{"report_id":"ec58fa94-3361-4518-aba8-f95bb6f0fc78","version":0,"status":"done","tags":[],"date":"2026-09-09T08:51:53Z","url":{"schema":"http","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"title":"Rainbet Casino™: crypto gaming, fast payouts and cash rewards in Australia","dom":{"size":256787,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5993)","md5":"96771b9345878d60dfd40cb6e0489424","sha1":"d4e20d4c3cf1b7bf502d325df801277eb0b0c25d","sha256":"eea439daa1afd3a68a71d0688d59359d0a3191fc27e011f0f97bbb5e306ff298","sha512":"09e9b74921f7bc06442bc83a8e90101cf9c81dc9be057d283609892cc8fc9843f665760bf8cf2cdf22ef8f72e2646f3914d12c36393918965c85af066c7c09be","ssdeep":"1536:dd8Xt8jypzWroz5WJlxpOelsvbUQW7S14Ry3N6mJmUiwqDDGUZcyDkl+ttV:Y+OSoz5Sxp9X7SqG6mJJaDDGU2yQl+R","tlshash":"7044b65f17a7246a3597b17cdf9a220c622d9003ca0acdb579ddc14ccfcaa9589b3b4c","dom_hash":"domhash747899012d3197fd6cc454f3765dc0a4","first_seen":"2026-09-09T08:48:02.547402Z","last_seen":"2026-09-09T08:51:55.356893Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T08:51:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetaussie.com","ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-08","domain_rank":0,"first_seen":"2026-09-09T08:47:57.906463Z","last_seen":"2026-09-09T08:47:57.906463Z","alert_count":47,"request_count":47,"received_data":734494,"sent_data":25204,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-09-09T08:51:55.386337Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f03de8ac1515f8ff3b8f628571f987a2","sha1":"a36ff79226a8ee08f38fd278fed4f75487a7ba2d","sha256":"fa96d3eaa67dc35be31803ea24b61766fea0c1a630f0c1674b7c75757861715e","sha512":"3a7ddc47bceae88f8444a0c9fac2815fe1af8c5b124a5cd20d7d1d24479f8b2a54c4cffd7bea56918f051f22f2119c565b02c9f50262d03d62e538c0655d55ca","ssdeep":"","tlshash":"481165de0ea70a3c4c6bc7b25f1840a02d5a81ab4842459eb5cd10e03763cde57d4df9","size":1021,"data":"","first_seen":"2026-07-08T12:06:19.270144Z","last_seen":"2026-09-09T08:51:55.386851Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06b75ffcdf480589f19cbf78ce373dea","sha1":"316b05245c99c1420895c28a0383802e6c5d74ea","sha256":"3cb8441193a5962c3af7a83eb1a4418970173e7a7f89bb085de078e3ac16fc0f","sha512":"10af5558f1abf25dbb1f03fe16b20efea15aaa4db054488e516bc625ee6fd0b36194fe7241573aa29f91513eab613c3a5cc0f423f1c8851b3aff77a84c56ac78","ssdeep":"","tlshash":"ab410768dbaeb662432ea0b62bfe12de143e147e7a414ebb7c38405048e48093715c7d","size":1934,"data":"","first_seen":"2026-06-07T17:05:58.287593Z","last_seen":"2026-09-09T08:51:55.387475Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66338d19e4549e84c43c59e4f54c0ddb","sha1":"07234263e628b3128f61378b2a0256d51f02069b","sha256":"338e03ff0069bdfedbd30173412ffa37ea0df5ce02768702e31309b61fd4ae92","sha512":"f40fd62a8c8068e950347ca8011240a8ed833d1a39c638c39747b2ceb93a7c9089de40bf15f4aad76151bcba080316c043ec998b07dd724359be0878e5b454bf","ssdeep":"","tlshash":"c441fb35b3bd243147bf64b569e5669e2a3990823a878ca7cc9c9c0624c0f9d4875cfe","size":1922,"data":"","first_seen":"2026-09-09T08:48:02.589555Z","last_seen":"2026-09-09T08:51:55.388092Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-11T13:34:29.43412Z","times_seen":56418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38d9247925836f0de766e82492482266","sha1":"dd673978fea384fea3ba7083b0dea3ae0c158a8e","sha256":"9b849c800586496e304dc8fd54f1ba0f1f956aa514046b85a3f5864a09f663b0","sha512":"b9b72acd1b87abedad79e7091f6c592f090fdf74c596997dbf2a891747306d8db9752eb60a40c489c91cc3c9c1d10556447ed21f65ba418c9201e17ae250f9ac","ssdeep":"","tlshash":"79c0809ed9e82c4a24e5c168417c1329b1149517cf2f5e76b24e004c5ffc07db5346ce","size":191,"data":"","first_seen":"2026-09-09T08:48:02.590998Z","last_seen":"2026-09-09T08:51:55.389175Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9eb4054e719436c4713ef7c4844d4c4c","sha1":"07acc86c5efd6178b7c726b08c0a1a36a81baf40","sha256":"0ae6f4a553f1b1eb67a65b16ad0fc33bbe8dc8581d704fd284632cb2b3d2b8f2","sha512":"501e34e8517ef3bb94b29b1a6d7ba98c8d52d3ded178d870b8dcf37d8ff50cf8d428c8689db820a4cef23ad9a68c79f2a1c921c7ee9275da3949b1748e6899ed","ssdeep":"","tlshash":"80b02b190dd80f0321c00ed58420563b11282021ec50a8154282c45000285418978245","size":123,"data":"","first_seen":"2026-09-09T08:48:02.592071Z","last_seen":"2026-09-09T08:51:55.389863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-09-09T08:51:55.390492Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a85ad5ad6b7dc5739c536ead402ece9","sha1":"4f0bad18af7987df0ba4d003059b1229bf542b4b","sha256":"9bced38b31e02c72ccf4ab291b5cf6383aa18fc295986e66f14aaae8c684257a","sha512":"b5fcc29d39b6101604d6ff9bf50b8f74e98074175a795ed6ac5e77cd34267a203a827c23f9f7cc35b7195a7cb960243f4fe6224fa1d29bc8267ecf67b8bb86e7","ssdeep":"","tlshash":"842147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1366,"data":"","first_seen":"2026-06-10T08:18:22.012949Z","last_seen":"2026-09-09T08:51:55.390969Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-11T12:48:20.692577Z","times_seen":243301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/contact-form-7-js-before","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b960c24eaca7575735ccfbf019dcfd51","sha1":"53ccf344965950d2c79e524a4c94f55b1ba375ae","sha256":"e4ef5ccccbc45d2ad1ccf4cb07c51d15130e180496de64d6093acfeb3598b9f8","sha512":"6d11363b59fe9780ac0aabb7572086bb799da104944fb1dd0e346387856b63f26fbf43a5bf81bc158a2f339051c9b4edb970777682a7d551e7eab6a1363aaf80","ssdeep":"3:HT6SVGDSiCmbFFlHr+HBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:HLiRhD+h1ulgpwLkuKZ4rQAv","tlshash":"eed1129ad9a82c4a24e5c178457c1229b1149517cb2b5e66b24e404c5fe8079a5286ca","size":6524,"data":"","first_seen":"2026-09-09T08:48:02.595232Z","last_seen":"2026-09-09T08:51:55.39147Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/scripts-js-extra","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89cfb6028bdfc250104953ce6f487807","sha1":"e96adf24d6625717bb5ff795bbbaaa91c8a6577e","sha256":"92b44196aa2adcbd2e62f3ed1e7642ee4ebf3a8cea52919d273ef0e8e319bcd4","sha512":"a6367353d1186f