{"report_id":"f537f5e2-de16-477d-bb29-cadccc914e9e","version":0,"status":"done","tags":[],"date":"2026-07-08T12:12:30Z","url":{"schema":"https","addr":"plinkorainbet.com","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"title":"Plinko Rainbet Canada - Play Crypto Plinko Online Safely","dom":{"size":225272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9139)","md5":"ec483237264a51dee8105ab7e14582ad","sha1":"d0a67ffab16cb0980ed174ebec7edf527dcc73ec","sha256":"ba6026127578e26af217abe265cdaab8df357c4ea76b293402002b1e37d7bccc","sha512":"8758bd2db29edf8537de877343ccfc3a2b35417b7013ceeb7d26eb2185d9eab34f0db8b1687f71e4ffdd70330fb4bb6a16bc4a373355183e7b12d37a29b1c416","ssdeep":"1536:tdOwycpPAyphqe1+ryAyaPouaBhvNmO8d:LvpPBmyaPFaF8d","tlshash":"d6242c6352d0707a252be365865a7e48f52de003ea0249e8f2dfd1985fcbed185b2f0d","dom_hash":"domhashc7d25019dc59e43d6a1cb25e1b34326d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"plinkorainbet.com","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":0,"asn":0,"as":"","country":"Australia","country_code":"AU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T12:12:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"plinkorainbet.com","ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-07-08T12:12:31.676529Z","last_seen":"2026-07-08T12:12:31.676529Z","alert_count":116,"request_count":58,"received_data":1001679,"sent_data":33488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":4,"received_data":253092,"sent_data":2252,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":4092,"sent_data":564,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-17T09:19:36.588429Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c35a67191117e90174938f756c5cd7dc","sha1":"d3fddce91e3b0f150d8c66587ab8130cfdcb438a","sha256":"f867304aa06b5218124f4cb784e97840c4f374c50292265931881b8254e973d7","sha512":"dcea992f859908c7f817992ddc6590b1a76d80e0c2c8fcacb6407aa668064a026741ef63dec19434bf41a64ed15e4ba9b3b7c24bda3f5b7b1f547e43c97eadec","ssdeep":"","tlshash":"15e0221263f0333100bf861422ca8a8e3ba04407be428f76696cc4061f84e94c8f48fe","size":367,"data":"","first_seen":"2026-06-07T17:05:58.289775Z","last_seen":"2026-07-12T22:10:25.158993Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fab604318d52f05fbef1f05ad1d0c8e","sha1":"bb593e4c2b6dbb36dc23f845aaa2b53c075c845e","sha256":"d7da744bf035707a9021cb99debfe6efae4dee34b7bb63f8cedfe46ac92e319b","sha512":"20a08acb1a84b8944755ac9343e59c3db1761d0c8dfffeab63975019b629fc2c78fb9807b03782d6a854e92dc8f1e3e571110932551513a52e8fcf051719d643","ssdeep":"","tlshash":"b341fd31f3bd243147bf24b529e5269e2a39508239878cb6cc9c9c0524c0e5d4875cfe","size":1923,"data":"","first_seen":"2026-07-08T12:12:35.490731Z","last_seen":"2026-07-08T12:12:35.490731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e55e39f8a57820321761ec142d87ced3","sha1":"e3f4dd82421c6958da6df6334f38df5c7ad70f3b","sha256":"bd2db27b77fe48b31e9cfbb3b3b6312bfcea2fe57af98414e8adbd166f051ead","sha512":"d9fe5e36d526448b35c5cd235ae8ad9a029eae5224a13630b335de749e5c7cd2488c86b85c8b99ab4fda85c7b5d219ec3c2e4e6666292512d773f62ea4de93b1","ssdeep":"","tlshash":"41411a68db7e7652432ea0b62bfd12de143e147d7a414eb77c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-24T14:56:46.317668Z","last_seen":"2026-07-08T12:12:35.492018Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e730ea04ac52c5fdfbc1eaefaa022445","sha1":"99c536a786e5b9f7851c4e8ed9bb71bdb2280dba","sha256":"bc4841378359a78bf265620519191787a48a2f17cee5e63a889c6b91f3eacae0","sha512":"768a42eb7acee1ab1bf166be7cd7c32840b73796369468aa6b599e9c4d632865007b635eb2477121801b4fab37503df2c159fd735d7b40a9408b56e9c66d49c7","ssdeep":"192:aB6Lw0IjmpjPDDV1CgAV3NWw8cPvX65IvzgZ2xUL9op5vQo6PeoP0vpRJC7lxBFi:1U0wcx1Cv8cPfoLEIo7w3Xt0","tlshash":"183230a55232283946f26a664d375b05fb3850a72542c16e3e1ff58c1ff089187a2ffd","size":11603,"data":"","first_seen":"2026-05-10T08:25:06.353761Z","last_seen":"2026-07-12T22:10:25.139649Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/search-Plinko-on-Rainbetgame-and-click-start.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.885Z","timestamp":1783512726885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/search-Plinko-on-Rainbetgame-and-click-start.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17624\r\nlast-modified: Thu, 25 Dec 2025 12:51:28 GMT\r\netag: \"694d3350-44d8\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17624,"size_decoded":17969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ac9d22c63665381c50ac85a0908bf83","sha1":"272280ad16acaaf88d77cc09faa28a8ec154de57","sha256":"f27a0fd5e1ffbf98e12b92b3f9b39549143245ab1cd263d7d5e90e8fcd1cf368","sha512":"61735381e1d748f9e1cdff12723d502f285f694695d192b63c58b4ea1f400bbb8a8ad145aa5cd1eac6742e930fb51f8daa006f667c263e5679ae9ddbbb621ce5","ssdeep":"384:GwTg5rbc30VblEpiSXpI51cUzYlLCu9tKiSvEsLde7yVLtAWZp13:/Tg5rbC0BlUiS5fCKqsyVLVH13","tlshash":"2482d0cd127652e8f92064f134a0e692f16db329e5e6ebf088c77a4189383e50dc57b6","first_seen":"2026-07-08T12:12:35.401056Z","last_seen":"2026-07-08T12:12:35.401056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/purple-medal-rainbet-185x300.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.918Z","timestamp":1783512726918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/purple-medal-rainbet-185x300.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8908\r\nlast-modified: Fri, 26 Dec 2025 07:28:24 GMT\r\netag: \"694e3918-22cc\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8908,"size_decoded":9252,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6679dfeb22e95f60165bc2b090efba99","sha1":"67b1270f5ab00f8cc705cdd3f18bd324bafab80d","sha256":"db3a3fe50a17f4423694e1c575d9853e1544091e55f1732a3267ad9ca746da4a","sha512":"03fa505837cd697ee7ba493312ba128c49bb2d434f7876a7bd556a4e3cbe263117d5aaf6c6da0b8c89ef969ce4f81c142f3c95d5ec72b75a70897ee693bace33","ssdeep":"192:EwTGKcZQtMsetFRkRCRomfLiYgwqUB+6lYxhZPBNjCSvrvYoecS9:EwTbcytQZkQKmZg9U4J7jCS8j9","tlshash":"d502bfb363b35370f61a2338905827a4303f28373668478e43855afa2dc20f16c952df","first_seen":"2026-07-08T12:12:35.403132Z","last_seen":"2026-07-08T12:12:35.403132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.082Z","timestamp":1783512727082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plinkorainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 16:40:54 GMT\r\nexpires: Mon, 05 Jul 2027 16:40:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243073\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-17T12:50:02.578298Z","times_seen":22666,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":19,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/images/rating/badge-1.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.855Z","timestamp":1783512726855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-1.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-17T09:19:36.565344Z","times_seen":43,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/choise-lines-plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.887Z","timestamp":1783512726887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/choise-lines-plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15646\r\nlast-modified: Thu, 25 Dec 2025 12:15:50 GMT\r\netag: \"694d2af6-3d1e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15646,"size_decoded":15991,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1b0b57c87737c3bb3710fa6aa604da5","sha1":"73c9b72f6a560dbc096a3f2636ea4c905bfdd300","sha256":"533649bbc8101c97533a0ccbdced94630ecb8d1a10855c3b43c33a00e79ecc7c","sha512":"3fa5ea3814a4cfdbee4ebfaf86c835400f01ad8ebc1974d4bad82dc4d882558f25f434b3612739ac6074fd49088fa4ecb52302e9131b70a6650b1820db1345a7","ssdeep":"384:ZwTAG9U7FasgoQCryIsglcK/0FPv3G40xvxwsgyitYvx:GTAAsxL+IsjK/0F3G4CvxwMn","tlshash":"6d62c060b60c9d30e61bddb02164bbf4f5b9f3a2969cb52c604a87359f8464e4c78c76","first_seen":"2026-07-08T12:12:35.406348Z","last_seen":"2026-07-08T12:12:35.406348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/choise-risk-lvl-plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.888Z","timestamp":1783512726888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/choise-risk-lvl-plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16228\r\nlast-modified: