564aab441866d399830d2229361458434c162656d98a05845a592a89828192","size":108,"data":"","first_seen":"2026-07-22T10:11:53.031453Z","last_seen":"2026-07-22T10:18:04.992857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-22T19:56:46.287048Z","times_seen":30481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcignRE9NQ29udGVudExvYWRlZCcsZnVuY3Rpb24oKXt2YXIgcGxheUJ1dHRvbj1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgncGxheUdhbWUnKTtpZihwbGF5QnV0dG9uKXtwbGF5QnV0dG9uLm9uY2xpY2s9ZnVuY3Rpb24oKXt2YXIgdXJsPSdodHRwczovL2RlbW8uc3ByaWJlLmlvL2xhdW5jaC9hdmlhdG9yP2N1cnJlbmN5PVVTRCZsYW5nPUVOJzt2YXIgaWZyYW1lPWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoJ2lmcmFtZScpO2lmcmFtZS5zcmM9dXJsO3ZhciBjb250YWluZXI9ZG9jdW1lbnQuZ2V0RWxlbWVudHNCeUNsYXNzTmFtZSgnYWRhcHRpdmUnKVswXTtpZihjb250YWluZXIpe2NvbnRhaW5lci5hcHBlbmRDaGlsZChpZnJhbWUpfQpwbGF5QnV0dG9uLm9uY2xpY2s9bnVsbH19fSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f814583f7a6942b8374197e227e52662","sha1":"e72d859bd076bd99d70947c328d43214e8898db5","sha256":"3b0b3553fac48b013f02975f1d9b9c163d1010e47775bcf8158dd7ef5f52fb7f","sha512":"128e7f3c831f30ee186376b768d62cedbbee83e3b48d3e6b0e7562393ccd0055bbb35c4479063c481a0b6a6ffb3089465425de4aa60d1b434e3f5ab98a9dab63","ssdeep":"","tlshash":"b9e0abeb7b500872829f742f116eb3893e724033f9007e05e078c8a26cf4d4000a2d5f","size":413,"data":"","first_seen":"2026-05-19T22:55:05.229344Z","last_seen":"2026-07-22T10:18:04.993909Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[reload:map[configurable:true enumerable:true value:yes writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":10446},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":8511},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj46 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.7773014287552333] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj47 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.04347761010177931] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj48 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.24307779603097845] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj49 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.5702856647490226] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:wp-i18n-js-after type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj50 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.6740326643744957] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:contact-form-7-js-before type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj51 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.04469368886696867] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:scripts-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj52 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.17258609065790698] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[id:cmplz-cookiebanner-js-extra type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj53 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.15461717323610824] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj54 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.287120690194693] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[type:litespeed/javascript] attributesLength:1 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher16.process8//obj55 class:HTMLScriptElement contentDomReference:map[browsingContextId:10 id:0.9751179663730373] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-optimized:1 data-src:https://rainbetcasinoofficial.net/wp-content/litespeed/js/7d043ac43a82df1e435e7f70377a7dc8.js?ver=3f01c type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://rainbetcasinoofficial.net/","line_number":5254,"column_number":9395},{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbetcasinoofficial.net/wp-content/litespeed/js/91a7dbd30b485a9d4398c0e72258ecdf.js?ver=8ecdf","line_number":1,"column_number":20859}]},"http":[{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:25.285Z","timestamp":1784715445285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 282\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-11a\"\r\nexpires: Fri, 21 Aug 2026 10:17:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282,"size_decoded":627,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-22T10:52:12.436633Z","times_seen":114,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/css/efb11a4cd5d23cc218d82ace26e223bd.css?ver=223bd","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.811Z","timestamp":1784715446811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/css/efb11a4cd5d23cc218d82ace26e223bd.css?ver=223bd HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 733\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\netag: \"6a6098b6-2dd\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":733,"size_decoded":1073,"mime_type":"text/css","magic":"ASCII text, with very long lines (733), with no line terminators","md5":"c7129c93c822649d49577c7203080f9f","sha1":"5c919215db7f4d6e0bc532335e00af59df5c2549","sha256":"1aec2b29f7d0b94b212e56041e79c1b8c8096767b4a43cab300788bf8e8beac7","sha512":"97905924d6b46ac6a26f390ead0cea1213d81767fbf838c590c071f800adae035f5a0f5a432019c51eddd395681bb964bb93f304127cffe7e7a8600ab1e21a1c","ssdeep":"","tlshash":"10017b11e7113029773ec24e5483e6e5d80e6253d3a146abb3d3f060ba801dc1b73bad","first_seen":"2025-07-13T16:05:55.085455Z","last_seen":"2026-07-22T10:18:04.945456Z","times_seen":21,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/91a7dbd30b485a9d4398c0e72258ecdf.js?ver=8ecdf","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.890Z","timestamp":1784715446890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/91a7dbd30b485a9d4398c0e72258ecdf.js?ver=8ecdf HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-9ec9\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40649,"size_decoded":10961,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40647)","md5":"c3c1c6949727187ebbd5b54659a3b675","sha1":"d489c25b2f2d463d3ff7b09fce93404303cf03f8","sha256":"d09c36ce91dc7c2c91afedd2eae593a6ceb617fd3958227528c5a07c719b8bb5","sha512":"670eb6bdd75326d76556f562b690ddf4d4ba40e4fe7fe0b0f0be309178b8bdc9cc92eaa7c62753bb5024071c7bef8e7b77d114f5dccff2413c2b2a2a0ed78349","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbW:IZal8OHQpmZNemLECFKAI","tlshash":"d503e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-13T10:48:57.4473Z","last_seen":"2026-07-22T10:18:04.945948Z","times_seen":264,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/keno.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.919Z","timestamp":1784715446919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/keno.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7996\r\nlast-modified: Fri, 14 Nov 2025 10:29:32 GMT\r\netag: \"6917048c-1f3c\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7996,"size_decoded":8340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64d7b8cfe460a00a188a7f3aad7779a6","sha1":"eff39f2ac03bd64a842dcd4f9aed080eb078f0fa","sha256":"abe0568d75ad0a31229b4c9fd971d3e87b07424fe3eb554758870427bd1688f9","sha512":"a006f010530092549ae93fb3f28f08a9192311630350e4efa1861d747658971ac9acd1add1e274257b83131b0dc50c94e8572ab1f4cd50706041c56660079b3c","ssdeep":"192:ZLsjNrUtWG/+F8CbTVWBdsCUMdWGQceqwOJcpO:ZLsxrUME+CcIBdsxCeqwcf","tlshash":"b4f1b083c5ae7a1e43d39e20363d551e83a1ac0549eae98e06d60c1e84a7bf30c457bf","first_seen":"2026-07-17T10:04:37.461574Z","last_seen":"2026-07-22T10:36:03.51302Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/822c111c-69a1-4978-8284-4317ae125eee.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.936Z","timestamp":1784715446936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/822c111c-69a1-4978-8284-4317ae125eee.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e6-1155\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4437,"size_decoded":2103,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ad87b33972134a8e601337dca494bfb","sha1":"098358f6e37a14066b284d804cd63de7e456d8ac","sha256":"08e12b38931bb1063296661df85d9f26b19493a0355330813529a1da2fbb74d3","sha512":"ff6b5a87811b9c8f7a98919b691971badcbd84fc992d5cbbc424e6ff77a18e896574f2e6cb9629895b2e570e7b2eabecba7e1a591e2e778e681d9d6de2e0f3f8","ssdeep":"96:APWBcS7NZQKGpflW6QZgj+M09wZuToMHQRalzXrsV5i7jYDw61:A+BcDdWRZA+MtZuT/QSwXQywK","tlshash":"769153d02b3c92f77d16c3cf07b73276a9dd20e587598418c7150eaaba5a14c1cd1ade","first_seen":"2026-05-02T07:09:17.947679Z","last_seen":"2026-07-22T10:18:04.948325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/092657d8-8e83-484a-9717-442ae1ab7886.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.939Z","timestamp":1784715446939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/092657d8-8e83-484a-9717-442ae1ab7886.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e7-4852\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18514,"size_decoded":8447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e60e815fa91a1743d4e28c7170c683df","sha1":"aba64ee922a1bbb141206acd18dd6084d230b8c2","sha256":"9033954de581c2da651e4e131032995b4944eb5fb9cc4cdbc0e3dbe615c90bd6","sha512":"f076e461b2657d1b35aa61d1c5552db91aae53246223d089db4a51308a9682ed46efd502020400889ea4f27e2b04f2ea01b9ebb085e8c075a70ed88f1c139366","ssdeep":"384:vlP4naM5ynU/ePMq4+wgY6PegjD8TDcFBopm+pKSf/rI+:vJ4naM5yU/ehY6P18TDaoHHHb","tlshash":"3482b3e92b319bf4e486f7ee976224b0be0638fdae428678c3740d14b55259ccd84cd6","first_seen":"2026-05-02T07:09:17.994095Z","last_seen":"2026-07-22T10:18:04.94893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/rainbetbg.