64ccafaf2fcbd6be1987b0d3ac3e5c73f12c1673f8a24bca42d694d9546667b425c0f1854e6a704079ca540075041f67e18fb597783c49825c","ssdeep":"3:H76EDew5vNV+KSVgrTHnJH+LX/lgRzyGY3r:H9xeJVgrTQLXwyGY7","tlshash":"bed12b19cdd80f0321c00ef58820563b11682021ec90e8154286c45000285418978245","size":6467,"data":"","first_seen":"2026-09-09T08:48:02.586619Z","last_seen":"2026-09-09T08:51:55.392418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-09-09T08:51:55.377545Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-11T12:48:20.585569Z","times_seen":8365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-i18n-js-after","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d72e1249e55407edaec67d9c89213d8e","sha1":"df8f015aa95631b2800cce23c91fe15464dc417e","sha256":"1dc343420dd4724ce0dc7c5043cf87e5adcac0a5845349a23569166d97b65748","sha512":"163c2e5d1316ddb91a10b593fbd8504fb853e9e0305ceff34f0b3090d3b1d5b7b2e23c4f845946e788713be434723643f8bca889e49587609d48ee03c0b2fc77","ssdeep":"3:H6aUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:aBLxTqtGmVOiFM/KGNMJ2","tlshash":"5cd112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6425,"data":"","first_seen":"2026-09-09T08:48:02.596297Z","last_seen":"2026-09-09T08:51:55.393096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-11T12:48:20.670491Z","times_seen":236455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-09-09T08:51:55.367206Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-11T13:22:40.985176Z","times_seen":433221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-11T12:48:20.584723Z","times_seen":8484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-09-09T08:51:55.366581Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/golisimo.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.616Z","timestamp":1788943884616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/golisimo.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Jun 2026 13:33:14 GMT\r\netag: \"6a26c49a-179a\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fv32lNS8j6naIfTDgX0DIdVZcgpUROxuqnrN1BmF3GMJd%2FhzTAgUODyd%2F9lKtV3HLkAYSRVhhhD95YqxM%2Brldghk7cLqNrbjeb8MCdiX9EhL3PXZWdtd%2F3gLE8toMIR3ORflVw%3D%3D\"}]}\r\ncf-ray: a384f36eda0adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6042,"size_decoded":6838,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac59cf1dc11e70a9ba17900e72121b09","sha1":"55702cec441603723d5145e7e8b947c80eb55f81","sha256":"7c4626bf4342c5215572a75dfb87d00cf2fcc74bbfdd8d24cd7a9854f415a57f","sha512":"ba8a91cb9dc292414d6ba555bb8a624cfdd4dae52be21e2d2310dec34fcbdb08b4aa54e05f9b2eb53bf176a2889abdc6c53bba955f13e0922b83f58eff71d084","ssdeep":"96:kElbw+iTyeUqcLtEWHWtW1thiE/0BdW0xFd3U6CXF7N9jG2GxKw6n/p:hwPkphZnmFjq77K2Gxqp","tlshash":"96c19fbd42e72f4be9a14afc84c0a732c0767e648f6017a0294944517eaf0cf5fb1949","first_seen":"2026-07-03T10:53:35.719348Z","last_seen":"2026-09-09T08:51:55.358478Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.742Z","timestamp":1788943884742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4bc4\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ln2GBbMPEn6C%2FlzF3mSFC0bHmeXfU52Z7jDIq%2FniUYBke8F%2F%2BFLB7eMkdLkVenLY9bVKA9O3NDz%2F%2BQUuqhb2xAqBgPbmlBKQ%2FkK%2B2Th%2FQvJ63aHNbJ66C7PB3dQCClD3WQX6qw%3D%3D\"}]}\r\ncf-ray: a384f36faa5adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19396,"size_decoded":20204,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-09T18:07:54.908814Z","times_seen":191,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.934Z","timestamp":1788943884934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4d38\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLKaeyQL73XpwmgAbTYAOEwtSgjt5mQtvZWZXSEt1vInafWWWYuhMQcWQT3CGTp%2BGCctHpG2gn5Zg2IfB%2BNyB8PC%2BzFghFCvStqHGxysMJNlrz%2FmthS4S08jXp7z7V2c3hxZAw%3D%3D\"}]}\r\ncf-ray: a384f370da8cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20566,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-09T18:07:54.913657Z","times_seen":232,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.937Z","timestamp":1788943884937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4c08\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sW8lKCqnqn13Jo5WR09%2BsbWvP0qQiBqXdo2rRJi%2FXIKYZPdYCZ9YOCBGZ02vfKut4RTRzSb1T6Ec0g9algLwTCzTzV6TFUB0jJ7HRmz7Q%2FyH5jAM9f7ykqpevwgmIRlyxhw%2Fw%3D%3D\"}]}\r\ncf-ray: a384f370da8ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20262,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-09T18:07:54.912372Z","times_seen":207,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/syndicate-1-1.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.620Z","timestamp":1788943884620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/syndicate-1-1.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Dec 2025 09:31:45 GMT\r\netag: \"69315501-45e0\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLScqN3I5QCiMGnHKrx1X6K2iuVwIZqADfsJSYH7qnuNTic2aiBVWg7ZBnD3qvJbPWiCaNQ8vGfQv%2F82GoXEavBsBYNB5eVw4FTRdZubZfANC59J3%2FRBxczXYlZ%2FR7aMVNRDdA%3D%3D\"}]}\r\ncf-ray: a384f36eea0fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17888,"size_decoded":18681,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2622ed3b2a575096eda5502c321f7458","sha1":"c6d6378ee0f731c7da1a23f99bc48f2fce075747","sha256":"7dd9e89794b71fd70ddca552fa1efe17f476f1fb557af752b4eebfe821e1e554","sha512":"4d7ff453731ea37fe6848f9ac8e05f8ea141334f8a99ff1f48873379bf4e54ea0d974bde7d096920cf3b4ff20891c64f70329d02ce88af9c5fe69d0fabfe6a9b","ssdeep":"384:nwTLGab0CSO8fi7EVKqQVJT9QWC8laB6pEt3wW5Mg1gNK0RFpdV:wTeCe6I45JTjl4wTcgRRvd","tlshash":"6882d0224f138778d4f1853152d5c7f0d681475a9ec5092ec92fa530afe40ebef98a2e","first_seen":"2026-07-03T10:53:35.713934Z","last_seen":"2026-09-09T08:51:55.361585Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.608Z","timestamp":1788943884608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50fb64-5fe\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FK3Fe5Shc5tK0evDWbZX5eAnx2dZfjTF9AFlXldcjkAX0YM%2B5a1ezoQJp6rvYUrCdIFscllc0qB2THG2EyG5K78n8MqpdsbbBirtS%2BU%2F6bGwcAXKxbeoRjC%2FB9CwrxgSNgbT%2Bg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a384f36eda04dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-09-09T08:51:55.362315Z","times_seen":90,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-includes/js/dist/hooks.