Thu, 25 Dec 2025 12:15:51 GMT\r\netag: \"694d2af7-3f64\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16228,"size_decoded":16573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af581e1b5ad03ccaa7226f5ce8922956","sha1":"062729409b12ce0b2f7c8bbe620631d8fcfe8912","sha256":"dd3f94dcec0de798a3fb6865e4f19dd13c4ca4e4ef3bcfcc957c5a17a8ea987a","sha512":"a2e508d9fbc5329f5067e399097eef511130962ba7f034e74acb8758e5ef2c1c4128c6cfda4733fe4e579e25031f836db2512a9014c660c1af44f2c9d66955d8","ssdeep":"192:dwT8of20BDLG3GpVjkc4Z3yHzAF/SyJtwHIbMcU7PjbGBrnaa/4f7eEKXuDivQsi:dwT8l0l1Vj2RCzVIAt7IM7tz2+l9o8eW","tlshash":"2e72cf34eb1c1259d7062cfc1bbba3c5ad71d8793714cb6a48800f97090b1c6beda97a","first_seen":"2026-07-08T12:12:35.408901Z","last_seen":"2026-07-08T12:12:35.408901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/Winning-Potential-Rainbet-Plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.915Z","timestamp":1783512726915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Winning-Potential-Rainbet-Plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14254\r\nlast-modified: Thu, 25 Dec 2025 16:32:12 GMT\r\netag: \"694d670c-37ae\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14254,"size_decoded":14599,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42d4cc21e47f4856e3a24a2f2d29909d","sha1":"65d9ce2f6216ae0a23dd484d5a1a97eb7f1b55b4","sha256":"064e232c8d0effd8342b0165a1bc51c40d642b050edaf0faee23b7c245f7f60d","sha512":"0353db80fc0af01cac5fbd1365a5ce857760d1b2342659685ddc6dc3962846330b261c646242fe9a5ab1208dde3ea64ec3babc2ca2e6a1b262d878bc216dd8a7","ssdeep":"384:ZwTyEH0fP3EW8Laq2m/NLc6y02Oo8bKdhZPrerD0KJrx:GTyEHKEDaq5NpJ2ONbeDeP08l","tlshash":"a852d00e2b2035d5c3e5ce77f2608fb561fb5c9bc0aa366a5f410f560aa2dc129dc791","first_seen":"2026-07-08T12:12:35.411675Z","last_seen":"2026-07-08T12:12:35.411675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.087Z","timestamp":1783512727087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plinkorainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 16:40:54 GMT\r\nexpires: Mon, 05 Jul 2027 16:40:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243073\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-17T12:50:02.578298Z","times_seen":22666,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":30,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/main-page-click-registration-Rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.891Z","timestamp":1783512726891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/main-page-click-registration-Rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19080\r\nlast-modified: Thu, 25 Dec 2025 13:09:53 GMT\r\netag: \"694d37a1-4a88\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19080,"size_decoded":19425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"464576774e2b501288aad42a1a24efb4","sha1":"5dd790058d7d5d9e13ca8510f7a7cb9f1b49ab75","sha256":"91499b2d4cfe9cdd13ef238bfb0b0488d896d715fa6ae0ff02a5793676f1cdf5","sha512":"06768e360b5c728f1b5f385de40cb35b5e37342f5c1322e669dd42b6d474f3fe98eae03ac4d305b508a284006e48054a27785b5078954311133b6015fec412eb","ssdeep":"384:8wTcdOVZF+rhfk0PHuG+/mHvo0VoZsYZGVPQYpLbZljFuXCXvGmbd:JTHVZFAhf1vNMmHA0VGAQMFuXqGmbd","tlshash":"1282e13a6bf92cd8e1742f3424ff6f51e6d073080cb0021d9494e6254e2872776bb4ba","first_seen":"2026-07-08T12:12:35.416913Z","last_seen":"2026-07-08T12:12:35.416913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/deposite-crypto-methods-on-Rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.893Z","timestamp":1783512726893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/deposite-crypto-methods-on-Rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6678\r\nlast-modified: Thu, 25 Dec 2025 13:09:54 GMT\r\netag: \"694d37a2-1a16\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6678,"size_decoded":7022,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"011d01bfb5bb41fb6025489a39b68952","sha1":"dd5ff14617d06af2a7d595fc131c657e5c184385","sha256":"a70347306f4dce06cc35687242d6221908a3bab1bd326bad37db02ffbeb33847","sha512":"a0a6eb71c2d255e24e5f2ad6d5e22a3e7e2f03b2a684c3ed548e6c9d25cade76eab2f2e79034d79f512c9d37a42a704d63a68158770960733a04b5d2e2471506","ssdeep":"192:qwTCZYGOua6EBk0aKHQM5dZd7mcydRVv5h0h+7CBAlM:qwTCZYLzHaN0dj7vuf0OcoM","tlshash":"83d19ed07fb4457dc01aa47cb189abd3f7b89b20ba7d686f88c15da813037d43081197","first_seen":"2026-07-08T12:12:35.419491Z","last_seen":"2026-07-08T12:12:35.419491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/11/cropped-RainBet-logo-Small-192x192.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.209Z","timestamp":1783512727209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-RainBet-logo-Small-192x192.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en; iu_popup_unique_name=G1URBVIXGVgRBVsdHxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2760\r\nlast-modified: Mon, 24 Nov 2025 14:43:36 GMT\r\netag: \"69246f18-ac8\"\r\nexpires: Fri, 07 Aug 2026 12:12:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2760,"size_decoded":3103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8e8d46ad6f60bc821385518b853d974","sha1":"eef9dd1fd0e213bc590cd3912d52d022020c541f","sha256":"11a14ba248ce6894aa544884b0b0e384600bec9fdb2c8ad8c4d32f95aaf904cf","sha512":"a636bdb49905de6bd5039e91c6f7f19f336e4bd9f054ec6167352fb41b76b999781b4da3410bfe9c8589b42ea2f435b4b6898d59414c8e183fc7654ce0df2317","ssdeep":"","tlshash":"7751e8952cbb22b3989bf7460cef3886c13329d9c9c145c2adda8d775d00442ab7b1ca","first_seen":"2026-07-08T12:12:35.422429Z","last_seen":"2026-07-08T12:12:35.422429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.824Z","timestamp":1783512726824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,400;9..40,500;9..40,600;9..40,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Jul 2026 12:12:06 GMT\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3408,"size_decoded":1120,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ea4ef1b58461cc811a47cc9fdcab61a1","sha1":"155779c0daf2ef7c7f64ec41edad480c09da941b","sha256":"40522150a1e943dad5c88314d6a9c235b312d2d6beb893e8cb6b46a6825ed3b2","sha512":"26cc96e07b4c262d39d35758075140d1becd6980401a612d83b34339f35dab7bb2635c51e914a7d07c7f82971ae109966b569263c029e7a275d1f96a6e4d5e23","ssdeep":"","tlshash":"8b61ac81046bb114db572cc122cd7e32ef1f619164549874aafe2888fcaad6e5361b4d","first_seen":"2025-09-16T12:22:54.356027Z","last_seen":"2026-07-17T10:44:13.215693Z","times_seen":70,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/cashback-rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.898Z","timestamp":1783512726898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/cashback-rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1360\r\nlast-modified: Thu, 25 Dec 2025 14:23:41 GMT\r\netag: \"694d48ed-550\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1360,"size_decoded":1703,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0af17f6504cc764a9962a8204cdd6c77","sha1":"347990e21344b415add1206d5f77c387c253ddae","sha256":"126e55206c13ba73b9e7ed2bee68e58e166c8d1497a3253671d3b0386dae2595","sha512":"0421f05311ddcdcc1b2ed4a94367ff11d93f245bd28226b295b3528f2c10e2ab3b411b36dee3e034540cd488c7f0c0ebabd9c3a191b2b0c69cb330c083608c17","ssdeep":"","tlshash":"4321b7771328333cfa7627b0e0414382aa3d7f21b76e41e9c08543a6094d6de19ad2aa","first_seen":"2026-07-08T12:12:35.427487Z","last_seen":"2026-07-08T12:12:35.427487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/rank-Progress-Rainbet-Plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.902Z","timestamp":1783512726902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/rank-Progress-Rainbet-Plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12352\r\nlast-modified: Thu, 25 Dec 2025 15:20:49 GMT\r\netag: \"694d5651-3040\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12352,"size_decoded":12697,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db0ad42d2d0402d048225c2aca016b3e","sha1":"9def991e620e17d5064efd98fe944d012442022a","sha256":"182445900e182e0752b94fa69a999355dd912d0fdfc0e7f1c94b3835beeb1d78","sha512":"d79074533cd23c7ef148979590e20f5ca73f0a5b84fbecf4ffb1c6edc3adeff7554f11221e8b3d2bf96675f4d2d68b359dffddd1c0fbc56036189edaf1f35bb1","ssdeep":"384:+wTUcM+g8ntkx1W6OCueKjfTSGJv9u3+kBjIMoi4:HTjnGexXPSGJv43NloB","tlshash":"8942af0b316f5307f2635af48a7e2b025395a52597f1336702e242284d8c5c2f5bdf8d","first_seen":"2026-07-08T12:12:35.429113Z","last_seen":"2026-07-08T12:12:35.429113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/matic-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.912Z","timestamp":1783512726912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/matic-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:51:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5d9e-705\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":1149,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0bee722527e9cb76b17e303b35579e5","sha1":"41d8ef7f10145e23782d8a334ac6239998dc8443","sha256":"7a546aa3057860b32bd484cd56a8dc61e48738408260bbedab33594c7d23f8b6","sha512":"026c1939bf1fed459dad219bf9c98c22fd1bad351f6b5c06e8359620d2c8d0565ce86bcf7f0d3f992f853a52adb6a83ddc7e0885b2ea24f07d62f78306c9bc8d","ssdeep":"","tlshash":"9f31eee972e4f1ddc45867b4c73ab02036aa30fcbe46fd588be49d49a80a67dc1880c0","first_seen":"2026-07-08T12:12:35.430753Z","last_seen":"2026-07-08T12:12:35.430753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/11/cropped-RainBet-logo-Small-32x32.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.210Z","timestamp":1783512727210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-RainBet-logo-Small-32x32.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en; iu_popup_unique_name=G1URBVIXGVgRBVsdHxcbBFQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1578\r\nlast-modified: Mon, 24 Nov 2025 14:43:36 GMT\r\netag: \"69246f18-62a\"\r\nexpires: Fri, 07 Aug 2026 12:12:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1578,"size_decoded":1921,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1eecd8b8ce973f9581841d459d42ea3d","sha1":"37ef23af59b717a05439ba95710124c2c75f34e7","sha256":"533b4adbd1abf6a723506c0ada707733ffde5d64d582c15fd8bf28af8af38d5c","sha512":"be8791db8c19f1a539300a5e4c41d48f260cf7c3fd6a22934e59d426c9176d1b63c3d469876ca5904da4e92ffa77c03600f3342ed9116e9bda36a1538ad290de","ssdeep":"","tlshash":"dc314f65aca213e35a9e768a0dfe3d54c6330990ccc09296b8e7cc678d105815ffb28b","first_seen":"2026-07-08T12:12:35.432168Z","last_seen":"2026-07-08T12:12:35.432168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/1xbet-2.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.876Z","timestamp":1783512726876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/1xbet-2.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21310\r\nlast-modified: Tue, 13 Jan 2026 07:26:56 GMT\r\netag: \"6965f3c0-533e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21310,"size_decoded":21655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77eec379564edb6287104dfda9645466","sha1":"341adf4051f285ba548cdea4569a7547098ea883","sha256":"a1342708a6d7976d0ae545897dcfeef18e26cb9792b098ac8a72999d78416d17","sha512":"4aab9dc2c8f5fa606939a1588a9d5e9c04754b8ebdc7d6934f05ee3efc0a2c0cf8c2659e3b103f359388e94d1efe75c0aaac1477f2739d2d47ff2af666afd562","ssdeep":"384:XwTxfReHXGpEudnM4xN54obhB4lguiukpxHIPIso8sbCSkGCfIvIcAQ8N:ATxfEHXOJxfxuvk7TzbCvG5rAQ8","tlshash":"24a2bf4acea20493d357cef92ac497824b79926ac429e03549b1460163efcd49e6cfcd","first_seen":"2026-05-10T08:25:06.379303Z","last_seen":"2026-07-17T09:19:36.572989Z","times_seen":7,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/main-page-and-click-login-rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.882Z","timestamp":1783512726882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/main-page-and-click-login-rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19068\r\nlast-modified: Thu, 25 Dec 2025 12:51:27 GMT\r\netag: \"694d334f-4a7c\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19068,"size_decoded":19413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8813c1b25b4093494c1d857bfce1095b","sha1":"d2ec8f147493df7bc9618abf9bf1c8209ae8cbd3","sha256":"00e383acd6ea13559b592905c0ee9bb7c92aa3392feeb0a34173a6c09cae6cc0","sha512":"20c9db303a88fbf6a74e5571d44d5fa07f9bace0566bf802f43f66be3a22f6fdffa5d64f313a86ceacd487fb04af7a6d3024f5a33fedb68e589c395b081c232d","ssdeep":"384:QwTchJPqzwT+DiiWa3qUzJ1yTj5HoFnf9KQlzAYHuuK:FTcPize+OiWEzJQTjMfllcSuuK","tlshash":"5982d0f4b20a1e14dd35f43420172e9a5550daa3fc01a0eef2999c262e2ef9b564e683","first_seen":"2026-07-08T12:12:35.43433Z","last_seen":"2026-07-08T12:12:35.43433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/bonus-rainbet-gift.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.899Z","timestamp":1783512726899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bonus-rainbet-gift.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1322\r\nlast-modified: Thu, 25 Dec 2025 14:23:41 GMT\r\netag: \"694d48ed-52a\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1322,"size_decoded":1665,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"810a3deb3aa45180ea3ed14552b3d473","sha1":"4914e6bb521117347906356b9df6f8c321921ffd","sha256":"41447bc3b570f1d73dec4ec8c4749d6ab95b21e5b5a30ba5ed31820706c60db2","sha512":"089c6032ae286d5a6263db6708b70a1aa45894ca42221184a2e31bb90acbf478f35535e576b0995a75a4a78ae8a5aa1751c500c3be414855d485a1407d2b87db","ssdeep":"","tlshash":"6521caf617781f65f192767c10910f81a37e1d70ca9d025f82c481151b264c3decf64e","first_seen":"2026-07-08T12:12:35.436074Z","last_seen":"2026-07-08T12:12:35.436074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/pnut-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.907Z","timestamp":1783512726907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/pnut-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:52:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5da1-4256\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16982,"size_decoded":13163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be2104310bbf62273b417b9d33601b10","sha1":"bfc21239453d4216f2fd2c2b6c95bcf6b6880591","sha256":"d10456ce8a625306827257d891cd90f625794192dbd70e40e07ef0a64729299f","sha512":"7449fa57e448f88bbdf8b15eb5ac11e6bb8adddd470e15fb0775d36ce30bc16157c0b0ebab95a56455cdefdeb32a007c2bba52ad645b0e060691e1edab89b601","ssdeep":"384:9H6qIn9TFiax7G64tYqdY9xJvGYMSV2U+d+yKL5pCBaN:s98O7foHdcjvyxGFN","tlshash":"4872f07ceebd834840078d38864d63601219a97531e7ee88d891ab5a5ccffec72db1c1","first_seen":"2026-07-08T12:12:35.43739Z","last_seen":"2026-07-08T12:12:35.43739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/white-medal-rainbet-182x300.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.916Z","timestamp":1783512726916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/white-medal-rainbet-182x300.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7072\r\nlast-modified: Fri, 26 Dec 2025 07:28:23 GMT\r\netag: \"694e3917-1ba0\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7072,"size_decoded":7416,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f53b720c9439d662f3adc884d6d59b3","sha1":"f0110ab31bb860873ac0d18cec68564424e86afe","sha256":"114dcbfab94121b3346d1b18a3c568dc1b87a1dd11b956ec024d6e82c536dd60","sha512":"27b3f9ae50a46a122e1b0a8ab774c5277128f75cd1befd2c523d79901d49e9c377eefcb3df3498417b15ed415e4d1758c07d713a2b72b5db0be1fa981d89616a","ssdeep":"192:ewT0BgB71rYlsWP3zbLm3ZwsOAe+ccc2kqUt+5V:ewTagleXP3zbiJwsOY/RV","tlshash":"7ee18e3e9bbb2b76f63c9772e818d3614263168b43601653e6094b2d460e68d32bc25d","first_seen":"2026-07-08T12:12:35.438587Z","last_seen":"2026-07-08T12:12:35.438587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ca.png","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.854Z","timestamp":1783512726854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ca.png HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 340\r\nlast-modified: Wed, 22 Apr 2026 08:54:41 GMT\r\netag: \"69e88cd1-154\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":681,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"6618f57e99509993a9658ee2f4cf6ff9","sha1":"68d4f81fc4a7ef1c4229d48f64fac958eafa4fe2","sha256":"d6c22a9a64e98907ebfc032b62dd12b8b5fa61182ef36c7f1b59ea05b35a0c66","sha512":"c8a521f9b8e0a02a978adfd4035ec9efd9218921098dfe897175008590751c2ca8dcb3b8c772880fee56ba38d42b87fe5c35ea81db4b192c0731edc2bf5adef1","ssdeep":"","tlshash":"f5e0c0d057c5fe5c41ca25252e9d9501ed21d116b95c6507904aeca2c7211131480be5","first_seen":"2024-09-19T22:42:23.495236Z","last_seen":"2026-07-11T22:03:46.917241Z","times_seen":16,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/images/rating/badge-4.