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.057Z","timestamp":1784715447057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbetbg.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7746\r\nlast-modified: Thu, 02 Oct 2025 14:24:04 GMT\r\netag: \"68de8b04-1e42\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7746,"size_decoded":8090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5b9ab05944c5551f01b73a5978086ea","sha1":"86bc9afa35620b54034bd9e23ccc1f6de4dcbe9b","sha256":"e333ed3af52717b49be5ed0ba764383bf94c031494940c41e49e47c418220ee0","sha512":"6e99b0064278e535b902451fbd4d1ebb976bf3e31191eed09f8973a8d7bc6740d82c3806bf973092dfdb64dab413a03c35a398bb5f0f7c6455bc5cf9279bee7c","ssdeep":"192:CwaQ2aUKm3NMt4j2AHr9mtBjUqrwKZXwNFM:Cw32aUKWK6jLL9+B4qrwKZXZ","tlshash":"58f1ae6f2f905914f900c57c046ebd40efcca8769a4a8943da85a331dd099fa2d58e0f","first_seen":"2026-07-22T10:11:52.933877Z","last_seen":"2026-07-22T10:18:04.949479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/spindog-12.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.833Z","timestamp":1784715446833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/spindog-12.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2168\r\nlast-modified: Mon, 08 Dec 2025 15:53:21 GMT\r\netag: \"6936f471-878\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2168,"size_decoded":2511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"694642e5aacaf18fdae3124e5cd64c67","sha1":"893182109c5d7186f48a97efa46974e5e895fc74","sha256":"019796300f15645c05ed5bc9d6784eec56efecced2a46eb21e6dc23bf730f677","sha512":"0b27b188b24f55063183bac7d926518ddc74413931de3704bc2250127cf7f84172afd2bb43ecb4222869b946abc661ae704a9ef65f18768e4b8fe4c5c3ae6f98","ssdeep":"","tlshash":"b741ea58837417add51a5234b8280b92e37e554be587c74592cb83b1bf20de5b75c01f","first_seen":"2025-11-24T12:48:18.678243Z","last_seen":"2026-07-22T10:18:04.950352Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/gold-party-400-254.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.914Z","timestamp":1784715446914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gold-party-400-254.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26046\r\nlast-modified: Fri, 14 Nov 2025 10:29:30 GMT\r\netag: \"6917048a-65be\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26046,"size_decoded":26391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eed8379a444edd350b26050c78d2f6ac","sha1":"7757960c727ec020c7f4e288fdb02e1619477026","sha256":"4a932bdc976fd418adbc10e796d69d9ae5d9f77b881e77ad0d832046514629e0","sha512":"fccc44c9e5a968c10db702f603db4a77a09660bfefcb2cb4e10ac899fe22aa785f5f2194159f628ca740a17f4212d765765f00cfbe73fb6ea0d99b18dce358c6","ssdeep":"768:RqnYlOgdZDH+JCJQ+/7OgUegeDP6SnE3xD0gya:RqYlNZcZgUwP7nEB0y","tlshash":"8ac2e1b5cc18ec78c8b33d26d56208cd2c065119fe3f9f532a0b1aae625e4fa295c477","first_seen":"2026-07-22T10:11:53.010524Z","last_seen":"2026-07-22T10:18:04.950905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/fb1e50c6-45db-42ce-93fa-2244a05711cb.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.941Z","timestamp":1784715446941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/fb1e50c6-45db-42ce-93fa-2244a05711cb.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e8-2346\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9030,"size_decoded":4399,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fa9a1b132d045b4763d94cc48abd15f","sha1":"fe99deb36bfe8cc57e2b8fb6e87664555343e704","sha256":"5b88f3fbbae3ecd5f68b2680958f3bff2af0b74f573b5d1180f8cee2b900a9cc","sha512":"5a44f679926e80f68609922af042bf31b58dbd76736f4ccc32083027d9a2d4650aa5c96da1afc9579d17e186a9e4f1b4bc75c9b9b3fe9053d87142350e0c9fd9","ssdeep":"192:jqz/SsDLsX0J3M96Cgl7nTKQ8DUg/phIq1ZjkKnyvP51wGSuUGIqeV4:Vs8X0u6hl7WogDIq1Zbyv3tUw","tlshash":"881294dc637a92f8f801a3fd871794a579427cfb39418929c3a00d59b84509c9ec9deb","first_seen":"2026-05-02T07:09:18.020731Z","last_seen":"2026-07-22T10:18:04.951489Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.060Z","timestamp":1784715447060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-df\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-22T10:52:12.47412Z","times_seen":50,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/classic-speed-blackjack-93.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.929Z","timestamp":1784715446929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/classic-speed-blackjack-93.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67742\r\nlast-modified: Fri, 14 Nov 2025 10:29:46 GMT\r\netag: \"6917049a-1089e\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67742,"size_decoded":68088,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32e415fbc00e59e4b3f4f93f292ecece","sha1":"fc12f3e1471d5e5024f680180e10971e08d8ef38","sha256":"a071228bc33e7b3722ef9bea8e661638910032caa852e6b0b6c859da5a9e7a35","sha512":"fbc560e9dfd8878ceefbc1646cef9cd5e3d09dbdc56940aa8bc1f74bcc778c8a43576e381645344a6254205ff9b01dc35792ed03f43f390881c6629bc7d90745","ssdeep":"1536:zuKXF6LRucKpHwySWNH2Ogk3QDfdmMlwDSa0K6p6B6W2TZ4+ZQ:9V27KpHTNkk3QDUMda0K6p1f4+2","tlshash":"e063120763912101afa8b45baeb148539fc2ad24d93a4a75b57bf1913c1c4fe4cb4b7c","first_seen":"2026-07-22T10:11:52.992917Z","last_seen":"2026-07-22T10:18:04.952513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.017Z","timestamp":1784715447017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19396\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-4bc4\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19396,"size_decoded":19741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-22T10:52:12.441304Z","times_seen":151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/rainfavicon-36x36.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.105Z","timestamp":1784715447105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainfavicon-36x36.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 852\r\nlast-modified: Thu, 02 Oct 2025 13:28:33 GMT\r\netag: \"68de7e01-354\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":852,"size_decoded":1194,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b6e71018d8e9a2e1bdecbc2538d257f","sha1":"ab5529d90bccb13050e998851fa8f5d5d4ad19b0","sha256":"c3bccecb542124d097337d252dd508cf17eb05d1d0c9197df6006800857f4b09","sha512":"bae2e326ee7632aced8696892f1a84e21a1250a415fcd1e380e24e8a0dc5e05f670aaf0c505c1b6b267696d06d84a9cf0aaf338ee0e81782918286224ea301a0","ssdeep":"","tlshash":"ff01993d5329c79ce11627f460d01b13f3797b31497b5935418043958f003c69f0c746","first_seen":"2026-05-02T07:09:18.010108Z","last_seen":"2026-07-22T10:18:04.954185Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:17:25.468Z","timestamp":1784715445468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://rainbetcasinoofficial.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetcasinoofficial.net/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetcasinoofficial.net/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":263867,"size_decoded":45946,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9218)","md5":"bffeb563cb78faeede7308f0f7b217cb","sha1":"acc271ad9fefcffed00ea96f6e6a3ac107bc9074","sha256":"8a7e403df05645984875f88ee28121ddcd6d9f0af2bc668d075cd03c2360a099","sha512":"88f4d668db65bcc43ff38f75110790a8772fbebba537e318cfaf3a0c180b4474567c6ba441ee34849377b570c1e519fd9060883493382141a5164a17ac67d352","ssdeep":"1536:adyyxFypkc69GkgOYpP1J2Tjap2els3OGT9Xizc91O02FYq6BLGLTURMBHi87SWq:3CAnpPT2apVGZiyrbB58+x","tlshash":"6644d777565b3198262b76789bae7309333d9047c905cca47eded1888fcaa908cf1b4d","first_seen":"2026-07-22T10:18:04.955514Z","last_seen":"2026-07-22T10:18:04.955514Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1303,"timings":{"blocked":-1,"dns":29,"connect":19,"send":0,"wait":1228,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allrating.top/wp-content/uploads/2026/02/%D0%91%D0%B5%D0%B7-%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F.webp","fqdn":"allrating.top","domain":"allrating.top","tld":"top"},"ip":{"addr":"172.67.203.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.817Z","timestamp":1784715446817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allrating.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 23:21:08 GMT","end":"Mon, 07 Sep 2026 00:19:41 GMT"},"fingerprint":{"sha1":"B8:A7:2E:94:32:9E:88:87:CE:0F:AB:6E:EC:23:A4:CA:01:43:9C:2E","sha256":"B3:36:32:AB:6A:92:11:C1:EF:D4:A0:4B:AA:3F:2A:72:8E:D9:D9:46:1B:94:1A:E8:AE:B5:AC:FB:19:B3:26:C7"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/%D0%91%D0%B5%D0%B7-%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F.webp HTTP/1.1\r\nHost: allrating.