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.593Z","timestamp":1788943884593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 06:01:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a869833-13f3\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wnGEJ3y2zfBLxxlQT%2FFn4NpSwOxBNxAcHx5hq12ZR85amQ%2FjZkzNATh7OOD2buUSdVcADAWpuepHv1augmigjk0atKF0h14i%2FIlzEzAYuqXcmlIT7f63EnC2Cll5uj1zH1Igw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a384f36eb9f9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5107,"size_decoded":2687,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-11T12:48:20.584723Z","times_seen":8484,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.707Z","timestamp":1788943884707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEJIaVY3HFa%2FQVGbXEyZITyOkV7yf8myp%2BxWb6I7zujDi5CQbDSP5ic9SLAcGooB1xH2oFfQQBRlwA2IxrVtGO8uPRRBnz94yeVQz9AwuuZbF2RgGADucxD0Dlrz%2Fh7DCCTB4g%3D%3D\"}]}\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\nage: 237\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a50fb64-df\"\r\ncf-ray: a384f36f6a51dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-09-09T08:51:55.363342Z","times_seen":85,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.591Z","timestamp":1788943884591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 11 Sep 2026 08:51:24 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poUJZx7uBsHZdueCp7wFI8%2BQb3BEKier4xjPAYQJBIgn7mLbkgTTMMoVTM0w53SOMWluCDJS4Q27TfQvG7gyoYx2%2FWgV5VBoOb1xgBmGf1tnyDNaUtQJot3vABNAUoBnW%2FYUtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\nserver: cloudflare\r\ncf-ray: a384f36eb9f8dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-11T13:22:40.985176Z","times_seen":433221,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.617Z","timestamp":1788943884617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 09 Jun 2026 13:49:14 GMT\r\netag: \"6a2819da-3b60\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1s4Ma5A9DrcLkAGbYJJBa0dy%2B6LzaeJCWkZb49THr8vEN5yOk5bjk7q6VwvizJnNMJ02b2TEdyl7ZcTZBH18AExRf%2BAsRwTSiHDKbrFZXdFHL%2F5lMOgPcV1Lgktv7E5cddrY8w%3D%3D\"}]}\r\ncf-ray: a384f36eda0bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15200,"size_decoded":15993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-09-09T08:51:55.364535Z","times_seen":20,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/gordon_moody.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.623Z","timestamp":1788943884623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gordon_moody.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:28 GMT\r\netag: \"68ff83a8-193a\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9fpeSEJviB1tuzTE1Cf46oq%2FYbD7fuPJkRBmLOeodDCGVspMHTZBbRPe2fBRoB0VU%2FA%2FD2D1VNM3SFDX74JB4aM1PPS1okKI6yYLXbVWh6y29lxM7oqWnYQUqlbo0Otly4ywg%3D%3D\"}]}\r\ncf-ray: a384f36eea12dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6458,"size_decoded":7250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c63f61f997ec0f123d65510981056c83","sha1":"71a795a41cac71ecf3370730cac60bdcec45e6b9","sha256":"6f694d6e14fa6f540ce5fe922c6405e4e2e1c86e4b3c7089daeec700414c7a84","sha512":"d594c431dc2772ab72bd69b47a19d3333e320bb995f45f998c3198010f2a2c5a29100d49e3dc2d4327cdcc4796a529fa4aaef672bc11ae884f079628074683c4","ssdeep":"96:zElbw+iXfrKNojkb6gM3s0ENISM2aDIM5Mw73v15ertwTfG7lSuFGljIzSC2R3ow:uwTkSm67BeJMXe2ulXF7zGow","tlshash":"ead19db0937ad754e721367005b77bc39dbba4bb876dab3ec440110869919ce25cc4e6","first_seen":"2026-07-08T12:06:19.249896Z","last_seen":"2026-09-09T08:51:55.365106Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/18.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.627Z","timestamp":1788943884627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/18.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:27 GMT\r\netag: \"68ff83a7-7a2\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wh98rjpoqr0URPLYMRHwlMHQEBAcF0GqGOrN08KCR%2BoGAoTaSta%2FTswpe5jsxSt%2F%2FVmq6Wtq4C5agVQ2I0SFUpNsme1I2Y5Edu5mHNFrjR%2FVtvyD8P6%2B659gkI%2Bs0GPcdFQkXQ%3D%3D\"}]}\r\ncf-ray: a384f36eea19dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1954,"size_decoded":2753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6479785833d2c0a74c79731a2959b0ad","sha1":"118b80713cd039cb9db98805d55acebdbbbd1625","sha256":"9fdd429bdd3331f700fc7458354f5c826192a9099dd3a865f84d28044f07c7be","sha512":"1258f7447950c457d36756d73678db5309bb97bdbeac91a4ce8e16727cbead44ea7cbf4fa0edbfe78fe71b617d020f433c5a4e4987fe4472fcc1de9cc5a7e2ed","ssdeep":"","tlshash":"1f41073aa7086b8cc111303424d17fa3ba7ef4f383821b2567c242301ea64c272ee583","first_seen":"2026-07-08T12:06:19.263519Z","last_seen":"2026-09-09T08:51:55.365817Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.599Z","timestamp":1788943884599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50fb64-2174\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FguKYO%2F5ItCMm42YHMM1rBEiAowQW8gBCdBuXZdpDHY7hr5v9%2FfWDB4NSx357rTRf32ld1pP8IyUtil08lfJZ8AADElhDHPHUmnuB%2BFdfI0flKXRJ97hITzt7kgtlO%2FO%2Bx2t6w%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a384f36ec9fedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8564,"size_decoded":3519,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-09-09T08:51:55.366581Z","times_seen":23,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.602Z","timestamp":1788943884602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BZyV2igsnyNKH52PtyxtsCySR3y2dV76pScw2ggmF10sMXcKybhHGSYA%2F1L3e1QPpAqLfiJBWOAYmO7AQDNqQ%2BEKbFFZLQUzQDQ%2FP44sLOVPPwouPcaC1F3gxbEpuQqBRRa5w%3D%3D\"}]}\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 237\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a384f36eca00dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":1141,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-09-09T08:51:55.367206Z","times_seen":69,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/bitcasino-1.