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.867Z","timestamp":1783512726867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-4.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1094,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da49c60a038c21ad060f0b53ff910426","sha1":"174fdc729062994bb104f00c9c6072a0cf4faccc","sha256":"addd89150ca262be3c0335ee993d4559fb1d5ce30ac6c25c6c3bdccb7c49e9c5","sha512":"38a85e0737612e812633a5b3f7f66a8bd9609ff6d24011b479ad55027f61373b54cecb7750d75d45fd2765931456920866eeafde617bc6e6d018cdc206d072ab","ssdeep":"","tlshash":"cd31957ee10d2c2af12885bcae52d478047abdfb4cc2000044e1b9abd0a24c60cebe5b","first_seen":"2025-06-05T18:04:56.85468Z","last_seen":"2026-07-17T09:19:29.534296Z","times_seen":27,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/Logo-black-2-scaled-1-1-1.png","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.869Z","timestamp":1783512726869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Logo-black-2-scaled-1-1-1.png HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 35674\r\nlast-modified: Wed, 10 Jun 2026 14:47:18 GMT\r\netag: \"6a2978f6-8b5a\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35674,"size_decoded":36018,"mime_type":"image/png","magic":"PNG image data, 240 x 112, 8-bit/color RGBA, non-interlaced","md5":"e3e7d3767b0ec1a8dc053f8a6d64b7c3","sha1":"f56d4cfe52e6207ea2ba7f4727e6f6b78f50042b","sha256":"1e9e342045c462ea2050b85f8489f560c2fc245da8136cae9e98827940748553","sha512":"b080ad48f4b33103f3f1c41a12e0e578f2951cada4ee3418922ffd983499cb37686ef31319eb01ab5dc5d3ba0d1512e627204b7947360b1d1e0b967859f7421d","ssdeep":"768:nLPNALQ1XHGFOHLLT6eDDHhV8x0oLu5agG3oAz9vVq+:nd1XH80LLu6HTN+u5ag89zxVJ","tlshash":"cbf2f1e25e5952b49d18e328cf00d16a573f196e80ff3a9f88f84f24132ee5ee40465a","first_seen":"2026-06-22T07:10:50.454495Z","last_seen":"2026-07-17T09:19:36.557534Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/System-Rewards-on-Rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.901Z","timestamp":1783512726901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/System-Rewards-on-Rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11390\r\nlast-modified: Thu, 25 Dec 2025 15:10:51 GMT\r\netag: \"694d53fb-2c7e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11390,"size_decoded":11735,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04cad37eb8050463540698c128c2de05","sha1":"5fc846e5a4f873403667673ca7d0ec329f888cd2","sha256":"8a6d8e46913c6c18ee07002bfc5e48d4b939099fffa4ed32b653335610ac4d3d","sha512":"607f56260b62132a1859b63d50f41c945d9545faa04dfa97f7c5152aaaf6f1aa24eb4b5c15c2ca9779e23d7fa297884e71b80656a3658dbff69964d0fd3d9895","ssdeep":"192:mwTB0+mJjR40looOJExAlP4y0ociu27glYrpW7v3Rg8HZaDIGcmvkIUFoMnEZ3n:mwTBzmJjm0lsNlAwcaEYw7vRgeZq8Fo5","tlshash":"0332b01eb7dd17ece381b73958499f2b8bbc8c7d089541ad850cce34a5611539a3089d","first_seen":"2026-07-08T12:12:35.443134Z","last_seen":"2026-07-08T12:12:35.443134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/doge-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.908Z","timestamp":1783512726908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/doge-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 810\r\nlast-modified: Thu, 25 Dec 2025 15:52:00 GMT\r\netag: \"694d5da0-32a\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":810,"size_decoded":1155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f8f68f08e56232c1c1a6d66153225d4","sha1":"be2f24d71537fa1cc01c808a9f7135cdac85e346","sha256":"3f248864a76a3db7fcdbef11d5941112e4d26dc477bbc8fdc8fad30e02a71f24","sha512":"91633e25767a7f505582e0e4eb6f80b2c5dfc160dfc96657313bbd1a6c020c5d9356f98f5a58993c00319b91df8914fbff417d9fc8aed449b89889f7bce5eb81","ssdeep":"","tlshash":"59012061321cb16f6508aba90e2c3072746ab8e45728d19577842e3abd2f49fdd914c4","first_seen":"2026-04-29T08:38:26.946402Z","last_seen":"2026-07-17T10:04:37.544204Z","times_seen":24,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/red-medal-rainbet-183x300.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.917Z","timestamp":1783512726917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/red-medal-rainbet-183x300.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8386\r\nlast-modified: Fri, 26 Dec 2025 07:28:24 GMT\r\netag: \"694e3918-20c2\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8386,"size_decoded":8730,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"446fd62534771f96bc91a909e1bf9bd4","sha1":"a2e13388011d3843f08a5b0b3ac226fb27b3e3b7","sha256":"e9cbe3a64faab2b16b743dec2ac957af48d8b17aadb12228a50e50ad50f561b8","sha512":"321d2bce68952687b30c67b5d3489e8a1547e14764484e427a84c4ad7dc343f57e2d67ca94cfb6d282cfe07c35e1e1df1e4e962c33ad43afb023787c21e3ac4f","ssdeep":"192:2wTGaeNorLBQW62xoD/O7w83/ieVh9LFL:2wTrrLBQX2KWjvFL","tlshash":"5d02bf390b91a7d6feb797f19879e71fd9177b1904c0c2af201be32329282531964c85","first_seen":"2026-07-08T12:12:35.445584Z","last_seen":"2026-07-08T12:12:35.445584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/build/main.css?ver=6.11.0","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.827Z","timestamp":1783512726827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/build/main.css?ver=6.11.0 HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-199d4\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104916,"size_decoded":18416,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"ab4bd79e6afb398ff171b97946e32d38","sha1":"11e4177a619d45364e96033799e8a25b27746926","sha256":"272276540ccf0459ed8436730087e144584f01cbb498ec2bc2af42345ecbdfa0","sha512":"681f37f117c57faccccfddc3cd39e456434ed8613332f0d1adc3b6129b4f9a4af95788ad154bd39db085230f63090889afb94f9cfe0826834b5ed3712d9164ad","ssdeep":"1536:+1WI4eMHa8aqEB+ENWcuYtcJ3SYiLuVENM6HN26KG3Epi5fG:qgCtm3SYiLoENM6HN26KK5+","tlshash":"60a382c7f1a03518d467c61de0d0babe296f4641e3269eebf4276bb487c92c70952e0d","first_seen":"2026-01-04T17:17:18.931393Z","last_seen":"2026-07-12T22:10:25.150146Z","times_seen":9,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/login-rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.884Z","timestamp":1783512726884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/login-rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5242\r\nlast-modified: Thu, 25 Dec 2025 12:51:28 GMT\r\netag: \"694d3350-147a\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5242,"size_decoded":5586,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ac3a0b97b9ec856e31081093dcbf3c4","sha1":"ce0527b82538ab9b17d80b7f8c7a073a4dbffded","sha256":"47199bfc143a75b48a2d987da76546fb820ca8cc2edf0062f514bce496396d25","sha512":"84c110a38c2cabad80fc92d9027b104e4a6b68b8c29400767d0905fb6e2810a49d5723156442a2315c9f6dfa83f07970fbf694dcf06cdf530fe730204201a828","ssdeep":"96:QgElbw+iXT+y0WQ/WMDIX72VLJF/63HjoK202X8ZwYTnx1/x:QFwTb09WyO70n/c3txfFx","tlshash":"abb16d2f0713834df9a735b882b4261b55a5bf93c4050bd1be08cd5bdc42de8e81a576","first_seen":"2026-07-08T12:12:35.448635Z","last_seen":"2026-07-08T12:12:35.448635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/ton-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.913Z","timestamp":1783512726913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/ton-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 860\r\nlast-modified: Thu, 25 Dec 2025 15:51:52 GMT\r\netag: \"694d5d98-35c\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":860,"size_decoded":1205,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce208136fd02768115d89e3bbdb58748","sha1":"82dfac178adacd980c363657804ff3faf75d3955","sha256":"3a0972cc7d6d7ccee2cb1580008d67f77662d5c621991448d980c77fb99e5123","sha512":"bfcf318631a014a58e725cc3eb818dc5ed3936784077458ccf8d5f271cd7c921f25bf42e9abd07598dd706e1b80a4db5132c8363f745ae09151447bf2ae454e3","ssdeep":"","tlshash":"0611c2fa8054d18fa30ce7740619703d166f54e06a7c860196e7492d39eb22fcf186c9","first_seen":"2026-07-08T12:12:35.450106Z","last_seen":"2026-07-17T10:04:37.541351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/rainbet-plinko-image.