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 05 Feb 2026 13:24:49 GMT\r\netag: \"69849a21-b54\"\r\nexpires: Thu, 13 Aug 2026 11:48:08 GMT\r\ncache-control: max-age=2592000\r\nx-server: console-manage.host773\r\naccept-ranges: bytes\r\nage: 685758\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N25R0N5hacjzhv7x2otIeVxEmwZ88Hh7pbgpABIJT3d3eZKTXYOMqt1aTNo%2F9foOU31EfzTKHZEXego0bkMqFXVGiD2tbG5ot%2FvgnF6DiI1wLmzlBrJiGQojdQk%2B88k3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1f1b216bbca783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2900\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2900,"size_decoded":3670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f617f52aae9979de4c834c69307ecd63","sha1":"4b9d51f4a48a5b7347d70eedaeecb461993734ff","sha256":"eb0c65aefb2e480997bbd4b0a7b97941a8af93a7cac98e858af3e17ff75995b9","sha512":"ac447dbce31aba06f6368d50b1cfefcdbbc7b00b2c88626767718a4fe6d7b7702c65327d6917c3fd50fd16f1e9d9dd6af7974c161d8bd6ad51015bff087e6436","ssdeep":"","tlshash":"19514e7a57185d7cd034be3c19990f1b9f71fe17564612a9554121730f728d4042e79b","first_seen":"2026-04-13T07:01:10.904608Z","last_seen":"2026-07-22T10:47:32.908266Z","times_seen":24,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":6,"connect":12,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2026/02/spinformula_55x40-1-1-1.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.819Z","timestamp":1784715446819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/spinformula_55x40-1-1-1.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49388\r\nlast-modified: Tue, 21 Jul 2026 14:46:56 GMT\r\netag: \"6a5f8660-c0ec\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49388,"size_decoded":49733,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b7b3036659d6898235ad9990d6478cc","sha1":"aa479350a452c18bccc965b95ffcc60d3443f457","sha256":"cdccdaeab391e5dbd9e2d14cda596b67977549ec82f91cac539dbd8442308e58","sha512":"0d1c9c013c1e089ca8d12e22d52af0bac796e7f636f89980f456fccdc1c3d2b3a363fd112228881eb62db459e67acc45cf8860493bc79eac4306c381870e0648","ssdeep":"1536:j8wElqb8L2cknh/bcNH0Y7/KmWCsf/zg8p:nEls8aHYUY7f+88","tlshash":"ce23d0d12b282a16f85c73b304d06a0216dadfbf28e85e58797d7e1d4c3a6078d3a4d3","first_seen":"2026-07-22T10:09:48.990968Z","last_seen":"2026-07-22T10:47:32.915023Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/hedesbet.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.823Z","timestamp":1784715446823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/hedesbet.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7740\r\nlast-modified: Thu, 28 May 2026 08:35:04 GMT\r\netag: \"6a17fe38-1e3c\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7740,"size_decoded":8084,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75180b1eaa2a62548c31fb1e199a6134","sha1":"f120776b178176b77a93b3a4f47a2722714a7409","sha256":"278162082fa697426b036f8f11bb78012f404759928223ca73fb1c6c04b347c2","sha512":"04bb317d9c6c38a2a639c3cc7a0c188cce780e1e1e9bfd4fc12daa2d327bde54f57b0a9f37ae98790b277cb1570a1bcd8bf31e63de5c10acee0e58de4b0e8e59","ssdeep":"192:W3wYIy6JGTVon3OOminipGWdmByzRStXrILnMd:MwPy5Ro33mingGsYbtb","tlshash":"4af1adf906beef69ea17c931f01e974a13e8bb00de83ab0a721051061e15483bd2d173","first_seen":"2026-06-01T17:33:44.789728Z","last_seen":"2026-07-22T10:47:32.913388Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/gambling-therapy-gm.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.933Z","timestamp":1784715446933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gambling-therapy-gm.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13178\r\nlast-modified: Tue, 18 Nov 2025 16:23:35 GMT\r\netag: \"691c9d87-337a\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13178,"size_decoded":13523,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aaa679346ab20748755754e73596b8df","sha1":"03bb3adfb768f490c0145b88fa5673b0e048314a","sha256":"61c3f2b791775d1364993985f11c0712bd40b0e2d4075fde2b59334fb5d83ccd","sha512":"c629c6655a2c89ef63a69b172bb863f068d476c7dd7f7e449659ae5321f21dbcd698777ebe1fbf264775ef45d028496af7ef638302be6c19517fc607fcaf2231","ssdeep":"384:hetmtppGFnVjbGXKcTnT1nXKu5k/jXC3Cgg10QWPq7Ohg:OmpG5Vv2KcTnT5KuOC3CgAqhg","tlshash":"f642c05a82023f88efff7fb6857b7802905f1dad5857889c43d43d292081be6863574e","first_seen":"2026-05-22T15:40:37.883545Z","last_seen":"2026-07-22T10:18:04.95824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.026Z","timestamp":1784715447026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19464\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-4c08\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19464,"size_decoded":19809,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-22T10:52:12.469753Z","times_seen":176,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:25.281Z","timestamp":1784715445281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 223\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-df\"\r\nexpires: Fri, 21 Aug 2026 10:17:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":567,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-22T10:52:12.47412Z","times_seen":50,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/css/28e5966db11df2343a377937561067bb.css?ver=067bb","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.808Z","timestamp":1784715446808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/css/28e5966db11df2343a377937561067bb.css?ver=067bb HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-ade\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-22T20:10:29.916159Z","times_seen":30805,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.818Z","timestamp":1784715446818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a608330-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-22T10:52:12.463712Z","times_seen":59,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/blackjack-classic-25.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.907Z","timestamp":1784715446907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/blackjack-classic-25.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53306\r\nlast-modified: Fri, 14 Nov 2025 10:29:43 GMT\r\netag: \"69170497-d03a\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53306,"size_decoded":53651,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"16787a32e51c40882fc35783bfa4be5c","sha1":"921e55d332b7e34fa1eb9623bcf00e3d11d28c2b","sha256":"05ab64271bc35541c7cd05b8c9f085e1b8094938d4150ab996414929398af380","sha512":"a0ed8163c4d352d2185dcb350af7c08493e4a8e5a8911661b017f446017d6ca9169839d8cd27e5fcc096a51ccd73bcf1d4105eb479b0bdeb59fc80f7a1429894","ssdeep":"1536:LoMo6utA4Dv0gWoSNY0lxVy3icMW5sIWFzgQVYxoThi7+Xl:LoMo6utvv0gYY0lTy3HljQgQVoyTl","tlshash":"45330259c5c5f454a828ab2c918c65b98f5a200e174f5da2eea3b23370e90fddc29369","first_seen":"2026-07-22T10:11:52.871448Z","last_seen":"2026-07-22T10:18:04.96022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/74de2455-966c-47c3-84c7-7202b4acd950.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.946Z","timestamp":1784715446946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/74de2455-966c-47c3-84c7-7202b4acd950.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7ea-35e1\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13793,"size_decoded":6323,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a1f6468eaab92f00c0655985f87a504","sha1":"ad141b019d4aff2d55a323f0c03a5187edd0b0d2","sha256":"a60d9bc6711ba1fdc3148fa5d34e8602df1bcd08524161989b5844e194c67477","sha512":"a6e79d26591811154b8bd10e544cc7149517376d3b75943c477663420c8f05dd018fd46f939308cfcbd4b5a32bb0ce658ca5c48d3412ccd1f48806bfe585819e","ssdeep":"192:k1C0Z78U1zqAvmWE8HPZd9cCnSywq7UoajsQWwCwT9rrwxSrd+zq8t3rOGQGkaG8:4tIYvvTvZ7cCnSIUoVuOSYGS3rOGYRKp","tlshash":"a75270a833b6f3b8f44bb2e8c23655d9ff0928f57388d675c3602e55810305d9dd98aa","first_seen":"2026-05-02T07:09:17.987376Z","last_seen":"2026-07-22T10:18:04.960819Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/7d043ac43a82df1e435e7f70377a7dc8.js?ver=3f01c","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:25.483Z","timestamp":1784715445483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/7d043ac43a82df1e435e7f70377a7dc8.js?ver=3f01c HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 09 Jul 2026 18:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4fe258-15529\"\r\nexpires: Fri, 21 Aug 2026 10:17:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87337,"size_decoded":24734,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7d043ac43a82df1e435e7f70377a7dc8","sha1":"f6a0c00609bb5066f5e5f4cc8c5149d7c5613a97","sha256":"6091b23c75ae7167f0e66fdd3564937e191ec2f5ed8447f208bdb0e080729b56","sha512":"103d74358920ccfb461f1d33d9ebc587494bc2659f89d0e49ec1d67205f2047e087fba18b69b996f21129352afcf0e29a467316fe3e7c140f8a947302b0373e9","ssdeep":"1536:FhNBcADy4ZQWL0siDeLe02VauoZHOgjezEB5dxPzzZal8OHQpmZNemLECFKAe:FhNBcATQWL0sijzEB5dxPzza8O3UmLEh","tlshash":"9c832af53698a07016fb13a979bba644f0303569e80fc450b56ddc942b68cc70fa7bb6","first_seen":"2026-07-22T10:11:53.000989Z","last_seen":"2026-07-22T10:18:04.961297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/742494d55facd44bbb0bb4495b2c5177.js?ver=c5177","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.866Z","timestamp":1784715446866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/742494d55facd44bbb0bb4495b2c5177.js?ver=c5177 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-1665\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5733,"size_decoded":2841,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"2a0f93d3ab2aa6ae983d72e0678665c6","sha1":"5b71bf924609810351bdfd5793089fc5e7b44487","sha256":"b7642dec914a043ad4711ebc21b1d4842fc3eaf0e5de3e3b0c5a55d4e6781675","sha512":"b7e0d5da71966470ab929a82f70b07998d6077b0f28924233315f23d4678f4633793db3683953d11e34dd2c257db9817e649a37905c7a7b8685f2568079eef25","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMB:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSq","tlshash":"b8c1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-09T20:56:23.510034Z","last_seen":"2026-07-22T20:34:41.574778Z","times_seen":212,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/sunny-coin-2-hold-the-spin.