{"report_id":"fe522291-b0a0-4eda-8f9f-a15f69e4b768","version":0,"status":"done","tags":[],"date":"2026-07-08T11:54:21Z","url":{"schema":"https","addr":"rainbet.pt","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"104.21.53.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"title":"Rainbet Casino e Sportsbook | Site Oficial em Portugal","dom":{"size":257849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"cf98bd6e83c79fb35471da2f890e7229","sha1":"86474f2b11dacda5564c5a3480d33c14d556a82c","sha256":"8f8940909496892ea0e893d8ec0f9acaed3fd3513a878f9a66cc8b6cebd306cb","sha512":"2ba8be28e2192357f6ef063f8c37435bc210c763c923842794ad8339fd68f2846dbf021bbe59ef13af767617e2b9617987756c86709fce1d3e699d1e4101ef0e","ssdeep":"3072:eQOdpP9nNpp8li8WRkTLqg9R4UGhGx9+ED5kc:eFTnNpOiuj","tlshash":"cd440a5756e72059353bb2795faa6349726ce013c909cde4beded1488fc9e9088b2f0c","dom_hash":"domhash23f7eddaf8fd5d5277221029e410a8f3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbet.pt","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"104.21.53.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:54:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet.pt","ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":49,"request_count":49,"received_data":819016,"sent_data":25381,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b4197ca8961c6575d40cd85e5248895","sha1":"d595e0575675670719a91903faa70b36fbbacad5","sha256":"8df316ee2087bd1ebd549fadcd0b69e6e0d58e0b3a5113d0fa54145ee049eaa4","sha512":"701bcf3714a53dcf3bee56f4fdab4c97cecb65d38652f6f447df7aa533ac6fa93684bf7aaec19a8ac5d8a469bbba4e9cee95b904c2f36d557dcdd2178b4d60f5","ssdeep":"","tlshash":"72e012bda9e154f0026bb1191a6fd620297204c7a4c49e047e5c4e5d1fa445c97e1a55","size":346,"data":"","first_seen":"2026-06-07T17:05:58.283171Z","last_seen":"2026-07-12T22:10:25.15639Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0596691e4445d25e144788bdfa3be0d1","sha1":"997d922010521105519c778916362b2dc1726538","sha256":"8fa39ba9b1ba3db8c6a54daff75ee17614091fc45c63bc071899ff701dc7973b","sha512":"d4226efbed6b03dbdf3b45fed42cca4bf47784734aedecd016ddcca45c5312400d2a967283f274979b134f815a5bb3c263f8001979b2a77061ef06c5dcd83d34","ssdeep":"","tlshash":"8fe07de62860427f0f6758cb64b08b453739a045f407193122ecc05a21fed102832ad0","size":324,"data":"","first_seen":"2026-07-08T11:54:26.635721Z","last_seen":"2026-07-08T11:54:26.635721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7335be571d1f9586a0cf2f6952c4eec4","sha1":"f3b60c35f4f7b75ceb1266dbda8ac8d4b1ef11ce","sha256":"da1bed209470750a6c89d8f016d11e981ac975127f5db25aaf094404ecbec64f","sha512":"cebaf60fe3f7c0353c89f2de080ab49e6a5fd65040c113ae0d46f9b10f4b991b00bb15d61e287a60fe714a03569ee0fba4247de1acba85fd8ce02484aca505c1","ssdeep":"","tlshash":"91411868dbbe7662832ea0b62bfe52de143e547e7a814ebb7c38405048f48493715c7d","size":1934,"data":"","first_seen":"2026-06-10T08:18:22.002783Z","last_seen":"2026-07-08T12:11:29.208582Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8d58a2179fc7aa76b0fd5ded0eb1339","sha1":"4e097c7a672353c93efe0e558a787f9dc581993c","sha256":"3d31c21ed46f5f9fd4c785a76c044d10c61a9b38505455481cf18ad37dbb8b46","sha512":"13da0a978d156bf51087fa6019e39ffff1c22b3df47c261cabaa0f1ea6c9c0299366f91c5bd16cdb6fb7574166ffdcef3ee685a6689c4c296e79442e8a24935d","ssdeep":"","tlshash":"fa41f935f3bd243147bf64b529e5679e2a3990823a878ca7