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.829Z","timestamp":1783512726829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/rainbet-plinko-image.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58476\r\nlast-modified: Mon, 12 Jan 2026 12:41:40 GMT\r\netag: \"6964ec04-e46c\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58476,"size_decoded":58821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f006223ba6b9564c58459e8898a3e3f4","sha1":"1e2e6dcae2fb1cfe6033f37f4c2151e2d356f738","sha256":"be3559fe0c3a61376ae1bef86952f7e578e2b295ff13bef333f2530bfef8548e","sha512":"b4c1043a26ef7af3ef6d560cd012989dab11ab2c01d5b892312b7b308d41db614e2c3f0cea0fe55121a5b82dc5ab6b9877664a8aaa2d5a5d36a072e385204bd0","ssdeep":"1536:CA+OQRQILXrQzT0c0pFHg70aw62x078hjNfeK:d+OiQkXczT0Rdg7864Rhhfh","tlshash":"64430143cb61c5c438dc9f437dc7456e49db3b72c792a8629c4a8c8a88929367fc2397","first_seen":"2026-07-08T12:12:35.451173Z","last_seen":"2026-07-08T12:12:35.451173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/Fat-Pirate-logo-12.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.856Z","timestamp":1783512726856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Fat-Pirate-logo-12.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10304\r\nlast-modified: Tue, 13 Jan 2026 07:16:30 GMT\r\netag: \"6965f14e-2840\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10304,"size_decoded":10649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3abf1b63b529dacbfbce77141d0713","sha1":"d66d7cd249f048046bc3eec8d7eb37c345e6754d","sha256":"de13940234c35f39dc1a5b48c9123b4869f8df868e4290b255fb6683d48f86ee","sha512":"9454bf9ceae50728a7ce9a828c47a7001815531a84397bde6a5731cf3cc357f378fce1599a511f85536c1e6705c38a139d10b89c79111f3e10150865514a9202","ssdeep":"192:wwT9cKAJo9hSHQf5H4Q+uKTWl9S7gFuIM5fiQdPncQ/nQG3Rq8:wwTTVoGYQkWbSy2piQdvcCQGQ","tlshash":"b322c0f022522da8f203fdbb64ea5340d6ba2427961d37519311fbbf1f079c4249e98a","first_seen":"2025-11-13T03:52:08.194529Z","last_seen":"2026-07-17T09:19:36.553583Z","times_seen":13,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/images/rating/badge-3.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.861Z","timestamp":1783512726861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-3.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-17T09:19:29.581557Z","times_seen":38,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/casea.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.871Z","timestamp":1783512726871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/casea.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4626\r\nlast-modified: Thu, 28 May 2026 08:55:18 GMT\r\netag: \"6a1802f6-1212\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4626,"size_decoded":4970,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99854d0a11a9071b5bd0c7b524240ec4","sha1":"cf6a6a259afdadcfe429374ad3a0d51e30c9262d","sha256":"333b32661434cb1ae472903224465055af7f02193ac37189529020f6204276d6","sha512":"017b2a49e749a74b0f8b61217bbffe0a88b766d7441410b96d0672b3b4826b3edb71c4e139206dc9d734b68fd1593e91b9030969ee93b0824ab027a7943110a1","ssdeep":"96:gElbw+iZT9OliRStMUZedQGjvTOIimJV8endhCPllse5DHFmEF:FwjGiRStlopj7OIisVNdAPbxF1","tlshash":"45918d712f4653bdc1180af80b69f18b83ddb03cc1ee466b54940023be614e6acd1ec7","first_seen":"2026-07-03T10:53:35.713042Z","last_seen":"2026-07-17T09:19:36.55851Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/Goldex-Casino-Logo.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.872Z","timestamp":1783512726872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Goldex-Casino-Logo.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10772\r\nlast-modified: Tue, 13 Jan 2026 07:26:55 GMT\r\netag: \"6965f3bf-2a14\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10772,"size_decoded":11117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b743c8b52d59a4896ed4a107b8464a5","sha1":"3c377e02290e1c945fe95683c6c48a30e9133af0","sha256":"3f6459adc35f31999790a201dbac78ccb7e39be24e50e3b903c0e1757ed6f995","sha512":"f8c1a06382479a20b21bafa7ac56d0a931e35372ec915d63195edabd161310b5de2b284ea2e879d256f63446033b10285caf2573948cdd17c481cae6444c986c","ssdeep":"192:QwTCf/R1TjpVlxSLqYUGYrcXrpbyC+oaAn/k1WL7bqVItIuPxwEmmc:QwTCnR1vpVqG5GYrcXrEhAM1XmtImwE4","tlshash":"2a22bff052338ab5ed435134a0e27bc4a0eff51c4fadcfa6874507032e66961969379e","first_seen":"2026-07-08T11:54:42.219485Z","last_seen":"2026-07-17T09:19:36.556302Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/lucky-hanter-1-1-7.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.880Z","timestamp":1783512726880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/lucky-hanter-1-1-7.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8428\r\nlast-modified: Tue, 13 Jan 2026 07:26:56 GMT\r\netag: \"6965f3c0-20ec\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8428,"size_decoded":8772,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"500497469fc4d9c8535196fbcc740b05","sha1":"354360f6ddbe55afc69f59e694de47d9ea88fcc1","sha256":"a1130edc12b108309f078b239cf9edaf461ab0dbe162323bfa31721218194d7a","sha512":"31b94c02fd24cec0c61e530db7036a52a4c3942847548355977e3f56923661d6003b8423574f19d698c621f6b9d7f4bc73af7b032ec53d5e6f76da963f1e5e6a","ssdeep":"192:NwTJLik8H9zUQ1K0oTatnYrJVphEzOph0ldaT:NwTJv8obQcJV4zldaT","tlshash":"0f02ae092bb60dafe490517d5e69cfd2958841a6c2de3f9903cecb26716ea441c4a273","first_seen":"2025-11-13T03:52:08.173283Z","last_seen":"2026-07-17T09:19:36.581337Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/start-playing-plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.889Z","timestamp":1783512726889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/start-playing-plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16232\r\nlast-modified: Thu, 25 Dec 2025 12:15:49 GMT\r\netag: \"694d2af5-3f68\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16232,"size_decoded":16577,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4f6b4e3b76d6f6cc5ae8c1b15f6bedc","sha1":"6b90c3371f054e0ad21029f68bcece38ae8c9655","sha256":"90547056e1c8d337ea332c26714da04943eceb021c5d55cd769524479225095b","sha512":"1e4b7e9af05a5c456b2c76f7ef9ddeb9b781c7766cd29acf4849de43051e3c87d6d2bb662bd593630666db486d75ff12d0f2f507eb8f918ea236081c47eca252","ssdeep":"384:5wTmi2HIiEqP+S1OnWQfFdmYgQ4bsMSK6SFZ8mBXAIN6WPQXE:mTqrQ3fFdmYhSkPiZ8egWoXE","tlshash":"dd72c0b2bf3d4049e8337abb81161371cdd8b9b7666b1a13b3c4e6432f483b03a65445","first_seen":"2026-07-08T12:12:35.456025Z","last_seen":"2026-07-08T12:12:35.456025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/check-your-win-plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.890Z","timestamp":1783512726890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/check-your-win-plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18204\r\nlast-modified: Thu, 25 Dec 2025 12:15:49 GMT\r\netag: \"694d2af5-471c\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18204,"size_decoded":18549,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4235f4e2f533f82263e0c2ac1e73db88","sha1":"44c7bcf612b732411705d9751b6d6b65afe3f211","sha256":"c881870405699861d44f1bb238d6e81da5304206184e88be170f7e3834c8caa7","sha512":"5042da833e3ad5ec14c0ad03851c68b5fc1c9f4f8ebe121a9d86af74694ca1c7de7a74eeaf3c7dd33ca0cbc9890d5f10969cf646acfd131d30e0771ecbf3d72c","ssdeep":"384:twT2gRZgmJBHzGeckfyD5X/RP84S2xSSJnZPQs5KK+T1uwFV/Jw:STpzJB3cGU/RoU7PQ/TYIle","tlshash":"8a82e1e4256c6345f8445bf793c23381ab5fa5dbb6ad33415c22edca1b81c5ca428bcd","first_seen":"2026-07-08T12:12:35.457286Z","last_seen":"2026-07-08T12:12:35.457286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T12:12:05.379Z","timestamp":1783512725379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: pll_language=en; expires=Thu, 08-Jul-2027 12:12:06 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nlink: \u003chttps://plinkorainbet.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://plinkorainbet.com/wp-json/wp/v2/pages/4702\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://plinkorainbet.