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.917Z","timestamp":1784715446917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/sunny-coin-2-hold-the-spin.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24540\r\nlast-modified: Fri, 14 Nov 2025 10:29:38 GMT\r\netag: \"69170492-5fdc\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24540,"size_decoded":24885,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7611334b23e4a81c887683a5c926c8b","sha1":"2bc4ecd6615aed0a59928eceaf017959e4895931","sha256":"8ced8c60fc24df5bc3fa581c7bad14b600d088bf007e3bedae9174b102869150","sha512":"95f95eaad6cc35d099168c877710b4343d798f134ea5931359b42144bbfefa35d8c65cc1b92cd9b5a75da6ccb18904c51798af33102cc0bd626ec2bfefb80ad3","ssdeep":"384:lZYTBbxbGGh9BCFspWVrWRVzEbZV90EhoskCjl+SaKrpd3DUAfAHxAp34cECTtEy:DQbxb3RpOKPzEbpjho7jIvXfMxAp3yiB","tlshash":"11b2f241ef8a1b8f20f1ca7431cec934cd9905538ec66c61fe26a42f45951ebac716f6","first_seen":"2026-07-22T10:11:53.012916Z","last_seen":"2026-07-22T10:18:04.962189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/case-open.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.931Z","timestamp":1784715446931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/case-open.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11222\r\nlast-modified: Fri, 14 Nov 2025 10:29:44 GMT\r\netag: \"69170498-2bd6\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11222,"size_decoded":11567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b30d8277c39708cd6fc75fa1dc446de","sha1":"a66a41c570c0237a26adcd3f46a23b725fbdf719","sha256":"2d1ad52e9d55dc320992db187a7b5457e17708fccccb87969a1093e2e76cbcd5","sha512":"7c4ebad65c465fa70d58e039a7fe5eb80b56542442ff024c07c4662cfbf36d7bff80b16014d79d9203b03a29d1117e871aad9096962648db75b28b76fce7e1e9","ssdeep":"192:VlQb7SCJSWqd3vze1h6rgTehSHs/7JWFM1Szyceh5S39Yw8BG7bO0mU8RMFgi:/Qb2FWqd3berpTeYM/7JOCWFeHStY96H","tlshash":"3032bf360f9098d195791a11ac4a780372d61d6475b30b9f2b1ab5f17a488aa9337336","first_seen":"2026-07-22T10:11:52.914304Z","last_seen":"2026-07-22T10:36:03.455856Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/rainlogo.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.815Z","timestamp":1784715446815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainlogo.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3778\r\nlast-modified: Thu, 02 Oct 2025 16:10:06 GMT\r\netag: \"68dea3de-ec2\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3778,"size_decoded":4121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3f1559f7cb6abcbe9a23fc75173c304","sha1":"87b231b2ddbaf4a2cfb71d9bcf0662899d592c65","sha256":"97b00246ef0fe09b6eb39f12cc43179c32c25b0fdb2ceb5bd2a4b7617533709d","sha512":"2ba56e0cf730294aba137e6ccc5b1841e5f7ee1c657acd1416e3a25f4c8cd20f5ca410fbe917b4ea4855b9c111677ec1afa6402a7fe509d308b15f8ad8b0c9b9","ssdeep":"","tlshash":"da713b66b324973df022b5f5016917daea84ac00818bfbf522c441602b38bcc61f8a1e","first_seen":"2025-12-30T02:21:12.811036Z","last_seen":"2026-07-22T10:52:12.482277Z","times_seen":12,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/images-removebg-preview-11-1-1-2.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.825Z","timestamp":1784715446825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/images-removebg-preview-11-1-1-2.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4978\r\nlast-modified: Mon, 29 Dec 2025 10:07:14 GMT\r\netag: \"695252d2-1372\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4978,"size_decoded":5322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcd5bd13151b0487c2b8cb9b35d77e90","sha1":"5b2b219d07086b0c992c3c6094e5d81bdaed92b2","sha256":"926d438628e9fe2a3b2ca9397aea9eb9253fd3365ead220b1a1c91f08764be98","sha512":"506ae07f47457bbed5e144ba8767d21bcb517c09583b3dfdad47c894439c7fb9c6f2a9a244895e95d16628f5d327841daecf16cc5372e8606e636400259907ab","ssdeep":"96:jElbw+iXktmziXg/BSNledpbQGKpDNKdUKnXKvom9H/:ewTktmYHedpbh2pz7o2f","tlshash":"92a18e5dc32f7aeafa6472f435981fdaca7b271116c6774e8840890329158c25d7f102","first_seen":"2026-01-03T20:40:12.111503Z","last_seen":"2026-07-22T10:18:04.964236Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/casino-joy-2-2.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.831Z","timestamp":1784715446831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casino-joy-2-2.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9028\r\nlast-modified: Mon, 29 Dec 2025 10:07:14 GMT\r\netag: \"695252d2-2344\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9028,"size_decoded":9372,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"336171b8d3519f80acad591a755ad8de","sha1":"580c468e737992a67ccfc1cb6466657605046deb","sha256":"43947651f90e93535b99aa40c5506eb5ce8249cfbe2b34afb98ad1abbb60764a","sha512":"32c52e08451f80a21b727ad52eda309ee440fd74c8480e399e4d5f06155a20ec0aeb09a972e8fd9c14146f5132a3e61d20e9be063b431c2c86bd3827b7f80d8f","ssdeep":"192:MwTWWYNGWEgEk5irzuInNXDDa2pwLgvqsnLZavRf/:MwTjYmk5IuiDDyoBnFavB/","tlshash":"1312b18003d4e34efe312f3599983b9f41b4f48d4b5bc7a299c7e885ec5695912cc876","first_seen":"2026-01-03T20:40:12.096536Z","last_seen":"2026-07-22T10:47:32.908779Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/betsoft_coins_of_ra_hold_win_web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.928Z","timestamp":1784715446928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/betsoft_coins_of_ra_hold_win_web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24474\r\nlast-modified: Fri, 14 Nov 2025 10:29:39 GMT\r\netag: \"69170493-5f9a\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24474,"size_decoded":24819,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86526eb75114098a8f84346c5d07ab3f","sha1":"484ee46b4fa85351d0508fcf224023d700e2c396","sha256":"d5cbc073077ce42c3ed2ab542fd1484b5d01e6c198d3339dfa987d059ac61809","sha512":"4e19b1070dc23f64851d788b75f75528d4533c5d4d485b3799cb2bae2c975dea85fe42db0dfdac7dc915de621d6fe4dbf22377e8f427b428ed8c9026657c7bdc","ssdeep":"384:ThAIcEE+ac3lx+gvVVfdvLFWJCDPL+fDc67Sy+KJX7X36pH8cQrxo:TvE+7+gvVRdFgCDPLc1SyT1H8H8Y","tlshash":"58b2e0112215b408e4db43c4bde8045d6e0fb7b6b0faae6c9fd6c97155235a07a258c7","first_seen":"2026-07-22T10:11:52.998171Z","last_seen":"2026-07-22T10:18:04.965639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/786f77e6-02a2-4626-9846-d040bdd0f0f3.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.948Z","timestamp":1784715446948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/786f77e6-02a2-4626-9846-d040bdd0f0f3.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7eb-1c90\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7312,"size_decoded":3213,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10a73ad32ab0e5d93eda1c3f1e12959d","sha1":"a9cf01e7eb3e01f7b6b1466ebf2bfc31cba6bf4f","sha256":"96e5c5747807a561125df366cbbedf25b22ccc54a32caaed74d6b437550d76f7","sha512":"8d2943e5ebbaf23a4e538f9afeec9d9872a12dcdd2ea0ed869bd4967671f1d5f24444983daf79d583b63c929495421b28499244b936641a31d346fa7bc14e99c","ssdeep":"96:ZRDDOv0Pu4siFNYI41W8GSJlZSumXAachH6HOt0aufy3hTlUt2EOC+BekQZR6Xer:ZA4T/YL1CSJTSSVHyfEa2lC+SC7nhUrz","tlshash":"34e1a7c4363c97f07905a7de42dbb0243d7aa0faefba9d65c7421e85b04a85c1c16cd6","first_seen":"2026-05-02T07:09:17.974154Z","last_seen":"2026-07-22T10:18:04.966225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/d30fae07cdadcd4712ac0fd8c14d765d.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.828Z","timestamp":1784715446828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/d30fae07cdadcd4712ac0fd8c14d765d.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9328\r\nlast-modified: Mon, 08 Dec 2025 15:53:20 GMT\r\netag: \"6936f470-2470\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9328,"size_decoded":9672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae275866883e5b15cbb5c79a65e97338","sha1":"d3cbff9a71c82ce3891050f9cbb77c90a0377a5c","sha256":"4d7e2904fcd00c0b9cada8efba452ec3c43e3891bcbb1318bc43517e9d2b4e81","sha512":"3a12ef2456d1d5b4b6cccddfd239ff1266de13aa2f087ae2542647b2f6c44f12a94297bf88eaede7ea5d26f957bef1e9085432d69a41ecc1b337b3de2f17ac5d","ssdeep":"192:MwTG6LAxt0f6fkxmsEyprhTv43WghenvyWG8UOherICqhKgl7m2k4YX3HHu:MwTG6LAqQemsEqpvsWg0aWG8UOherIj5","tlshash":"b012af07f7655bf4e16f27f0607807e0e5d3a305781376aa11854bf14fae1a0819dea2","first_seen":"2025-11-24T12:48:18.66358Z","last_seen":"2026-07-22T10:18:04.966974Z","times_seen":15,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/plinko.