cc9c9c0624c0e9d4875cfe","size":1907,"data":"","first_seen":"2026-07-08T11:54:26.63794Z","last_seen":"2026-07-08T11:54:26.63794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-14T11:13:47.760605Z","times_seen":25679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9649e8c95b019da619dcd476075bd7d","sha1":"4c24b5cd148b6248384979c1f68bd531e7d80fca","sha256":"940134a4ffa9ebd6178c2d84114e138058ed5368084c5331ce5e19ef190f203b","sha512":"d7ac93f9b566717a4a4e1359a8a296fbf46181e3bcd02bac28f5f9bcfd1ae08cb358e1d496eba233599e2a146b060832899a057575ae18ab61f2c1b2f8297151","ssdeep":"","tlshash":"4b0115841cb89d19448195ca38bf7a857178f510c32b5d06710f044d166069d99f354c","size":691,"data":"","first_seen":"2026-05-01T06:51:15.044447Z","last_seen":"2026-07-14T06:32:08.967816Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca736d442b8673abcecffc88ad88f9ea","sha1":"3f0839cca7cb97bba1d9b2f5462d34b609903f85","sha256":"543eb44123d6b786ef1b778ef6fa0159d6394b4eeffcb252b00b1cb291303017","sha512":"273424f717bed09ca67be022121ec6f062e4b17efca84e41bb838b114ff1ff0daa5056ac80275964fdde634687166934c2b55fb001e5dae38563469f3934fc6f","ssdeep":"","tlshash":"e9c0809fd5e86c4914e5c558057c1325b114d517cf2f1e65b24e004c6f780bcb5245ca","size":184,"data":"","first_seen":"2026-07-08T11:54:26.642194Z","last_seen":"2026-07-08T11:54:26.642194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"938385c5b585eb9605b6f5429cb0799e","sha1":"d77e5b6154fe82d120a9df30eb2a4f8307042bf6","sha256":"d43134d73b4e664c174e149c41b8b23289081603b00074981feb317fba276172","sha512":"2d97e0fe1885d238b4cc113c80345b2348e0db25523775662605e21a31ab04c56c60700cc34010ecabb22a0a6f41dd52a91a8ac94aa4600190a0689fbfcc7e6c","ssdeep":"","tlshash":"1db09b6bc9d45f5111d01ed54420567662987571dc60984156c5c4400235a515a98165","size":116,"data":"","first_seen":"2026-07-08T11:54:26.644439Z","last_seen":"2026-07-08T11:54:26.644439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b703818cfb935cf28c97f7664905bd51","sha1":"1afe6dd1a20eb6a2e9ec03e62baa6cae79cc77d6","sha256":"01ac4db70d42973d20110e8af8bb3bae71e19a72540a5614a4bdf478b2033e2d","sha512":"e4015290f92900e4643c4fb3e361068547e01913b03072b5592224a09e927124c33924425857642150bd8afa428b9ad23f60ce1a075baf41d65b0031664e2536","ssdeep":"","tlshash":"d4210d7b3a3cc4ba43c5a3c806489d1ff5cca160e2c9c5d8e2869c2801a835a0b8d70b","size":1116,"data":"","first_seen":"2026-07-08T11:54:26.649086Z","last_seen":"2026-07-08T11:54:26.649086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8188552f4b3165689d154ca8584982b","sha1":"b962a3910231951e091f2c50158034691465469e","sha256":"edd24643a5b691bcd8b27120184687719669b99dc780086b2ccf668097fa37a2","sha512":"42fbe19de342ce5da5973a6b40760491a78e912c64bb4c86241706226f508e8d8e010451ac8b03c7f8314f8b73f66348575f0ea3afa51bf6dcef4d7ae76570d4","ssdeep":"","tlshash":"cef059db6b5c0432c25f305e105eb3cd3d7d803269412d67fc78c45248f0d98966289d","size":544,"data":"","first_seen":"2026-06-10T08:18:22.009293Z","last_seen":"2026-07-08T12:06:19.274864Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a85ad5ad6b7dc5739c536ead402ece9","sha1":"4f0bad18af7987df0ba4d003059b1229bf542b4b","sha256":"9bced38b31e02c72ccf4ab291b5cf6383aa18fc295986e66f14aaae8c684257a","sha512":"b5fcc29d39b6101604d6ff9bf50b8f74e98074175a795ed6ac5e77cd34267a203a827c23f9f7cc35b7195a7cb960243f4fe6224fa1d29bc8267ecf67b8bb86e7","ssdeep":"","tlshash":"842147c2f70c2432d5fe343f694a52cc252da071ac1014ba7d1c672c0572f9d46aa6ac","size":1366,"data":"","first_seen":"2026-06-10T08:18:22.012949Z","last_seen":"2026-07-08T12:06:19.275544Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-14T09:43:31.53414Z","times_seen":8097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-includes/js/dist/i18n.