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.611Z","timestamp":1788943884611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/bitcasino-1.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 08:57:14 GMT\r\netag: \"6a18036a-2492\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7P5H0WL9REjz1g%2BV0vOfeIrpWRJYOizRr5EYo57BcjEWC88aFYsWWMMu0%2FGZbz5PV0dzBDJllEy%2BiqPHVPlWe%2Fq3gUXnRHfE3TkmOt7Xkmhyx8IpE2ni1%2Buik%2F4Z8jnJGQZcw%3D%3D\"}]}\r\ncf-ray: a384f36eda05dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9362,"size_decoded":10160,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-09-09T08:51:55.367925Z","times_seen":30,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/gransino-casino_logo-13.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.622Z","timestamp":1788943884622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/gransino-casino_logo-13.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:27 GMT\r\netag: \"691c1f67-2df4\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQjBvnv2TgmlZZzn%2Fsp02EtQJaXLySWZmDWHscfXMniLqswYxP%2FLaVxIlUGt5nA%2BgOHbSOyT4UKtrpnpP%2FoG6jis%2BnK8z2zWrk6nwDX4B9%2Bw1qo3D3NL9RpwE%2FvoLXwxT%2FX4vw%3D%3D\"}]}\r\ncf-ray: a384f36eea11dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11764,"size_decoded":12567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-09-09T08:51:56.291097Z","times_seen":26,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/be_gamble_aware.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.624Z","timestamp":1788943884624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/be_gamble_aware.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:29 GMT\r\netag: \"68ff83a9-1d1e\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXal7FEEbq2I0IvszBK6QH96Uwiv6QGkPxj9yN0ODL%2FQILm620CRI%2F7ltyIifSwlm3qDq%2FWf4AsOXW%2FoZ4Ym156WXmZ92OI5KIpyx%2Fiu8uNXCkyMppqtB0lmwByBj%2FhQompA1A%3D%3D\"}]}\r\ncf-ray: a384f36eea13dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7454,"size_decoded":8252,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"011912f410f3857fb6c343c637182731","sha1":"5b692d9fe9026bf861565d194d35ef8eaa7f4330","sha256":"9459b0482b097fd7351b8738034d7fe594b2c6562699038452c52b1379e96587","sha512":"de2d161d5b7d952c9087e9acc3f85a0bb04c15361aea7991ef1105d62ea6174f7761ee6da736c09712fbef50a76c80541fae99f9834f598b5d90a295f124d019","ssdeep":"192:6wTh6QhkBDEGrbjR4N9Wyhlll0HTEr+zxjumO3Z:6wTBIDPfjILfD0IrkwmO3Z","tlshash":"6cf19d2ac36d3210f8d95770185bbb26588ebc67136ee30e449831161999ff58b2de0b","first_seen":"2026-07-08T12:06:19.242946Z","last_seen":"2026-09-09T08:51:55.369534Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/gamblers_anonimous.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.626Z","timestamp":1788943884626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/gamblers_anonimous.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:37:29 GMT\r\netag: \"68ff83a9-53c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHkDgRH5ue26OaNLg7S4xu920AyBFK4wulAyXYZQCoEFbggAZ0fmFCbhGx1kvd0Sc1ap%2FyrW5HM8rpwtog56hHB3tJ%2BdDtJ8yNE2L2MNNN92Yh7q8DZXbsz41Yn4Jj8b6eZZrw%3D%3D\"}]}\r\ncf-ray: a384f36eea17dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":2129,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50ad7aa2a6244d35f371d54d3477a3ae","sha1":"cdd34bf73fcae8aa7ce6c16a5633a44e6d1812af","sha256":"1bfed5635fe383c1397d0c1a7c1b1e6b9645b9be74d7d0f55e38bd316263e8f5","sha512":"c54b64fb0f7432010cbfbad0a14bbd6bb45664379fdade280db06f1f395b876de28c58909fbf572759be27528dfab55a17963fe9d9ef5d84343efbd64a97aed8","ssdeep":"","tlshash":"7e21b735a35c4335f04837b820e01b02e3e87b15d3679f29834046755b484e7e4a9317","first_seen":"2026-07-08T12:06:19.26685Z","last_seen":"2026-09-09T08:51:55.370454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.745Z","timestamp":1788943884745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4c7c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4N2ODNQY1Yh5C7WZIEt5DWErtkPF6A0KisspRBtm6qRlhuFwr8O0AskblaUXPNzhc%2BmfiaG9b9ZS9MoRGpJrY11C0fBwEZyxarICxl6F8jhyoWNBgxD8J1U7WCn%2FKW7F6gx1ZQ%3D%3D\"}]}\r\ncf-ray: a384f36faa5cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19580,"size_decoded":20374,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-09T08:51:55.371059Z","times_seen":216,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-includes/css/dashicons.min.css","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.582Z","timestamp":1788943884582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 13:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50f708-e67c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jw6t1YwXBOnIS%2BFlPRkLvBwwHi63qAOOoiM%2Bwkk9t3JyWy%2FJgBdJti43x7d6%2B3ELT0DNkaEd%2BYv1ICd%2B10Hjw1pZJW1EIsrkA42viXtjxqriWW8jZURP%2BUg%2FW9IaruegJ9Dn%2Bg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a384f36ea9f5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36550,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-09-11T13:24:48.018711Z","times_seen":72893,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.584Z","timestamp":1788943884584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UENymL%2FOqHLtZM9R0xFQqba88R1Dvd6kbAVWuOyWno8wN55puiF2qf6PIQdE0jWvtPjehD7d1%2BC%2FQtaxN0X9hveV3DuVRGW0ntAWM9xCA5Up7AmOgwcwhaYqA8K1AU098evRwQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a384f36ea9f7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":1260,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-09-09T08:51:55.3721Z","times_seen":71,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/rainbet_logo.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.607Z","timestamp":1788943884607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet_logo.