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.903Z","timestamp":1784715446903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/plinko.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14082\r\nlast-modified: Fri, 14 Nov 2025 10:29:35 GMT\r\netag: \"6917048f-3702\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14082,"size_decoded":14427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69a5a84f9bb0aeda11c213b386c42fb8","sha1":"5681caa74d3d25d90b034cb9dfd28d092bfe89fb","sha256":"cb053bdf06048dcd504fddb123bed791606bc5f3a5cfc6688b9e9bc6662e552f","sha512":"c29c7136477257f57c88bd3cd86757a3669db178c4c759e69660c5aff3d53314273f3fc1323d3d693bdbeda7bf106e7bc9d316ec705f3a981b569c6fa20b4030","ssdeep":"384:4TA7mscz3wbVKH2jL+pLuCkUUT9K/A920FugOp9P:4hiJVaDkUxAwMOv","tlshash":"c252d1e0e4f2e056b95fb03e1f17fdb58a15414e300d5184be2b3282c39beba1076e55","first_seen":"2026-07-17T10:04:37.465309Z","last_seen":"2026-07-22T10:18:04.967544Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/mental-web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.905Z","timestamp":1784715446905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/mental-web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20602\r\nlast-modified: Fri, 14 Nov 2025 10:29:33 GMT\r\netag: \"6917048d-507a\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20602,"size_decoded":20947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ae91796c16bfa02efa056517d547d0b","sha1":"da22ab0a1fbdde32740054ce74b2da86c1e7af2d","sha256":"a6698037a336131363f90ca2cc292442e1e117bb3484e1cda5aa031973f8b5bc","sha512":"ae33111fb668e0982a4669803f7b7da42ba6f8a57ed11fc0595503b740598cbb75714ca03034d12cfb24155e8e496bfe0f2b27b02a00ed7af72427b41e82ab82","ssdeep":"384:D4e44W1Wa9wELqFTh6JJeQ+YUfl9h9MWq21/i8LLx6:p44W1WREeFlE4YU9Xyu1/nLLY","tlshash":"3092e0c8a794c8987e33b5390e34f509970187e1e5caace13108934716fae5af614fbe","first_seen":"2026-07-22T10:11:52.898145Z","last_seen":"2026-07-22T10:18:04.968099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/betsoft_enchanted_forest_of_fortune_hold_win_web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.930Z","timestamp":1784715446930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/betsoft_enchanted_forest_of_fortune_hold_win_web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23888\r\nlast-modified: Fri, 14 Nov 2025 10:29:40 GMT\r\netag: \"69170494-5d50\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23888,"size_decoded":24233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51addf6b87ca124cb704818db583d326","sha1":"8eae2a656fda2e1e829c30f32de5a782094a3059","sha256":"782d55b1bf44ef85ad42e58ff955a0e8d7cea351c08c2751e1814d736a4770aa","sha512":"8cfae8ca0cd31ce931d4e100d05b656c2cd8418c28151098527e57649e270bb5fe57a92538c4940d99cdab837e8cff2d556e86838f92613a9409590b08c7b53f","ssdeep":"384:ZnhIw8y/+gW32dsGT8ffmqa06H3CLbvmZnq/EqGlxzwKwVA7AFRHW/JRz8QOKQE:J+v+KfmHfnqMTlYA7AYJRY9Kf","tlshash":"10b2f177f592f20a9f9ed60e95291c24b1749898dfd48237ba7303d11c4ff81b62283a","first_seen":"2026-07-22T10:11:53.016593Z","last_seen":"2026-07-22T10:18:04.968744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/gamstop.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.932Z","timestamp":1784715446932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gamstop.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6122\r\nlast-modified: Tue, 18 Nov 2025 16:23:36 GMT\r\netag: \"691c9d88-17ea\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6122,"size_decoded":6466,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed8d6bb3f00c0341ac3b48e03752adcc","sha1":"86e9389bb09793fadd29f71c23ef6f5c17a01797","sha256":"3ff6ae22d72701cb9ac9f5e95ddcc6843b71a949c14b2edd72d1cdf15a789da0","sha512":"d2ed4da8a4d2971634aba34cbe6bd5e34d6d26d456f62828d0a5b97d6ba164665578b207a2c37adfdeb7b68f6c6513ddb153016c6b7d37f44392b07d9809d16a","ssdeep":"96:84q1xgxCwkjSIPBq9+5EyAOTp0XQLSuferqFcGF8/65qQMrKLPvnrdQF8roZVEuu:y1xVDzDp+XQLSuI3QqlunMsOP+Wg","tlshash":"cfc18ebde63d76853310352d840d1e29134f86238cadf34967421ac6b4c6aabbb24551","first_seen":"2026-07-22T10:11:52.892908Z","last_seen":"2026-07-22T10:18:04.969326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/10188811-41ab-4cbd-9226-64fbce346b00.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.940Z","timestamp":1784715446940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/10188811-41ab-4cbd-9226-64fbce346b00.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e8-1de4\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7652,"size_decoded":3362,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c874f73af6d74d44e7325a2dac01dc2","sha1":"0679f65aff77cec8cc2689120db1d2c4aa7ebf88","sha256":"a5a19992551bb12d922dd8822d1e3e0dbfc4c7ab160d28bd9e6cde5a97f3034f","sha512":"1393b3f1fa647967eae62e8b3916e4a2cd62f11a611d6732203fa85a6a3ee740db8454044262953a4a8db75627686132bbfc8824a284c5d3fe473201261d9487","ssdeep":"96:5VGiLMQhurFfZMNW/L6o7vlwuJqwunvo4gQIplm+JSUz6jYX8de5QbAEfSewhK2p:5VxMBZMl0lfunAHdlm+CAEa7VV","tlshash":"8ff174d8337a87e8e416b3efaa4650947e1a95d4aad1c1b0c3f11dcdde4226c8c6dc93","first_seen":"2026-05-02T07:09:17.978619Z","last_seen":"2026-07-22T10:18:04.970015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:17:23.646Z","timestamp":1784715443646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://rainbetcasinoofficial.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetcasinoofficial.net/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetcasinoofficial.net/\u003e; rel=shortlink\r\nx-litespeed-tag: a82_front,a82_URL.6666cd76f96956469e7be39d750cc7d9,a82_F,a82_Po.2,a82_PGS,a82_guest,a82_,a82_UCSS.53fccbd2a7089a08856e0535abdd9e6b,a82_MIN.7946dc70d725787e20c67d5963d2c36a.css,a82_MIN.7d043ac43a82df1e435e7f70377a7dc8.js\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":283276,"size_decoded":49299,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9061)","md5":"ac00e90adec5f3fa05231863e254e44d","sha1":"e4a021800ee56b7815f7a406ccbf3c4be7e7ecaa","sha256":"7cfbb629df06d925cd3081136ca328d59e60035ee5da9d72b6433f21dc6f2f4a","sha512":"dc7caf41d7f439dce85fd8bca8f75b1c9b907fed5c5a5b7177d66a0d6fd9e5fd30463110d4c898c38d88f7e78ac5a3ffa1bbf459afea736a51edee20ce2ad502","ssdeep":"1536:adyyxUCypfyOYpPl2Tjap2elszYx/0TZsYHzc91O02FQq6B179iqw9rg2otrHs:3C4apPl2apdx/0tNHyTbBR2L","tlshash":"e454f97756572199262b76b89bae7309233dd007c902cce4beded1888fc9e904cb1b5d","first_seen":"2026-07-22T10:18:04.97086Z","last_seen":"2026-07-22T10:18:04.97086Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1321,"timings":{"blocked":-1,"dns":42,"connect":22,"send":0,"wait":1226,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/8c26caa3b057b839f654ee170f695aff.js?ver=95aff","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.892Z","timestamp":1784715446892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/8c26caa3b057b839f654ee170f695aff.js?ver=95aff HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 493\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\netag: \"6a6098b6-1ed\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":862,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (491)","md5":"3e8341fada8147ca242bc7c7fb6812b2","sha1":"a5b9d2e4e86d3ba38d1fb919e6daed232fa2cb8f","sha256":"54966181112bb716b04c3a3dc88a09b2af4e3993cc4667b1e82493fb0e0d033e","sha512":"1f901244d947471f661be0969849a9b0da2d9d09bd4c00172c5a8d08f31092d34fc97f66074828a84ca87b8f5c3166820b72291b2f35839cb01a5d3c54df4fd6","ssdeep":"","tlshash":"0af0e9b4259112328bd4c95a95463691b9195155f242a0db1d284ccc28cde8524fb7bb","first_seen":"2026-07-15T03:20:27.035981Z","last_seen":"2026-07-22T10:18:04.971803Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/jadecoins-web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.920Z","timestamp":1784715446920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/jadecoins-web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41582\r\nlast-modified: Fri, 14 Nov 2025 10:29:31 GMT\r\netag: \"6917048b-a26e\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41582,"size_decoded":41927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"92b68ef8eda372486da11385537cea9d","sha1":"8669ad6c92ac996a86b4f43e844a58509e343e5e","sha256":"e521e2650ea457ec1dd73b10f868c6a25cb457ab14704c1d13be7f1e26e7723d","sha512":"4c41f912a89550ace283ce0d07148473a17078e2a498d6ad9450da89476cb746973d90c09c43db0271dc29988e257f78706dc4b22a6d940986e978ed8ff259e7","ssdeep":"768:H2yNryCAhulMgQAIAEt0T4mQ1AXEMhcuva1cHW7KRSTG1tl4t5RYxWPh/orn/quh:WrhiMgQMRT4xyfZvakfRS6l4RPtyXvF","tlshash":"b013021839530981dc5be4f82a2893637fac84435047af7ceaa444ff1a65e52442e77f","first_seen":"2026-07-22T10:11:52.8903Z","last_seen":"2026-07-22T10:18:04.97247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/charms-and-clovers400-254-min.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.924Z","timestamp":1784715446924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/charms-and-clovers400-254-min.