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":230556,"size_decoded":39511,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9139), with CRLF, LF line terminators","md5":"78be67763c0fb7e712071430e1dd47bb","sha1":"0c466abf64d4d1ae90b77371a162274f67947289","sha256":"20733a736c93fac9add51cfd67764df080044c163156321e82c4676e0f564bc3","sha512":"194371748dbef107a29d2f59703198390dd66d17c83b63aa8cecba82514f1208d396f06c4559d47a39d5f5d56dba5dd4f0796a5a5ead07d58c95e17b4d5ac155","ssdeep":"1536:GN84ycpPAypFNo11dek1VxK7f+Bh9NmtQ:QvpPB3wVxKj+UQ","tlshash":"93341b2252c0707a263be3658a5a7b48f52d9043eb0249e8f2dfd1855fdbe9185b3f0d","first_seen":"2026-07-08T12:12:35.458799Z","last_seen":"2026-07-08T12:12:35.458799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":934,"timings":{"blocked":-1,"dns":72,"connect":19,"send":0,"wait":814,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/Welcome-bonus-Rainbet-for-new-players.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.900Z","timestamp":1783512726900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Welcome-bonus-Rainbet-for-new-players.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25928\r\nlast-modified: Thu, 25 Dec 2025 14:49:18 GMT\r\netag: \"694d4eee-6548\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25928,"size_decoded":26273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6012ef6863fd656197cd7e99eb328808","sha1":"022ed64d8a0c87e80e3a8eb18b338c0394bc1637","sha256":"c32e69ece056359934a0a74ab0594a033894665cf670f2c04ae590d16235a01b","sha512":"c74d9a26dc830590ccad7e0e7ff420f1d34ce9af053e35afa6030c8fcb197e0b5501b70d80818cecadcfd291cdadea15c22554eb27d686eac9d42d92a8abe716","ssdeep":"768:sTFrn8j909zmh/0CpJJ0N0CWQ2lrbFXr/obHwK9OHFt:crno909zmh/0SP06Q2HXrWaH7","tlshash":"7dc2e122472d73e7f314e6f28b2d3700eed41f00d6728e6183635594df5c88aba587a9","first_seen":"2026-07-08T12:12:35.459985Z","last_seen":"2026-07-08T12:12:35.459985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/shib-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.910Z","timestamp":1783512726910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/shib-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:51:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5d9f-3994\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14740,"size_decoded":6241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e523543e4964a6a8db81defeeb70ff4f","sha1":"7048ef1d3f703c6e2b8b1a4682c28f28dd95e2a2","sha256":"14dfe9e896976c8efa7f5d12dc116bc01ad9c59824450a513e43b4dcd71a7a3b","sha512":"d32c0cae9d881d30fdee7d8d5211e3bc7e6d90edef6198a6f5ef369ee94699f350d768a1cbd38940075927eed7ba34a56ae4f139f523fcbd794f5929ce27b752","ssdeep":"384:CUSUq76AuNQGLgqEAnSDquRIaNBxyVn6gQDs4+x:zAI/jfSVOazxAF","tlshash":"056256e5a3cab2e0e606f3e09716a4747a1724fa3f25ce6d07d5ada0fa5105d85cdcc0","first_seen":"2026-07-08T12:12:35.461385Z","last_seen":"2026-07-08T12:12:35.461385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.084Z","timestamp":1783512727084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plinkorainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 16:40:54 GMT\r\nexpires: Mon, 05 Jul 2027 16:40:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243073\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-17T12:50:02.578298Z","times_seen":22666,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":23,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/click-start-plinko.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.886Z","timestamp":1783512726886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/click-start-plinko.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5304\r\nlast-modified: Thu, 25 Dec 2025 12:15:53 GMT\r\netag: \"694d2af9-14b8\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5304,"size_decoded":5648,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be5f3ccc46a86ba8e2f69a74ac0e6e36","sha1":"f099375cd741a95e3980b4f73899d7fe3dea8501","sha256":"e2fcb0bf47af74f0bf09227ce3211b556d3e2732191fce397b27c2e509590aee","sha512":"114d2eb6f6b6b5ac87685e6778a9fa5f3e1b200270d5cdd921748f49c2da8f98c7210ebf871d5262d2a835a8466ec5e348f710ea332ce9bb8efd550ef9412007","ssdeep":"96:LElbw+iXT+cqB50h7V8QUWbARvwC0Owzsfdsf+r0rF4mJvwV1UAV3aiiUns5:WwTZ40o1v4j+op4OwVD3XQ","tlshash":"c7b16d3b66310658da274f7872ba7797f720f233aa3522a744108a124a1cedf315c69c","first_seen":"2026-07-08T12:12:35.462871Z","last_seen":"2026-07-08T12:12:35.462871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/registration-form-on-Rainbet-page.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.892Z","timestamp":1783512726892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/registration-form-on-Rainbet-page.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7550\r\nlast-modified: Thu, 25 Dec 2025 13:09:54 GMT\r\netag: \"694d37a2-1d7e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7550,"size_decoded":7894,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f64e9b6c7425f97e929f7737d431e5db","sha1":"6a741e5fcf5ae34989290a0a9fbd8b1d4914da2d","sha256":"d02925af91d3dd61717bbc008c9247d04a7d8e57323b7c1fa3d4b241e4a9ded7","sha512":"541dea31d27501ddba604f7c92c896ad55b38ea3cfbd1580df138647106babf9fbd6379a01c98c7af67e8beea7683639c83b6a1089d2d5d736fca0c2c4cddb63","ssdeep":"192:ZwTLGpHVl5CTIo/RgG16cvNSBWcpjhU9Wxy2WGztv5T0U:ZwTLGlcr/RguDcp1/xHDj","tlshash":"48f17e2923a55f27f34f63f8a3aa475cead83425f369898ce8927fdb1d313c46099000","first_seen":"2026-07-08T12:12:35.465914Z","last_seen":"2026-07-08T12:12:35.465914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/bitcoin-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.903Z","timestamp":1783512726903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/bitcoin-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:52:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5da3-72e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1838,"size_decoded":1305,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"547254acbf527a7ec50d8ee47eced420","sha1":"b048e6688daed39c754e59ff23287c0d5627282f","sha256":"78fc046371690c9e2335118bae1fe0d4bb475e3ac8935774460afb2dc621bd8f","sha512":"41724f305e71595fe7bb6fdc7084f0a902714650a461516778fc6243c681c06ded4d2489a3f620a5a16da26487f36191c265dc978e56f262df0b908642747f5d","ssdeep":"","tlshash":"1e3163b6d3caf3d5c24967e8c465b4b3736a30be7b9ecb5545e03d94e52540c800c8d5","first_seen":"2026-07-08T12:12:35.467137Z","last_seen":"2026-07-08T12:12:35.467137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:07.089Z","timestamp":1783512727089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plinkorainbet.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 16:40:54 GMT\r\nexpires: Mon, 05 Jul 2027 16:40:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 243073\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62460,"size_decoded":63273,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-07-17T12:50:02.578298Z","times_seen":22666,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/fast-rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.896Z","timestamp":1783512726896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/fast-rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1400\r\nlast-modified: Thu, 25 Dec 2025 14:23:42 GMT\r\netag: \"694d48ee-578\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1400,"size_decoded":1743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c5c6ba6331e7e866a7294a20f7d680f","sha1":"60af5fbb5da66ee208c9fd69385c60d62a3b905a","sha256":"83cd46562297f2dedec70853c59a9a4f5617fcab46dc27c7d738c56f60aacb5d","sha512":"c452611d2363c7515715b4acc79cda4aa668ee8540624e3c27c38be9a96e89b258bf5e8917bdc8bf02d39b9b5f5974c846a0d70eeb5e8aa7396a4607bc262688","ssdeep":"","tlshash":"9c21e775335c5299fa11367ca0d4b392fdb47a27cc712825c24286668b0614aec0a28f","first_seen":"2026-07-08T12:12:35.468416Z","last_seen":"2026-07-08T12:12:35.468416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/daily-bonuses-rainbet.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.897Z","timestamp":1783512726897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/daily-bonuses-rainbet.