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:05:29 GMT\r\netag: \"68ff7c29-22d0\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvDS%2BuorUTi76WbuIIBuQ%2F3K7Axob1ordpUDuth8dZYNl8ilnZLcza7YB66j2U7EbgdvgCHe%2BNBen9swokLDJuAJ%2FjL%2BDkS0FuyDh%2F28dufivgLpI3PJkeka7YKWTnxPXMbwwA%3D%3D\"}]}\r\ncf-ray: a384f36eca03dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8912,"size_decoded":9710,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50a986f01111363eeba08778a4ff586a","sha1":"196a47bb332ef16b51b2bb864dcd15b0b0469931","sha256":"25324b8dd37c42c54be379505840c7fbd684c4d43787b9cfdd24730b68518423","sha512":"890ec5531364a25d795c933ea81b8543cf353a6fda5cbdae8f5f388a21e1c245fd4bb71d4723642605863ebe2a0335155232e5f73153263ecda4e4b5477b5ab6","ssdeep":"192:7jOJyHnVDDyfxsPsatWS5IJ1/l4vrWxpNk2paUvelwAJ6S7TFIqU:7aA9yJqc/8ripXptvelwAJ/W","tlshash":"4a029ed2956f28c2fdad9d39de2052e5723c6ac445f20f510368a9b28dd22c8aacd553","first_seen":"2026-07-08T12:06:19.255246Z","last_seen":"2026-09-09T08:51:55.372862Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.614Z","timestamp":1788943884614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50fb64-5fe\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JgF%2Fu9gqqiqZsrZpBSw5aLYCiLhQbS60gZhka6tTom8ttpntouDCB4VCmEceOAnCzqYS%2BosZt2rs8uHtDz5l6Em1ThIQPvp96P6pcKQivNHZQecRarzsQQm%2FwDC63b09JAyWg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a384f36eda08dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":1547,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-09-09T08:51:55.373537Z","times_seen":82,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/casea.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.618Z","timestamp":1788943884618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casea.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 May 2026 08:57:14 GMT\r\netag: \"6a18036a-1212\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jy6%2B65kd%2BxI13mctlRUY0fNubPh7Yu6fk1xjrKjZ4%2FWjOE4GOsweAfn91zTI1yFxaQYvJ1XpiXmufCNC4qyGAS1mvq8W9Huu91Cnp70TGQs0jKMnf7wfTuBbNm5qH7V2W%2B%2F3LQ%3D%3D\"}]}\r\ncf-ray: a384f36eea0edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4626\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4626,"size_decoded":5422,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-09-09T08:51:55.374037Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/11/bgaming_dark-1.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.625Z","timestamp":1788943884625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/bgaming_dark-1.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 10:03:53 GMT\r\netag: \"69087e09-a0e\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZnOZ9NyzGrlUnVO4Foxq%2FtUNT3netuoMk%2F3ahvyAJJrzKFHAjq1%2BfWBygMLCprE4%2B4R8v%2Fo1klm%2BseA8N2qezX9vevzB7MW6Lrck4S76IScvuSDfDmBXMso8PB7QLcTbKZQoQ%3D%3D\"}]}\r\ncf-ray: a384f36eea14dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":3371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c005db32bd84510fac65b93b71ad969c","sha1":"92cc23d097b6bc30b8c9d779d2679bbe01cf43a6","sha256":"6451a65030e5a440daeb99557aef0838cfac0cd86a001c182549c983378bec33","sha512":"065bd208fced2dee7f88ac11eb454a93953f582eea3e610152925e29184fdd43181ed4e7d3dbb2315348245d75761ce3bc78bd35a6aa525621cd5bfec7a9c3c3","ssdeep":"","tlshash":"88513954fe72a389804dc5c2284b3dfb9dd1b44aa0e22d6670a4467294f6d1aaea21c6","first_seen":"2026-07-08T12:06:19.243985Z","last_seen":"2026-09-09T08:51:55.374708Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/11/abhasa_result.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.628Z","timestamp":1788943884628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/abhasa_result.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:50:00 GMT\r\netag: \"69087ac8-bc2\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfErVygVrEdNbAoKRtuq722MJ%2BMuu33803UEA7nJAIV6lN6Y0f8bwNqWJ3Ngs%2F0kEyHMYXgyW2WEyxlrHp%2Fd2V0uY%2BPhJoCkUwIgB8IUz6%2BaB8wqJESkW4ZbC01EuTit20gqkg%3D%3D\"}]}\r\ncf-ray: a384f36efa1bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3010\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3010,"size_decoded":3805,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0c81a03d53a5ffde6b89924986bf992","sha1":"27f89a315adf2e6907827d38e92fc39b9afd0e69","sha256":"0d04c971c223694c615baad5e6a464f605aef71631036413cd1358e2cb981950","sha512":"daf731eaef417fe4af6aaed40a7eab85437c140fb3111ecacb2ad1e2d485e6e73ce7ae9d005bff3d0d1e331aec2f170c5dd0f6bbf837a8b715748d1f89d4007a","ssdeep":"","tlshash":"f9512c04bd026611ebba74187e855bd35bb1408f5f601d22eed108f6d8ae7289b3bce1","first_seen":"2025-11-01T17:37:40.399909Z","last_seen":"2026-09-09T08:51:55.375309Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.574Z","timestamp":1788943884574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKsC9ShjZ%2BjsRFMhVUMmX8A6tPKUzXAN%2FJJZi5UnB3thN32cpJ%2F%2FpPmdWZ3bnNAhwO9VLSaANB886YFl07KuLg6ivCo4sHVhYeMsQBBqlHf9l%2FuVvc%2BrrG7FpukTvxC2fkNi3A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a384f36e99f3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3343,"size_decoded":1628,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-09-11T06:24:43.390881Z","times_seen":4873,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-includes/js/dist/i18n.min.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.595Z","timestamp":1788943884595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 20 Aug 2026 06:01:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a869833-169f\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QBsXK25jYyOJAPWjBdkt5%2F8QSxhKwxPMTblrYymeMq06Ty9CWSHOSpxLtLcjVBv3Oos71qRP0rIXkqUCHMse0FzB9X2TPovYBrDvEm71RaSunTbHKI4MP76NAVyhW4oKUqQDQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a384f36eb9fadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5791,"size_decoded":3315,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-11T12:48:20.585569Z","times_seen":8365,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.596Z","timestamp":1788943884596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-30e0\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5ZFD%2FnWjufpchuGQq95jlqci5ckd8Yc2nzbPIwPU8w49mW4RY5jDmoJ%2FPw2jOHH67r2iuDoemEvu0vYff1uKZVkcSjq8L5I%2By4%2FUyZKhZI1Pvzh8A2ku0%2BxowMl%2BZ6dGpA%2BAA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a384f36eb9fcdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12512,"size_decoded":4338,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-11T12:48:20.670491Z","times_seen":236455,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.601Z","timestamp":1788943884601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPxI3CCnKZ4%2FrpS6gpVwAn7ZNS2dLigyHwQVLOwtRWjUnRZM0uVFJaBMS1qIajmYaabAIjZ105hI2UapdUJObXblUaxltAMf7cLmgjG71q4TKoJbF1i1kxHDdmq4ZAlunNRNeQ%3D%3D\"}]}\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=3,i=?0\r\nage: 