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22676\r\nlast-modified: Fri, 14 Nov 2025 10:29:45 GMT\r\netag: \"69170499-5894\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22676,"size_decoded":23021,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7f35b6624396f6f525d64f1189863d9","sha1":"029bd96e81774421c44767c42bff2e031f06c56c","sha256":"6092d7b45d6b5e06c2b435d3854e7fd43d06ba273ed063d81a0564bfae10c5d3","sha512":"5b9fe2eee19fc11c706b2cc5155fd6d575dcc777dfe2e5a483a413b1a71e7a2bc9922548b02e9aa08c19938afdf51f5f73baef3ea0317e7da56ba19f020e3ed3","ssdeep":"384:mUgX6/z+sndXwkkBrFEufDpLo5HZSo5rNKxhFEu4jHES5wmXLmPgMZwusGFWlaTz:mUgX6qnxBTxolZSHHdzSNSPgOhsZ4Tz","tlshash":"fda2d0e226e4715889006648da0b969480793b287f74d97ffdd03fd9f1acf1a178509f","first_seen":"2026-07-22T10:11:52.979614Z","last_seen":"2026-07-22T10:18:04.973147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/61c01ace-3a1a-43f2-b564-f37e55a17ad6.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.943Z","timestamp":1784715446943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/61c01ace-3a1a-43f2-b564-f37e55a17ad6.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e9-1eb4\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7860,"size_decoded":3761,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89ebcb5a13005529c168184a5dd23b3b","sha1":"bd53dbce014676315d94a70644bece6deb17fb84","sha256":"5894777a36a01714f20a58ee06431e13f12685a8e5a51c9776c73e9140e2d51e","sha512":"500711965bf6641334feb333d93a08cbc7e3d6a716499033719fde7f260b230405327ad806111b5e4d1325e12b6f147d7aa27278cb69b80d20e62c05f3966586","ssdeep":"192:7Essk6nD7x4mh+ebyrLruh5giI+yRjZ6WTlYwtjg1:7Em6DKSh5U+yRjsqrtjo","tlshash":"24f1b5c82bbdb3f09000e7dd8b967472795a10fdbe5a8a11c3986ec9f58055cade4cc9","first_seen":"2026-05-02T07:09:17.945374Z","last_seen":"2026-07-22T10:18:04.974082Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.022Z","timestamp":1784715447022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19580\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-4c7c\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19580,"size_decoded":19925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-22T10:52:12.442241Z","times_seen":180,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/css/1fd49cb4ce33b22bb247546b62290ca3.css?ver=90ca3","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.806Z","timestamp":1784715446806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/css/1fd49cb4ce33b22bb247546b62290ca3.css?ver=90ca3 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-e6ae\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59054,"size_decoded":36116,"mime_type":"text/css","magic":"ASCII text, with very long lines (59019)","md5":"8fddcde9f541ea3adb30580034f559b6","sha1":"205c36c97d2b3470c616f3a433a0a8ff725441c8","sha256":"292ce5ca5f06d57da7e5d7343c0eb6f9190b774899e94cb7a669d4da793d73bd","sha512":"5cc20a64a3ab95b2f44a8632c12ea996a566c77714dfdb00a493aee09cbeacef44d2614ce518b717562075659c8b9b60e1c7598423ae656f776facaff9fbddf4","ssdeep":"768:+ey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5OJq:+x/ZvB/qPWMiquqioMUXQSJYIMW+OJq","tlshash":"0443c2b1e64a40d677b0c843af65b27a5582bd7df8409cdaf40b821c1af3635069dfb8","first_seen":"2026-03-04T10:07:57.891243Z","last_seen":"2026-07-22T19:50:47.750379Z","times_seen":698,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2021/06/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-4.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.829Z","timestamp":1784715446829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/baddcb0f-f03f-4a05-a6d6-30cb44d776da-1-1-4.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15328\r\nlast-modified: Mon, 08 Dec 2025 15:53:20 GMT\r\netag: \"6936f470-3be0\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15328,"size_decoded":15673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5ae8cf5e2e63abb3f52a24c5333fffc","sha1":"bcc3bf6aa1a9e56ff6a8153bc61a5881cfc3ba87","sha256":"cba85c726f8ced19d7ba41b327f8e8ca2f98a1845f72a83b624f18cab342528e","sha512":"9b5cc9f9c8b8b387f8170fb051a1a6be208b61e348afa8caebdf82102d428cf1bd2ba3e4cd866e7e35f98fd77a0df91033d6c18fa40ca7a479953ceaf30f82a8","ssdeep":"384:iwT2kHu967sUkzxOWMm+2AZEXW96w3xfQcT7:TT2kHuoeo3BKXPwH7","tlshash":"dc629e674279c4fee84169bd4a993b4af649cc3f530b682a03c5d83ad3d23fca625d10","first_seen":"2025-11-24T12:48:18.647466Z","last_seen":"2026-07-22T10:47:32.926114Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/af1767be552b6bfcd29041cd2330f3ed.js?ver=0f3ed","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.887Z","timestamp":1784715446887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/af1767be552b6bfcd29041cd2330f3ed.js?ver=0f3ed HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-2176\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8566,"size_decoded":3065,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"d4cd531af9ac4e1dbd6835803c6a0d68","sha1":"0946d3662393a38ebab2f3a3704653893d4b0ea5","sha256":"d8e9ffb24c3a86f35383902f314b9a9bccd2720cb7461e2d4f287e4af206a6f3","sha512":"68ff7e285516f80716ca54c67767fffe338e0bc96f445f89c4965e31df5b9c4ee59e05225a6df1ca6b273d32295ac7cf0a21e2ed13eaee6ff92fdf1a91aca762","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qChN:lM8mibdxPzKg469chJK","tlshash":"a602846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-07-22T10:11:52.899782Z","last_seen":"2026-07-22T10:18:04.976162Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/first-person-craps.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.925Z","timestamp":1784715446925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/first-person-craps.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67996\r\nlast-modified: Fri, 14 Nov 2025 10:29:47 GMT\r\netag: \"6917049b-1099c\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67996,"size_decoded":68342,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x300, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c7477e20241fc37c983d35b715a501f","sha1":"49bbd7ecb839826a3896011ddba5b3ffe590c33e","sha256":"26da0eb22fefa3e271db363d948593d45414db6261f0602e78f8e0241e7c15e5","sha512":"8f3dbff588fc732c6f04463bfd55fbc1f7c034c19515b89b8a4e45df5315659be554267c32581c161952c3aa784eb0b860a2c6c6a946e642c2739a080816db82","ssdeep":"1536:8d6orXHpuyRoTyspwMzkqhFT2Xf6d+WD3mXHx9:8korXHp2PpPzkqzTRaR9","tlshash":"73630283bc2ed9204c66a16d3a7e36227193dc966c22dd0934455cff88fb1663cf3a55","first_seen":"2026-07-22T10:11:52.896087Z","last_seen":"2026-07-22T10:18:04.976713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/fruitmania-400-254-min.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.927Z","timestamp":1784715446927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/fruitmania-400-254-min.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11226\r\nlast-modified: Fri, 14 Nov 2025 10:29:48 GMT\r\netag: \"6917049c-2bda\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11226,"size_decoded":11571,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ca7849b8e5902bafa7cb7220a58a8af","sha1":"2aaf2b953c33e3f22333a2a44f5a51546db892c7","sha256":"4b94baa9d2dce5d7a28daeddadd00ebf1df7298b01747d7f8dab9577f2aef1de","sha512":"0d62fb9ce2b52ea7fda7af99496fa4dc08ffddf305d45295d4f79d9bdccde7ad435af35dfb2429ddc30b23dd7006de7b4ad5dcb9fd0f9e4dc8c6e94f93467393","ssdeep":"192:HUBIG/8mflrSTRozC7vkPLPRFf0p7o+LlQCBzHcZUZBwruvpoHhrzWgR:HU/f0agvQRd2fl/BLLjurzz","tlshash":"9e32cf24782fc08b980460485cf6d3f6d832b1cb9ddbd899e602918f9d37d5ae06ded5","first_seen":"2026-07-22T10:11:52.988649Z","last_seen":"2026-07-22T10:18:04.977346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/84182e5f-bf10-4af9-bc9c-8a55ff649655.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.937Z","timestamp":1784715446937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/84182e5f-bf10-4af9-bc9c-8a55ff649655.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:27:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea7e6-165e\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5726,"size_decoded":2863,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d8d2c27655fae4077d8260f2bcc5655","sha1":"98e473ea81eac308e2a7e54b2195720a809e243e","sha256":"2ddf7eb327841cb2dd5b27530ad689e07b3741e8b1acfd0919c4674a382acae7","sha512":"e53b530af669c431ff0235870853dfa89591f7870997090253dbc3483c91a80624e333c06cffb099aa5742b47b69a567a7060d0857b44cb9c8e7a0be4ad75cce","ssdeep":"96:l0rgUZdAcPz1epFEGp3Bj5cID3xqLHcKc2tftTJBiLp/XjW2eUjB82Nwk7P:l0MUMcPz1dGp9KHcKcijiLljteUm2Nwi","tlshash":"8ec196c827649bfcf801f3ee67015468352570fe7ab28765cb2e4e2876468bc5e09cd1","first_seen":"2026-05-02T07:09:17.975297Z","last_seen":"2026-07-22T10:18:04.977876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/rainbetbg.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:25.280Z","timestamp":1784715445280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbetbg.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7746\r\nlast-modified: Thu, 02 Oct 2025 14:24:04 GMT\r\netag: \"68de8b04-1e42\"\r\nexpires: Fri, 21 Aug 2026 10:17:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7746,"size_decoded":8090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5b9ab05944c5551f01b73a5978086ea","sha1":"86bc9afa35620b54034bd9e23ccc1f6de4dcbe9b","sha256":"e333ed3af52717b49be5ed0ba764383bf94c031494940c41e49e47c418220ee0","sha512":"6e99b0064278e535b902451fbd4d1ebb976bf3e31191eed09f8973a8d7bc6740d82c3806bf973092dfdb64dab413a03c35a398bb5f0f7c6455bc5cf9279bee7c","ssdeep":"192:CwaQ2aUKm3NMt4j2AHr9mtBjUqrwKZXwNFM:Cw32aUKWK6jLL9+B4qrwKZXZ","tlshash":"58f1ae6f2f905914f900c57c046ebd40efcca8769a4a8943da85a331dd099fa2d58e0f","first_seen":"2026-07-22T10:11:52.933877Z","last_seen":"2026-07-22T10:18:04.949479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/baccarat-squeeze.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.916Z","timestamp":1784715446916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/baccarat-squeeze.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85612\r\nlast-modified: Fri, 14 Nov 2025 10:29:16 GMT\r\netag: \"6917047c-14e6c\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85612,"size_decoded":85958,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e6d0e85c3eec4803d7c2a671956c5d36","sha1":"ae8e997727f129981f128df8f8e53b3a4b28bcc2","sha256":"54a003c4768ddc20be4f0168393aa43cb646b81ba2492b5bc2b10e86c4b5d648","sha512":"34db510927a245379b2d7925ed763882e75256b70ffcacaaa53ac9237a9b96a944bd4fe9a425d2326cb318ab0cf10cdbd70d57aac3938a9d541b623ff271c3c4","ssdeep":"1536:Srz2DIGtUD0PoDOnYTQgoigwQ3YAo0gqbOzHO5Y+MuVRC+jjg5WrTdvCzijX:SaTu0QDcOovgVzHrfH+M5iazi7","tlshash":"e88312c383a5f58ca60c735eb7d203ed436db92c9b33136d0d2c67269a092175ab67c8","first_seen":"2026-07-22T10:11:52.991401Z","last_seen":"2026-07-22T10:18:04.978549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/blackjack.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.926Z","timestamp":1784715446926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/blackjack.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10176\r\nlast-modified: Fri, 14 Nov 2025 10:29:42 GMT\r\netag: \"69170496-27c0\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10176,"size_decoded":10521,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a3440a7dd6739ec53b31101ef820fa5","sha1":"855d95e241967cf5ac1f26668f2b8237adc31a40","sha256":"42a0eadbe198186f8b711802b35f42fc3f9e59cc348bf01991f2d7991944f00d","sha512":"d056231da0bb90c60c9db250751ea9c8d29dfaaea6098b6b23b55fe8df1bb5347521b6a198820bd91d851c19d3e877079e334ec47a7b7b857c16b6d83b56589c","ssdeep":"192:/+5ZxZuRic0kRK+zoCyE6MAmLzkPF9NJ/HB3GOHBqTfga1x1OMhA:2nruRiF+E7EFAMY/B2OhWfr1x17hA","tlshash":"e222c0e269857de2b94fee2f23218c5a7347cd78a1f453645c073021e4e6da7580b9a1","first_seen":"2026-07-22T10:11:52.878586Z","last_seen":"2026-07-22T10:36:03.529277Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/gamble-anonym.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.934Z","timestamp":1784715446934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gamble-anonym.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1186\r\nlast-modified: Wed, 19 Nov 2025 09:50:01 GMT\r\netag: \"691d92c9-4a2\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1186,"size_decoded":1529,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48ede72df75bfa74fb809f019bf4d338","sha1":"35df2c8f0461d46bfb49c13d89ce7fd563ad9d20","sha256":"9ba1f43f036a85ef1d13f3d35eac377d8427afe9a9d2c719b4a45027d6d3ea7d","sha512":"9e5df4d769ccc1f3bcdc2727d5a511392bd75a7a764a3c0814f3f0e02f5cc55a8deac62160aac0434ce3fce4d6820428546fad3a1a720111d735dac1bc540b74","ssdeep":"","tlshash":"18213046549ff02aec67adf32226358c12f18100b20bcfb34e24d59cc906499666a1df","first_seen":"2026-07-22T10:11:52.883716Z","last_seen":"2026-07-22T10:18:04.979667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/css/bbd7a27c5bfae097fe4908529f9a42a9.css?ver=a42a9","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.805Z","timestamp":1784715446805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/css/bbd7a27c5bfae097fe4908529f9a42a9.css?ver=a42a9 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-b1e\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2846,"size_decoded":1069,"mime_type":"text/css","magic":"ASCII text, with very long lines (2846), with no line terminators","md5":"f6196bb1d65063d048b732c1c2216b94","sha1":"1c895153246bf45663fd0d684711a3df83abab01","sha256":"0f96f56f605acf21ab53c0c7aae9c87ec3f75caf424cb08950ebeb9d91bb422a","sha512":"c173be6a64bbc7e5b7477cfda12e425dc5a9522545523cc04bff19ec61faa3a97a0f184667e105152c6c1fd5a47119f5c097dd69f91ec4dcdced02dbbfa59c51","ssdeep":"","tlshash":"3e51a8ca965f1137561293a874cfe2f52b760c33dfd2d78467728a28c20a5a193f3236","first_seen":"2024-10-15T14:15:03.276455Z","last_seen":"2026-07-22T18:26:27.502722Z","times_seen":180,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/mines.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.910Z","timestamp":1784715446910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/mines.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8780\r\nlast-modified: Fri, 14 Nov 2025 10:29:34 GMT\r\netag: \"6917048e-224c\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8780,"size_decoded":9124,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e194129f820af4eaf728bea18657402","sha1":"08cf24ea20efd0de296bfc3bb0858c9f6c16c710","sha256":"641eeadb29fe669694d2d96e6e706e350f8f07426ed81c3511e8594eae8f2d9a","sha512":"c196d1a286bce9fb9e3c2eebf6b7d2318b18b6e40c214f39a5583c6612bf2ba1dc3b8fc5857d57246bf883a580e637eef54093db3265af4b0add31705dd61c11","ssdeep":"192:JESYkZm3oaojaS67lEymMAJjehXf2ZJxxtk:ySqojupuMOjeo7xxtk","tlshash":"e602bfaf93c34321a782b658fed2d5df862d9b5814c0b2831cdb551044e2be2bb305c8","first_seen":"2026-07-17T10:04:37.468069Z","last_seen":"2026-07-22T10:36:03.450517Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/pragmatic_play_big_bass_floats_my_boat_web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.913Z","timestamp":1784715446913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/pragmatic_play_big_bass_floats_my_boat_web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29222\r\nlast-modified: Fri, 14 Nov 2025 10:29:36 GMT\r\netag: \"69170490-7226\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29222,"size_decoded":29567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6835d27fbee8f970761f6bd090cfd8d2","sha1":"eb30d764ab689384ea534f4510d857cb4a9b6b73","sha256":"af75a46537a82b42072f5baf4e166d3168971ccd759dd26c7c948ac8c4e6e6ac","sha512":"c017597abb49d93160ed7c730eb4c9d5a76fd57c00eb667cb5a8469d815d195f29bf811f4412bacf865cdd2fb15fc3937936b8a576c643e33ee5a3416f1e3a83","ssdeep":"768:dPtaQLfLyv6ZiralexpdTZSxnI4iqPeWUzcczTVwpWfS:dPtrLfOv6grmwpOdI4iqP1aclcS","tlshash":"15d2e1dfab1e05e0a5d69a7f2d09f0f90e7e508f14ae564a0ca28c76d04f5708577037","first_seen":"2026-07-22T10:11:52.983407Z","last_seen":"2026-07-22T10:18:04.981576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.816Z","timestamp":1784715446816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a608330-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-22T10:52:12.450548Z","times_seen":58,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/cbcc733f85400874bf7dc2da147ca960.js?ver=ca960","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.865Z","timestamp":1784715446865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/cbcc733f85400874bf7dc2da147ca960.js?ver=ca960 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-13bb\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5051,"size_decoded":2205,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"4185e5366c2097571bcf5e9a5ec39e4b","sha1":"cea228b7e379402ecbaabbb0dad237576a9bbfcf","sha256":"5710b33cadec165f3c94c0912f43c7cbcdcb55e9a95efe993a410970810e2f52","sha512":"de333bece08dec297c731707dc32e238cab60890d5a9268de36e48543fbf06909264d222d0e656758f69a918485b9069c0a3cbe49c9141b9ddf4e56efea89c38","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Ci2:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY22","tlshash":"caa151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-09T20:56:23.587409Z","last_seen":"2026-07-22T20:34:41.653038Z","times_seen":228,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/18.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.950Z","timestamp":1784715446950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/18.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 02 Oct 2025 16:28:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68dea841-72a\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1834,"size_decoded":1191,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6911d04dab1a540782141b77e84c5e06","sha1":"9d380acbb4990eb5a84aa57233d2f1e56cdea3d1","sha256":"059b44a03a7c040dff52f6ee66ee99d2c4f8f22b76cf5c35953ae87e3a38da10","sha512":"45ad44d79f92e1b9171059945523a89210ed9028ee5c8c6914390d77532f4d3f5a0fc8f3f1226835f2f28881a1628b200e816b59b12cb5dbf574d840c9843edf","ssdeep":"","tlshash":"2d3124d5b1e4f2e45819d7a04774a87232c378edaa1ac6454de6c9f4f60a50ee8ec484","first_seen":"2026-05-02T07:09:17.928459Z","last_seen":"2026-07-22T10:18:04.98317Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/10/rainfavicon-300x300.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.103Z","timestamp":1784715447103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainfavicon-300x300.