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1584\r\nlast-modified: Thu, 25 Dec 2025 14:23:40 GMT\r\netag: \"694d48ec-630\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1584,"size_decoded":1927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"409c146f48ce5bcc53c92481a2346cf8","sha1":"f67dc5087df990eae8d64f1b05e9717710f136ad","sha256":"da42658d96bbc2aafff80b7a45d0c56a2d258e68199a78d479e2c0e2ad0499aa","sha512":"67a71749f5e718af2f2a73ed5cf5f4e733362c4b849fe76eaf297b6e8ea4b2e194e812227f5c785c68505a147cddd22400f3c7d204840f80d6d28dc1b73b88bc","ssdeep":"","tlshash":"5831961153685788f412773d78c56b46b3592e20c24a5f1fd04ca53a462ddcf5a948d7","first_seen":"2026-07-08T12:12:35.470141Z","last_seen":"2026-07-08T12:12:35.470141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/Logo-Playfina.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.881Z","timestamp":1783512726881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Logo-Playfina.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36516\r\nlast-modified: Tue, 13 Jan 2026 07:26:55 GMT\r\netag: \"6965f3bf-8ea4\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36516,"size_decoded":36861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78d693c5ffcb8938f9d786a438c637a1","sha1":"cbab5f0e49f47e88cbcf3e0e929dfe9375c7ca11","sha256":"159396cb290ee45165cbaa7d8d0d691d22e090f6c56ae107106ec4589af3f15f","sha512":"606109185e43a415dd6bc365a8fbb1cf975436ecd6a119ffb108c18bd4bd6b5025f1ab21568df69f2202c0519f327cd4f15210ce8ccba4a47b5aea8103d97021","ssdeep":"768:VTNOoMmLx7Qh5c2P8lV8/ST7KBLuuyWn/6pBGdCF0SJWgv:3nzx7Qh5c6+8/ST7uuuy4ypwu4w","tlshash":"b6f2e09b6316770aef789b7c7ec2ea53702b79109ef85aa3d07084a329981c69495c84","first_seen":"2026-06-22T07:10:50.512438Z","last_seen":"2026-07-17T09:19:36.566536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/Verification-on-Rainbet-casino.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.894Z","timestamp":1783512726894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Verification-on-Rainbet-casino.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9404\r\nlast-modified: Thu, 25 Dec 2025 13:31:14 GMT\r\netag: \"694d3ca2-24bc\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9404,"size_decoded":9748,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83d99a3161c8feaa265a1d7180166452","sha1":"69f641d5f5aaf136a8c099faa33a30b856173061","sha256":"24e7609be9d74f9348cbc3ea57d662fd42f3be0948d9a8c49583cb1b0298e8f6","sha512":"403506f5eeff4edd36a301f7b44f71fb420e8a2563bd23d6dfb019bc1a4748e3ecbd6533fe54a344e68e1dadf96863fdf7074b766223506b300127ee7ba86f0d","ssdeep":"192:AwTox5fU4UEipHPIsq1lYEHRXwxrc2DjZKhrY/WZ:AwT65fpMHPIsUuc2nZQr1","tlshash":"3f128d1fa29ce269f8a016f472135e07a5c9bd3a900137af694d5b1a512e0275dc839b","first_seen":"2026-07-08T12:12:35.473068Z","last_seen":"2026-07-08T12:12:35.473068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/usdc-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.914Z","timestamp":1783512726914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/usdc-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:51:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5d93-9c2\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2498,"size_decoded":1291,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5184a2bf908f925327df41e24f700339","sha1":"98cbe0a2a7ca47eca50f919b0e900faae54ab669","sha256":"6c90f605d20df2e1e4ac637992c6b5ca0171813484fbda2322b41fc691a08e4b","sha512":"2373ac3c54d433b242bb6b1068dd2515867bccae762746744134526e1c7ab3f574c0abdc526ef0c3429a9812e9dc34a461ac377ffcf43d2fade5cc5ad6acb899","ssdeep":"","tlshash":"cd518cf042c4b2dde5296bb1653d7479b32420febb85c635b6d8b8e41ba758e0c8e5c0","first_seen":"2026-07-08T12:12:35.474513Z","last_seen":"2026-07-08T12:12:35.474513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/app-rainbet-ios-android.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.895Z","timestamp":1783512726895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/app-rainbet-ios-android.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13950\r\nlast-modified: Thu, 25 Dec 2025 14:09:07 GMT\r\netag: \"694d4583-367e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13950,"size_decoded":14295,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04795a095882d26082eb60f8fed352d9","sha1":"4d991e5b4d96139fe4ed375f0105d9604cae9f82","sha256":"1d7092939c3f143058f411246c41f81b6d508c7cc4f98d6f8e791e84cd4b36c0","sha512":"5d5ed2ecbbef5bfaee9d0775597f096f99ca3517085ce2da6ccfc8088a4f16659e7be7f44b8fda8508df7e77d0045ea12f4a4c6a5e314b53133553e59702a896","ssdeep":"384:iwTUNWAyzSDk2Xvoalsm2Mdhja9n91E0dfSQ8zu7Ez73V:TT23vopx9n9BFShz7l","tlshash":"9352c0a3511075bfc586a73846202f911dc16918edba570fa086519be27c0fbfb3f98c","first_seen":"2026-07-08T12:12:35.475854Z","last_seen":"2026-07-08T12:12:35.475854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/weth-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.904Z","timestamp":1783512726904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/weth-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 904\r\nlast-modified: Thu, 25 Dec 2025 15:52:02 GMT\r\netag: \"694d5da2-388\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":904,"size_decoded":1249,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3894905841683db900f3bcde567b33a5","sha1":"facd05262653c88ee86cabb3ac6f9db6fd26ed90","sha256":"48f436c7d6b4560091abcf9670c0018f2afdb74d27225f2ae782031b00b73510","sha512":"d0d35ae40019711bfc6a3f566b6fcd625ab521c56b1218b9448a74cfc2b476770e17caf4319a79514b914f7d4a1fc7d9ed9164fb231f85bcf414bdc8a87f8c36","ssdeep":"","tlshash":"8a118cd8661c905a0994ab6d6a1e7077302fb0e08b34448375802f5a3de999f5feeae1","first_seen":"2026-07-08T12:12:35.477227Z","last_seen":"2026-07-08T12:12:35.477227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/pengu-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.905Z","timestamp":1783512726905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/pengu-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Dec 2025 15:52:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694d5da1-e669\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58985,"size_decoded":37473,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d045f866fe3aa6f036d5493fcaf0fc","sha1":"6f009e04e1f8fb674e9ceb5575d6cb02dac2d538","sha256":"f04b8c618a166585bcb2a9de7ca768d51eb3fac11da951ad1c4ebadfd5fce3fc","sha512":"ee01c7d2a97eb99912ccc4d114c97ca137622ae6bddfc0063249e00783b7d756c2d0d31e44b57e4496594942feacfc3afc0c61164fe92bfe00f6a3193e796e18","ssdeep":"1536:dPIWLeAF1gLLbxY/YkCP/5Ctihx3Z9trlnUhN8:ZLeAoL4Yn/5Ct2J9tlnUU","tlshash":"6b43e1b7d803f90b6f3ec46de819a08a6da8043b52644478fac914b499f7591ccfc87c","first_seen":"2026-07-08T12:12:35.478457Z","last_seen":"2026-07-08T12:12:35.478457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/js/main.js?ver=1.0.3","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.845Z","timestamp":1783512726845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/js/main.js?ver=1.0.3 HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-2d53\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11603,"size_decoded":3453,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3510), with CRLF line terminators","md5":"e730ea04ac52c5fdfbc1eaefaa022445","sha1":"99c536a786e5b9f7851c4e8ed9bb71bdb2280dba","sha256":"bc4841378359a78bf265620519191787a48a2f17cee5e63a889c6b91f3eacae0","sha512":"768a42eb7acee1ab1bf166be7cd7c32840b73796369468aa6b599e9c4d632865007b635eb2477121801b4fab37503df2c159fd735d7b40a9408b56e9c66d49c7","ssdeep":"192:aB6Lw0IjmpjPDDV1CgAV3NWw8cPvX65IvzgZ2xUL9op5vQo6PeoP0vpRJC7lxBFi:1U0wcx1Cv8cPfoLEIo7w3Xt0","tlshash":"183230a55232283946f26a664d375b05fb3850a72542c16e3e1ff58c1ff089187a2ffd","first_seen":"2026-05-10T08:25:06.353761Z","last_seen":"2026-07-12T22:10:25.139649Z","times_seen":4,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/themes/starter-kit/images/rating/badge-2.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.858Z","timestamp":1783512726858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/themes/starter-kit/images/rating/badge-2.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 08 Jul 2026 08:00:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4e039d-5fe\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1534,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-17T09:19:36.560105Z","times_seen":44,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/0x0__28_-removebg-preview.