237\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a50fb64-3d8\"\r\ncf-ray: a384f36ec9ffdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984,"size_decoded":1089,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-09-09T08:51:55.377545Z","times_seen":66,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/casinolab_logo-13.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.613Z","timestamp":1788943884613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/casinolab_logo-13.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:25 GMT\r\netag: \"691c1f65-75b0\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3o5VmmrdZN30feMyi46N7ioxY09FIhHFk0qbprWVe0uARDi9uBjiQD%2Bpj9fi0NOygz17BRoeQX%2FRHhB6nCAjFZlVP%2BCA4wiqYRi5oc1cm4BrECwjZwd73%2BPk3Ij%2BpLAzxv9hvw%3D%3D\"}]}\r\ncf-ray: a384f36eda07dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30128,"size_decoded":30925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f96f3d28d31c4cfd5521879427fede45","sha1":"dd1bc6fcf4b27472349d0c9637e0b2b696d24c55","sha256":"a9324ce9d167e8e77c331afe020c97bea593e51f0fe1ac9220e43b053878b30a","sha512":"ed165fc2c53ce01f5b6654bb7523f33903d8d21d2a680dd5137e84f1709a1296197baf6027ec53d5af104cad52d560ebe1b1330c9877cbab89dddc5b91f553b2","ssdeep":"768:yT7djYZUOfDc2+6VAtID6XtOlp38Ti3RoiK:GylDM8AtI2dWH3T","tlshash":"a3d2d09676b500bff23c013cda198ef2b5303a896c0274a6e1937399527d8ce973127b","first_seen":"2025-11-13T03:52:08.190132Z","last_seen":"2026-09-09T08:51:56.338511Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/5d6f5860-54a9-473b-8fe4-04a4d10147ef-removebg-preview.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.618Z","timestamp":1788943884618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/5d6f5860-54a9-473b-8fe4-04a4d10147ef-removebg-preview.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 19 Mar 2026 14:53:14 GMT\r\netag: \"69bc0dda-3a24\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yy2YD8ckMo5KBGd1%2FFJ8K52hRjAahcB5QrFdAQzdMW64XKj6OeTn0qohSwea19ywE9zSFi%2BgkJsRfpYKyv2WnzmS8fhr7F%2FSSRj2venwvS3TMf3WNIU67iCO9LgSxJBHSixhLg%3D%3D\"}]}\r\ncf-ray: a384f36eda0ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14884,"size_decoded":15677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09848b9086ae235109cd7a9f9d4afb9e","sha1":"fa0685a7eca11590d8a4dd011135a1ddd08e37ab","sha256":"0e26f0a5bd31dddac71004a08e3f03ff53130fa2c2af58d361f4eead9ea93553","sha512":"85d7a49f419050b6f5161cfabec2762c8b894aaccb363f3f1f3ca2f749a719c9e550bcef3528c230027816b154642071d7166d4417edeb0a37a2dd364e5d493b","ssdeep":"384:sCCwTchKBYuw9eKFY5iWWultjHHZ9+Crbkn/kJ3Hpsx0H6ZpGU3l:sCzTcIw3wiqtjnZ9+Crgn/kJ3Hix0aHr","tlshash":"7962be98a33cc2bbd3815b7c84225d78ebb16455067c0f34edace3f10bba56f0a591a4","first_seen":"2026-07-03T10:53:35.725469Z","last_seen":"2026-09-09T08:51:55.378561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/11/gamcare-logo_result-1.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.629Z","timestamp":1788943884629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/gamcare-logo_result-1.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:52:14 GMT\r\netag: \"69087b4e-7ea\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNzpZv8MfT%2BAoM1%2FPTtzlC8PV1Pkef3gI8oGvy%2FtXdH4IX6MafS78VE2ub747%2BdMtlOIpvZdGZQtuhxI0dcLrxz92%2FwpWUki6HS2Ahy%2FVD%2FN%2BSwDnsIv1oaMCwOFlnKmt8NS%2Bw%3D%3D\"}]}\r\ncf-ray: a384f36efa1ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":2829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b176b276bcf2bac90af93097fc46ef8","sha1":"e86b9e247e65de20a2072a396fe82a9bf6995122","sha256":"abe35ce78bcae04416e60c6f868c8489d34261b6406824fb8687ab8976df0617","sha512":"5d7a739bd6849246eb31079e5f08e2d121bb4a29ac2bcfbf5e7f9a9ff2146dc5de7baba9108e3f94ee0c196e5a3cdf0a9b9d5053ebfb30debd7daecad8baad14","ssdeep":"","tlshash":"47410af7afdc4205662d351d97ba125045275485c464047c0b257b88bd145acecf2ecf","first_seen":"2026-07-08T12:06:19.260212Z","last_seen":"2026-09-09T08:51:55.379221Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.746Z","timestamp":1788943884746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4d38\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7Jh5R4FYohLQnmzGqgXxbLHhCTZ1TpTmktgqKsHrix8GHOBHtUa4kWeyrJ0M5O6UJSdu4Gjqs0S%2Fy77in04EUh6KaJBuhOXKm5tHwAFqChjIF5BWzQYNEjIkW4xeaIOi0VXnQ%3D%3D\"}]}\r\ncf-ray: a384f36faa5ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-09T18:07:54.913657Z","times_seen":232,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T08:51:22.997Z","timestamp":1788943882997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://rainbetaussie.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbetaussie.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbetaussie.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEpLHInUs0sIkI2RIr1zluEhd5CRLECwXnrccL24SRGskX%2Bvtay62WJ%2FMINcP%2FZNLodEPET9sFnm%2FRsVlLpLsymXiPtoG2kaB%2BKUTwl4TDkhD0zb%2F6jdhnpPdSXt4UZw0f6%2Fpg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a384f364e882dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260958,"size_decoded":46425,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5993)","md5":"fe0bf5262504d838b34b8fbc4cfba11e","sha1":"deb65d648ce420aaf29db4a6bfcea0a67349b100","sha256":"baa5d29c3c9a85bef18b4b9e46e2e0ef7e94ed827c9194b0dfdfb2bad90bbc3c","sha512":"8b54f669df62ebb2823531869f91514fcc4fd3f2b27522b44b17ed995bbad06388cbbd61b8c7ded307a966cf356ade0e930bc773f152f2a2e6437de867d192d4","ssdeep":"1536:8d8X48jypywrozQWJlxpOelsy9UxuCS1utsMyV+TmB95wqDDGUZcyDkl+ttd:rZOzozQSxpMICSK9TmBFDDGU2yQl+x","tlshash":"9e44b65f17a7246a359bb17cdfa6220c622d9007ca0acdb579ddc14ccfc9a9189b3b4c","first_seen":"2026-09-09T08:51:55.379853Z","last_seen":"2026-09-09T08:51:55.379853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1477,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":1353,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/11/niegram-e1721151658143_result-1.