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3472\r\nlast-modified: Thu, 02 Oct 2025 13:28:33 GMT\r\netag: \"68de7e01-d90\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3472,"size_decoded":3815,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caa96f713b266303009eca5596577c61","sha1":"5aa43776994414acc23f0d9f8779f1da12c83965","sha256":"8efa634ff2f6283c87214c25c118bf1bdb8f4bbe6eceef46fff3a494008f1c04","sha512":"b8234ebe469a769066a6809f6d9b79daa939ee00d8899647f73c9b1f1303317e599d17362cfe06019f8a6f8f9440ddf3d587e170838c32fedf4800981ff102f5","ssdeep":"","tlshash":"92613bc43628653ce4134571d1562663b3edec544f9db46d90c044234b28dc91ccf74a","first_seen":"2026-05-02T07:09:17.995218Z","last_seen":"2026-07-22T10:18:04.983643Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/3623ac8178cf88cddf834a92ed630d0f.js?ver=30d0f","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.882Z","timestamp":1784715446882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/3623ac8178cf88cddf834a92ed630d0f.js?ver=30d0f HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-30e1\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12513,"size_decoded":3882,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12511)","md5":"3e71574fc61389daf15e9585bcc93fe5","sha1":"92394cddb2ae40c7060c709621db86634b25fe1a","sha256":"2f441c962e351ef150f80bda82823c79cbb9ca057e0be5761a3584a3ba89b9e6","sha512":"028551afde3dd00b87ebd86e58888da9a3c317753760af83697602d9796956e687f83e5b1d60e3844d6f9b6acfcbb9cf93088116a6872e72ea6c2fafec85c50f","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O95:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XN","tlshash":"9c4235e16197e0f0c7c338a48816c051f2bf866cb8898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-17T01:59:03.5715Z","last_seen":"2026-07-22T20:14:24.066655Z","times_seen":9832,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/speed-baccarat-n.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.921Z","timestamp":1784715446921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/speed-baccarat-n.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 64786\r\nlast-modified: Fri, 14 Nov 2025 10:29:37 GMT\r\netag: \"69170491-fd12\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64786,"size_decoded":65131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c13722274f85d781c7ac0381926138d4","sha1":"2e7858641dbf99795650214c034d7d69a8daa28c","sha256":"0aed56f923fce8f1fe1a1fc3411647c3c094699415b7d39c97edd42ba489d9fc","sha512":"11e658fcca011aff98aac4637d8d6b35c8a61290559ccc6460eb3d504d24de599b11278d115a719f00b4fab0ab5094e9fb7dee81c1a66c8c113ef16cddfc68f2","ssdeep":"1536:bmv6Tx07QO/vKZ6GlcK0QJNFlrOoSGnegqIaEXGuaP:Q6t07QQKZ6SXXFlrRSGzqIawGB","tlshash":"4453027c6e3ba2d0806e5e3421be35f1168fd8123154e1a8d7f7337e7912ea09a5446f","first_seen":"2026-07-22T10:11:53.014705Z","last_seen":"2026-07-22T10:18:04.984681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:27.024Z","timestamp":1784715447024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19768\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\netag: \"6a608330-4d38\"\r\nexpires: Fri, 21 Aug 2026 10:17:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19768,"size_decoded":20113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-22T10:52:12.460348Z","times_seen":187,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/css/7946dc70d725787e20c67d5963d2c36a.css?ver=3f01c","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:25.217Z","timestamp":1784715445217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/css/7946dc70d725787e20c67d5963d2c36a.css?ver=3f01c HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Apr 2026 14:35:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e63998-ff87\"\r\nexpires: Fri, 21 Aug 2026 10:17:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65415,"size_decoded":37950,"mime_type":"text/css","magic":"ASCII text, with very long lines (62534)","md5":"7946dc70d725787e20c67d5963d2c36a","sha1":"89cd39cf18e8387a15abb507103041ecca854fa4","sha256":"42599d74166a58a3c42d67be0a839cb3e4f8ec688f63eb9504c7732736b1535c","sha512":"660c47f39a110bd597e9dab37a41a250eefb4ac35b874724fbed765c03b8f2b504486883b1949fdf3caa9203dfcb26b81f6cd0e584426d18fe3ec59b575b796a","ssdeep":"768:Ppey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5OO:Bx/ZvB/qPWMiquqioMUXQSJYIMW+OJE","tlshash":"2853e5b1a64a00d273f0c943bfa5b2ba1692bd39ed44dddaf01b411c59e323506ddb78","first_seen":"2026-07-22T10:18:04.985668Z","last_seen":"2026-07-22T10:18:04.985668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.820Z","timestamp":1784715446820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 08:45:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a608330-5fe\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-22T10:52:12.476612Z","times_seen":53,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/42c7f697014fda12db2d29edad184916.js?ver=84916","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.886Z","timestamp":1784715446886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/42c7f697014fda12db2d29edad184916.js?ver=84916 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6098b6-348d\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13453,"size_decoded":4645,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13451)","md5":"84da02f41d9c61dec95f05d41236d497","sha1":"2bb978916e29e01050ea71d2c68a299fc61f90d3","sha256":"9d8c33c2fb6efb6c3e9778edd19c6c60bf61e327c1132787e14f66cb7cba9726","sha512":"8fb2072d48ed3c279ea005d758d64467384ff0efa72e5ffbe547dda86a6cdd3aa28741a2d342ca28d9e98cb8ee8a0c8d05fad75455d47eb858d7f4101b81e40c","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5D:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjZ","tlshash":"ab52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-03T23:01:56.192803Z","last_seen":"2026-07-22T20:14:24.067372Z","times_seen":10108,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/litespeed/js/05b5364b67d20e326a95863fe6d5d435.js?ver=5d435","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.889Z","timestamp":1784715446889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/litespeed/js/05b5364b67d20e326a95863fe6d5d435.js?ver=5d435 HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 861\r\nlast-modified: Wed, 22 Jul 2026 10:17:26 GMT\r\netag: \"6a6098b6-35d\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":861,"size_decoded":1230,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (306)","md5":"2d17ff7d4e8d5e41a20e4dac14b07b15","sha1":"e74917f84a8202b5cc9b8642e2c0088e372b5e9a","sha256":"543e5870a5655323e29de36a3d6874be298bfe89d3c2ccdd376f53f612f68175","sha512":"79a8d0f06e598faa6be3d0923982ee8621468b31568b2839222e0532b445210f0ecf44047458ad6cc595c1ee4733b33fe06b94f2219c7f6722762b543eb3b901","ssdeep":"","tlshash":"ca11e9316128b839853a01c7d26a6fe57d5914ceb80001b466bc56bd2ed0ce3a3725fa","first_seen":"2026-05-19T22:55:05.220654Z","last_seen":"2026-07-22T10:18:04.987693Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetcasinoofficial.net/wp-content/uploads/2025/11/betsoft_pho_sho_web.webp","fqdn":"rainbetcasinoofficial.net","domain":"rainbetcasinoofficial.net","tld":"net"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetcasinoofficial.net/","date":"2026-07-22T10:17:26.922Z","timestamp":1784715446922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetcasinoofficial.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 07:56:59 GMT","end":"Tue, 20 Oct 2026 07:56:58 GMT"},"fingerprint":{"sha1":"92:7D:C8:D1:AD:E1:D7:24:9A:D7:F5:5E:F8:46:82:44:A0:1A:8E:76","sha256":"1E:42:B2:1B:64:0E:91:BC:67:F7:99:09:5E:55:E8:27:0B:E4:2F:6F:AA:11:21:34:0C:F5:F2:87:43:DC:38:CC"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/betsoft_pho_sho_web.webp HTTP/1.1\r\nHost: rainbetcasinoofficial.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetcasinoofficial.net/\r\nCookie: _lscache_vary=ed0f4832d5d2ee17ea203369fdc3fe77; fc_popup_unique_name=GVgRBVsdH1oZGFAWBFYeDVAbAlgURVcdHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 10:17:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23150\r\nlast-modified: Fri, 14 Nov 2025 10:29:41 GMT\r\netag: \"69170495-5a6e\"\r\nexpires: Fri, 21 Aug 2026 10:17:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23150,"size_decoded":23495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x254, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"715c9ec43c81947c3ff014b541923d0b","sha1":"1a3f3f1ccac48d4dbb1b447ac9a9e36d9f4628d6","sha256":"e64a883cfe54f632b4a6a83022ea41dd9faa540ec5592b5a71d6bb06ded45c00","sha512":"ea3a849a4d111e3fb1e8310857427f0daef9e252ee8e94810c4aa6d2fa251f68d48e194a7df4e1dcd207dcb6a1f2fa642c5d3e5dbc90ff8faf1672f32df89fb9","ssdeep":"384:IvZWg+/uoHyy+M2gXctswNYxhKaVlArjTk+8M9ApSlquP0IgCa+36sPrRPmk7Ua:oENmoSa2OIXafSjH9ApGbP0EaO6sPrlP","tlshash":"8aa2d09772ed3b38f614eb43bb5b4e9a2e4cf4914481c0b39e75a95aaa314720cc0767","first_seen":"2026-07-22T10:11:52.986333Z","last_seen":"2026-07-22T10:18:04.988149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"rainbetcasinoofficial.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}