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.862Z","timestamp":1783512726862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/0x0__28_-removebg-preview.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15200\r\nlast-modified: Tue, 09 Jun 2026 13:59:18 GMT\r\netag: \"6a281c36-3b60\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15200,"size_decoded":15545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a29908cb688d388f9d676f2df3005a","sha1":"08fd835f8877b50dfa0bf86c7c7289bf80bceb19","sha256":"e5387df49b389f37e9edeb9f2ad57bf1a905bde34505abd4b53abe7484104207","sha512":"5e8b9b2aaf1e4add5ab7d7fd51938b68f06bedbcc2fb14e60ab325e939b7ceb515d979ab18de9e276618df0be209cb4408b775264c1c0cb74d7da5acd852abaf","ssdeep":"384:VwT6fMoelWQoVm1B91IqkeutDRdzIww132gLcpznBGrJOov:KT6cWQoIWeMDzTw1voBOOo","tlshash":"f962d162361e5d30f093797ab2c3716f2329dd21a3794780624e54ef1bc8de20e885f8","first_seen":"2026-07-03T10:53:35.712019Z","last_seen":"2026-07-17T09:19:36.555317Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/Gransino-casino_logo-13.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.875Z","timestamp":1783512726875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Gransino-casino_logo-13.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11764\r\nlast-modified: Tue, 13 Jan 2026 07:16:29 GMT\r\netag: \"6965f14d-2df4\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11764,"size_decoded":12109,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2de4423a831842a22de1885b71e228ab","sha1":"c9bed5a72e642a86a69087fd150cb6db0c0135cd","sha256":"457a0926d55c930b17bd92fe88049283a2f53f8b39136fcb5fbbcb23a0b8b176","sha512":"7ded7a6382ed74a24188b344dce13e47e154d4faecba1376498af60ddb1b4f84cd2a77214664807eff4639e1e6c0d9d8c75a252956611ecaf1ba88574abcb71d","ssdeep":"192:HwT88rZHYe3PDSIhmR/VSRVOUSsPvpGftFGIfX+6xGhZ1xASU2:HwTNF4e3mIa/nUtPvcfbGIW66D","tlshash":"0b32c057f730ca4ccb0943331d559f849b2a2d366227cddd9894e8d325173e8ae6aa33","first_seen":"2025-11-13T03:52:08.138651Z","last_seen":"2026-07-17T09:19:36.580705Z","times_seen":14,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/lukki-casino-8.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.878Z","timestamp":1783512726878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/lukki-casino-8.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4418\r\nlast-modified: Tue, 13 Jan 2026 07:26:57 GMT\r\netag: \"6965f3c1-1142\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4418,"size_decoded":4762,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d01b3e09ac6a68bf4ddd5088eeece361","sha1":"bc6eb050ea932e43f3c03c6dde7a584b9545b7b5","sha256":"d9db133b5472ada60b4553b9b14628cbb581b4aa8d9040806980bf3e74e47cdd","sha512":"d5024135988eb1fe6d7343af4b185a87a3bdccdec270cdb5c02be82dd856bcb9db604ea4e2d70131e6381ed321d99905a9c27909e6c4b5d92d4302d9a6314db2","ssdeep":"96:TElbw+iXtIRGmci3vpvaJmkrL9Bu1ROoSD86pOvBVeKlginBdCrbFzN:OwTCUmci/BaJ1XSFVFLBYPf","tlshash":"05915d1e97a6d382eb216ffce1902356a3157d31c2857d3145e9672b8300ee42f59e2b","first_seen":"2025-11-13T03:52:08.129441Z","last_seen":"2026-07-17T09:19:36.562412Z","times_seen":9,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/rainbet-logo.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.852Z","timestamp":1783512726852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/rainbet-logo.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18300\r\nlast-modified: Mon, 12 Jan 2026 12:26:14 GMT\r\netag: \"6964e866-477c\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18300,"size_decoded":18645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93212d30666ddc69d64fd1a154074923","sha1":"b7ae4110efcf4767e02eff4f485b961924a5221c","sha256":"e31e6a43b3c1b8e66defff68972b8cfd76297cbc36d386d536f35f573bb4dbe5","sha512":"8adaee8b96da5235f6b14f01fb27ca1494cfab24ead8d6419e9f6bfae3cd6673284e45afedf95eac17bd01cca81a9ba64889e0ea9529f97d9770481234b690ce","ssdeep":"384:i0CERvdlBjdVO7h+0ACIsidxcpPeWKnIueUQ9Vedd09jvOltXH+:i0bRVlBjdI7XXi6AWKnIulQ9Vae9j2lI","tlshash":"f482cf443c6782e6562382570cfe7d98fae77fa6ccd55058eaca0a110e503029af72f6","first_seen":"2026-07-08T12:12:35.484212Z","last_seen":"2026-07-08T12:12:35.484212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/bitcasino-1.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.859Z","timestamp":1783512726859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bitcasino-1.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9362\r\nlast-modified: Thu, 28 May 2026 09:11:18 GMT\r\netag: \"6a1806b6-2492\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9362,"size_decoded":9706,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a64830863bb1449740b85506033954","sha1":"6111a0f2ff0065526011b3590319f53af7a20c09","sha256":"bacf01696063546164a3da9649124e604d5cbd2042cbf5e7d3b0f6ba6caaf2a9","sha512":"d21a90e35a3b41b29e2f635df7315c85f630c83971fb8469e500dcf5ba7cb77a31694ee9fb46d20ed421a8ab4cd37c2f58566523365f1578b6eafe3f0e503038","ssdeep":"192:KwHm25hWrorAic9ZU8wg1ja1t4U4txUFqQBn6RXTbAX+6/YRk0QxLFXV:KwGyQ+AiMa8zaHynUAmF+6gRyxZl","tlshash":"de12bf85d708cf0ef2e748ff26d4dbc5e168de04fbe9da11a2811a134b378a90d98083","first_seen":"2026-05-02T07:09:18.092445Z","last_seen":"2026-07-17T09:19:36.554611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2026/01/slot-mafia-logo-1-1-8.webp","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.874Z","timestamp":1783512726874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/slot-mafia-logo-1-1-8.webp HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13870\r\nlast-modified: Tue, 13 Jan 2026 07:26:56 GMT\r\netag: \"6965f3c0-362e\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13870,"size_decoded":14215,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c8c0ec5bca8f1f3fb84bbaaa30919c1","sha1":"865dcf4b34ce4bae99d0ca36f2540b86f6553b92","sha256":"95a61edb440db2381ee48a9fab1c8a2bfe4b92937290a3d8727e6f8f91e0cc4d","sha512":"eeb46b1c393045bfa5e6fa34c93c31c32c18b322696606ee1ab3f34fe8408057b1c91e71d9c8a5aa505891ea0bcd7d51ea05712705bb55e1f50aa37d4cf81d20","ssdeep":"384:8wTcpa/ZFsVhzQdTn/tXBVBWsfBh5u+OOC61hcHr:JTGGiQdT/txnWspX4N61KL","tlshash":"21529c22433152e4ce635dbb23da3304e5f4aef9171d85a8641f22e55bb6abb210c91f","first_seen":"2025-11-13T03:52:08.192508Z","last_seen":"2026-07-17T09:19:36.549979Z","times_seen":7,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plinkorainbet.com/wp-content/uploads/2025/12/zec-rainbet.svg","fqdn":"plinkorainbet.com","domain":"plinkorainbet.com","tld":"com"},"ip":{"addr":"103.217.252.135","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plinkorainbet.com/","date":"2026-07-08T12:12:06.911Z","timestamp":1783512726911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plinkorainbet.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 08:41:19 GMT","end":"Tue, 06 Oct 2026 08:41:18 GMT"},"fingerprint":{"sha1":"CC:C3:62:83:A9:E1:9D:F9:1E:5B:84:9A:4D:6E:F6:2D:C7:37:CD:72","sha256":"6B:0D:83:4A:F0:CA:15:4E:CA:1E:BB:3D:82:56:72:71:18:7F:B0:68:D3:35:CD:96:C7:5C:91:D1:83:5B:F7:7E"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/zec-rainbet.svg HTTP/1.1\r\nHost: plinkorainbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plinkorainbet.com/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 08 Jul 2026 12:12:06 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 896\r\nlast-modified: Thu, 25 Dec 2025 15:51:59 GMT\r\netag: \"694d5d9f-380\"\r\nexpires: Fri, 07 Aug 2026 12:12:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896,"size_decoded":1241,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"130f6f6e3f1c718a0b2550a6b5a10507","sha1":"dab5bd1715117efacf5ce9760a6eeb3f7852c6c1","sha256":"955dd39044f26b32c411970e95b2f797bc1e56ec1c3ba77cfd721622a11af19e","sha512":"0555c545076b54babb2c6ad914bd80859d84d7c82957d5cd5fb52983d107f671f16c72a3c90dff0453e0e26b1c9d8f96b3ab679c3a7335a9e3e8c31e39be8ad4","ssdeep":"","tlshash":"ed1123ea23ece0df812d9725131a3064756fa0f1a701cf46a79c6f693bbe21e8a445c0","first_seen":"2026-07-08T12:12:35.487124Z","last_seen":"2026-07-08T12:12:35.487124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"plinkorainbet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}