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.630Z","timestamp":1788943884630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/niegram-e1721151658143_result-1.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Nov 2025 09:50:36 GMT\r\netag: \"69087aec-9b0\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=737IYvCBZtDaOL5L5uEin6Uaz1PI0HwFKPBO2rJbpvUBgIEZTMbxJJij9GInkzx5cuNfWN447qx8cm7G6bONC%2Fn2JaWjBxCQAXg0CUmxBb%2FUlDLR%2BgqduZZETz8jNbPIJ1Yb%2Bw%3D%3D\"}]}\r\ncf-ray: a384f36efa1edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2480,"size_decoded":3273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"777c17ad4c4fbf2e756ab772118ac32b","sha1":"64df3aa3861e07416d837c5130c9e856dab650c7","sha256":"fc371a01ba55b6ec0f49a8fcce8e3d0e994073cb887d4bdf1ee2b389cf758aea","sha512":"8ee89f76fd679356ec65b4049759c8405b072e3270d704f679cbb8d4a3f5d3c4d6f068a6f1cd611c66ba0b92ac3e4777b8bd3a7b2cb82149dfcd505ae3b0beef","ssdeep":"","tlshash":"fd513d19b936d795b36b78e2015f3e5ccb11750679095aa50c0f97e1b4701c4b2ee20d","first_seen":"2026-07-08T12:06:19.267777Z","last_seen":"2026-09-09T08:51:55.380734Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/bg.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.706Z","timestamp":1788943884706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bg.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 14:00:16 GMT\r\netag: \"68ff7af0-e88\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWbjFF8fXZIQF3PrYrtWj7OkYdInNvS0DWj9wmpp9DDNxuoHR4ozM2tBFoJPzkKA%2B6Uo45BmJqLra%2F8x1HKhRPYkdK5k7AdZEB56u%2Fnwp8ifoIHkDTMdy%2BGAZjempLwYcU%2FKBg%3D%3D\"}]}\r\ncf-ray: a384f36f6a50dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3720,"size_decoded":4515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b95a47e97bb88b206eee8304f541f61b","sha1":"ef29daa0ed039135e3f31ae732bba035aaf1840d","sha256":"fae57d8d5f0589cbcde5288e71221df468d0e6b73b394bcbac8d26eddcb8fd37","sha512":"77725116a55962b3a00b19e66c5f94c80613d18037c02e684d4a358ea59fdca6f76be2f7fe5b071378dad62fb98d2814c30560f6410fe4b0619af34e502c713e","ssdeep":"","tlshash":"15713f48c3235aecd3269b7469b01aaef5f53d885d3800265bcd63fe8683321503dcba","first_seen":"2026-07-08T11:54:42.227502Z","last_seen":"2026-09-09T08:51:55.381366Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.872Z","timestamp":1788943884872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-32x32.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 16:35:41 GMT\r\netag: \"6904e55d-15c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyLsGYR1fqnCdmjXeD0vf%2BZQYSH%2F9TISx4WteurxehQojDkqFqXGOhD2tmtTQY7SVOC7iMzXKMJ1sZFBa5ALADnHT3kQgcSYKGB%2BnH9p2ccpwnWrOG%2Bgdd5Ilo56wyjxHwXYyQ%3D%3D\"}]}\r\ncf-ray: a384f3707a7ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":1143,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d859220647bab57706164305d5a4e81d","sha1":"29f8228557a88c22a8a3771fd421cbab406fac45","sha256":"c14e1535f2c2feb238ca304c80e9dd94a75816622ee6c6672a2199b920a44df4","sha512":"077d9a49bbc423204054c0955ed0355d7f7e782aae666f91d1fd429fb4507b9e50d1225bf7e369a6005eadd1ac7a6caeaa44320f3b5f97aed0e20728c7a2f7ee","ssdeep":"","tlshash":"22e0c0ce33118d59fde29c2a1b163f22457406dace951381e4f011f510e67121035e08","first_seen":"2025-11-01T17:37:40.368317Z","last_seen":"2026-09-09T08:51:55.381923Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.598Z","timestamp":1788943884598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 30 Aug 2025 09:12:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c084-348c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7uqlCkVMMlmcAVqtnHq4q4W5omLzSo3GeJRkzF8gFgYAk7NzbGCf%2F%2B63%2BRTVSvZN9Ig91o9bzQ%2B7v3M0wqojeEUPuMQtGTLgmHjZN8mJPQV7z%2Bk2arjtp4WXApquy8zQShadQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a384f36eb9fddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13452,"size_decoded":5096,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-11T12:48:20.692577Z","times_seen":243301,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/stone-vegas-casino-logo-12.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.621Z","timestamp":1788943884621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/stone-vegas-casino-logo-12.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 07:25:26 GMT\r\netag: \"691c1f66-1c66\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eizoEwcPs3Da2HTpKZHld6u%2FvTgMGvyENZuMkxjI57EicZ7AGMMzlITD5KI2I7SRQszVuzd%2B3xUqPYKZLpVjEc14%2FLmfUrQbz%2FJb8ZyFraDQxNEkT6YmL81iy0Eml8mBikiTzA%3D%3D\"}]}\r\ncf-ray: a384f36eea10dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7270,"size_decoded":8064,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0c8d51b2e1500f278ba13c8c8c6392f","sha1":"4a380061af65a5471bdc309414d4b891b88556b4","sha256":"ad69030b9d6cee5826b5027921abb64f5acd3f1ed125d66c9cbb8ef7b1d90f7e","sha512":"924a6d5ae40a2a9142411f4d63919d3d260773622ea5071db24df9a833eb6f72af38ba04b1d653c19be3f6709b5d2b2e7be88e94a1efd99d045e271f57b3b48f","ssdeep":"192:ywTyaWLM6QT0vMyZ5GDo2lAzS2WX5FBC:ywT3WHEqUsjWN","tlshash":"d4e19d9f8be0f43be40070321610e78a332a397473627fe56180d39eae135b266a7424","first_seen":"2025-11-13T03:52:08.16274Z","last_seen":"2026-09-09T08:51:55.383126Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.709Z","timestamp":1788943884709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxoPpAJVYULlXxvtpCggDfhP7jRBdR9%2BGYsZJzpVP9I73kXNm%2BJhbRIYy%2BELzKksu2u6cVdHOF68zOTvE3P%2BThM6iGZ%2FSYfiywtdyTaEcC3l8kYHqwF2KesO0TZRhFAgNUFxCQ%3D%3D\"}]}\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\npriority: u=4,i\r\nage: 237\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a50fb64-11a\"\r\ncf-ray: a384f36f7a55dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":986,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-09-09T08:51:55.38362Z","times_seen":145,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.748Z","timestamp":1788943884748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4c08\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8H%2FtTz4xWFoTiF%2B9EBVv452wm%2B0VKDrJzsVBie8YBq6948x%2BWhVbZfjYup6lg8rEEodhK8DiImFzEjys5qvtvsuKD80R67qLJ9boEeIwrxZAcFncEe3yLyZrmhFThetlvgzXg%3D%3D\"}]}\r\ncf-ray: a384f36faa60dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19464,"size_decoded":20262,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-09-09T18:07:54.912372Z","times_seen":207,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.870Z","timestamp":1788943884870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-0x0-1-192x192.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 31 Oct 2025 16:35:41 GMT\r\netag: \"6904e55d-79a\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 236\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjuqOpihWx16IUlT0yPA%2BxSsLrGIijRGbdfX7xmnYlLmYdM2IQ4iGZt9Y4MwofQJC8L8LFWdyEEO0T9x8O8hMqpzLJ9GkiJfoG3uzWAFeLcHyeIjEpr%2F%2BaPg%2BH%2FYDranThV0Fg%3D%3D\"}]}\r\ncf-ray: a384f3707a7cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1946,"size_decoded":2744,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"307f3c369737347d7e5c88b4d78b7378","sha1":"66d787d553361db25c8063a09685d4550bfaa434","sha256":"e20ee22fca3c6c38c816630dbde7b6b352fa1b185610ab83d23266dd0672f3c9","sha512":"086afc507b1c6a0aede13694968fe6af45e2f3704211503971fdb14dd13afa9a6a49c76ebcd5636f49cd1b1fa824512828b5cf1d05cf5ab8b926de6031c9899e","ssdeep":"","tlshash":"5f412c9a51b44c64614ef52a9c26ff726f990021187009506f60bfec4510fe8fd02a3b","first_seen":"2025-11-01T17:37:40.35477Z","last_seen":"2026-09-09T08:51:55.384519Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.924Z","timestamp":1788943884924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4bc4\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfR%2BZdnfQcPuhECDd9K5oSsMW8%2FDJcDwuE9XjuCKWHioRuoBGGrpJdwo%2FrF8eOe2E1d5WZuJIPVC0%2BKP0NehFy0zwhGpbTYxU2eoMdM7Kmtf2TA8Vzz3%2Fl4QkzKPDyM3LhC5wA%3D%3D\"}]}\r\ncf-ray: a384f370ca89dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20196,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-09-09T18:07:54.908814Z","times_seen":191,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.932Z","timestamp":1788943884932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nCookie: fc_popup_unique_name=GVgRBVsdH1gNGEoRDhcbBFQ=\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\netag: \"6a50fb64-4c7c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3uwmXckTRpLfFs0JgmxhOgL0DlQoNlGWtwJzSZEEmtMx1IsLoual%2BR1o7cL41i8xo5tslXsWtiFI3wJBXSs%2BiRe9SZwcgR7TrV4ZK9HoS6liuPvxselhspfLUtVZudFLo1onQ%3D%3D\"}]}\r\ncf-ray: a384f370da8bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20374,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-09-09T08:51:55.371059Z","times_seen":216,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.612Z","timestamp":1788943884612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 10 Jul 2026 14:02:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a50fb64-5fe\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nage: 237\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NM981ZDc4D8osWumeoa%2BLCxip0Wv%2F6IhpfBjV5SnbR%2Bjhw%2Fvaltt%2FPVHlT1sPdoGhQIOCAXuJ6cfUBE5u%2FbmU1LRefrGxDZRGJdLJ6pxpxDKRc2PSEAFrI2DAOpcbQu4htSBQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a384f36eda06dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1552,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-09-09T08:51:55.385088Z","times_seen":91,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetaussie.com/wp-content/uploads/2021/06/logo_text_black.webp","fqdn":"rainbetaussie.com","domain":"rainbetaussie.com","tld":"com"},"ip":{"addr":"172.67.137.101","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetaussie.com/","date":"2026-09-09T08:51:24.615Z","timestamp":1788943884615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetaussie.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:04:11 GMT","end":"Sun, 06 Dec 2026 15:03:01 GMT"},"fingerprint":{"sha1":"C1:69:2E:91:DD:32:0E:4F:50:69:FD:43:95:2D:4D:AB:5A:AD:EB:0F","sha256":"3B:81:BB:2C:40:D0:13:2B:4A:88:97:70:35:D4:E2:83:CE:20:4E:16:36:AF:0F:1B:59:A0:0F:A2:38:98:73:48"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/logo_text_black.webp HTTP/1.1\r\nHost: rainbetaussie.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetaussie.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 09 Sep 2026 08:51:24 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 06 Apr 2026 14:49:14 GMT\r\netag: \"69d3c7ea-d8c\"\r\nexpires: Fri, 09 Oct 2026 08:47:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nage: 237\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svfMRlTLOmlKN5%2BBIXNLN3EdZ80xOYokKDE630HxQ8uhXDBcvA1v2OGknJhfL1fVrPXeYc4Z1lBj%2Bc9T9OnUJnlBAl1uf2roUhjv0wIDJAL%2BnIymgibtrzBbNWx7QXPfVjv90Q%3D%3D\"}]}\r\ncf-ray: a384f36eda09dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3468\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3468,"size_decoded":4259,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52e4c50897d4be09365267e932aa2c7c","sha1":"ed79047b639b5b156fb42fae09fd52cb88c460cf","sha256":"8ce49a702c40bef4886c2d2b63a27cb1c7c50ad221dd51344b54ba43270882f6","sha512":"14af1b534f185b9cbd6578ab5371508a49646536f9c3875256733a5725e7027333bfddc32e972262d8f0ccd65485c66ae330883b506912048914e02bfeafb107","ssdeep":"","tlshash":"74614cc293643b2cea566936f9c01f40df19ad27d96f464fe393137514895d02f1404e","first_seen":"2026-07-03T10:53:35.721851Z","last_seen":"2026-09-09T08:51:55.385727Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"rainbetaussie.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}