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-14T11:05:58.888734Z","times_seen":35238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/contact-form-7-js-before","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de6c0cecd15e65f444a9dcf0d60d6731","sha1":"350775dcd60e2b77b20ec0e18f2c70ac6f25809e","sha256":"12e94c9ffc274534242a06d150ef9c82567bd88ff055c981566e8fff8992c66f","sha512":"ff6cbd215ade4a681e5051f83ae1e47906eb83ee978a57145f3353aaeee61ec09b0a1cbbdf9c1e5eccf4a8df33cec5ee37e43dbe14c41bcefa8fc8d1353a3353","ssdeep":"3:Hz6SVGDSiCmbFFlHrXRU/PqBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:nLiRhDXii1ulgpwLkuKZ4rQAv","tlshash":"40d1809fd5e86c4914e5c578097c1325f154d517cf2f5e65b24e404c6fb80bcb5285ca","size":6593,"data":"","first_seen":"2026-07-08T11:54:26.653489Z","last_seen":"2026-07-08T11:54:26.653489Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T11:17:53.97831Z","times_seen":395626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-includes/js/dist/hooks.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-14T11:05:58.886318Z","times_seen":36024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-i18n-js-after","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f86bc00c59bb7eae252917e6bd86dc","sha1":"bc73d62810849af1e8a9879061e0aa7fd33fe59f","sha256":"2e0d06f78615e6a73639c9eb671be972dd347db76861237abc6639ff30440717","sha512":"ef9c6fb97c74c02eaacacdc94c274eb7b1ae1540bc2862e98741c5aec856e0db5bb4c4125cdf9c94385101708c7fcfafe1c383e385914fc3eb57f57321f057e4","ssdeep":"3:HaaUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:6BLxTqtGmVOiFM/KGNMJ2","tlshash":"21d112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":6493,"data":"","first_seen":"2026-04-10T01:30:51.114153Z","last_seen":"2026-07-08T11:54:26.654603Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/contact-form-7-js-translations","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"173798b5b46d1875ea403c316d911a36","sha1":"ab6697fa04e82c399bbd986aad7ca796ff75ffd5","sha256":"e56db6b8b90410dfe28143e489d2ef64dc0b120ad3e37ad1f32d07778b747282","sha512":"b6749d77b5362882f52799f8ea0fa93e89676ac5a62a2da5f44dc7fbbcf6ce5939cc187c495d38aed4f70c6f0a54f8aa0aa3f4790769e61e16784ff7bea51887","ssdeep":"24:6q2WBWUcWLNVT7sJKciSxHTDu8gxHlc0ZSWv:92WBWUcWLrTY4ciEHT6tSWv","tlshash":"0ee11584dcb8dd19448195fa38bf7e857178f510c36b6d06710f044d166169d99f354c","size":7092,"data":"","first_seen":"2026-07-08T11:54:26.655575Z","last_seen":"2026-07-08T11:54:26.655575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","size":8564,"data":"","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-08T12:06:19.241339Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","size":984,"data":"","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-09T02:17:44.806047Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-14T11:15:39.070728Z","times_seen":215032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-14T11:15:39.094209Z","times_seen":222651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/scripts-js-extra","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcc34bc059f4355f5b2677e9ee3323b0","sha1":"4f340bcf2b1dcff77a0f6db6f30ca0d28e394146","sha256":"91ef9703c83aa46f660a9ce6ed5997ebebe75995ed223c18d5a6dbfd8ac6f8e3","sha512":"5baab39b6c1506679be85a512b489146b9839cf5f19ec3c34efb37422fa1020dfa09e49df01a268a5ea9de2ba34c20a04d7be8bd310c0a8c7b65fea967729352","ssdeep":"3:Hb6EDew5vNVXRJ+rTHnJH+LX/DQO1KvGY3r:n9x3KrTQLXb8GY7","tlshash":"53d19b6bc9d45f5151d05ef54824567762d87571dca0d84156c5c4400235a515a98165","size":6536,"data":"","first_seen":"2026-07-08T11:54:26.656516Z","last_seen":"2026-07-08T11:54:26.656516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/cmplz-cookiebanner-js-extra","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30b956f6001164f3699955d98e1a9440","sha1":"2671b9a8b84caf63354b455533fa4565154d650a","sha256":"47e386a57ea32f608b405cebe509d399a1ec8623edbc8e0b33d887f660206dad","sha512":"b0af0e07976b48787123dbaba9d885d80b5823f9e9b81f76f7246e201b24d4acb3c794a014069248db86fa4bd276002949f9911c97f2c180aadb1eb7f7c0c786","ssdeep":"24:PRWNe+5xya+6GGaD1bQsi8qRgMMeQ5qn8x6T30GGFxEepyO2:PRWvHeGhz8qR3mflFSxO2","tlshash":"02f1007bf93cc4ba43c5a3f8054c9d1ff5cc6160e1c9c5d8d2869c2801a835a0b8d70b","size":7542,"data":"","first_seen":"2026-07-08T11:54:26.65745Z","last_seen":"2026-07-08T11:54:26.65745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","size":598,"data":"","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-09T02:17:44.790655Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"global privacy control or do not track detected: no banner.","filename":"https://rainbet.pt/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","line_number":1,"column_number":20859}]},"http":[{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/menu-image/includes/css/menu-image.css","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.309Z","timestamp":1783511639309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/menu-image/includes/css/menu-image.css HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 Aug 2025 09:13:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b2c0b5-d0f\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsfzMT2TmCJJgNOKQJX8Axp2AGlnTM%2FnrxGZ3tjOyaRIgehknSsYNyPVGp97x2wie0T6poUk9SYMx%2B8H4Tr3tO%2F6kuvHW8xNatVBcD5dGWwgLdr8FTGjocRgfNDe\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ee441bf4f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3343,"size_decoded":1575,"mime_type":"text/css","magic":"ASCII text","md5":"0546e1ffbf7dca6915124f9228e73abe","sha1":"6782f77c395c339354e43260f2976edebe1b25d1","sha256":"75db663f63c3505c2d1d2c41b82da41465bcd39b390516728f7fd323f95f644e","sha512":"08744d582f9c72fdb74dad04593cafacfb692372a58ffd97d78f20ded7966965abe04263a02923925a0e00b14b8c9cbc313d38109fdee4211c4966e74dea518e","ssdeep":"","tlshash":"0f61bac68a6b2432490293a87a8fd3f52b790c239fc6db8477b55918cb49570c2f3275","first_seen":"2023-04-05T15:56:37Z","last_seen":"2026-07-14T08:39:19.379299Z","times_seen":4413,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-includes/css/dashicons.min.css","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.311Z","timestamp":1783511639311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 12:26:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69302c80-e67c\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3n%2Fg0WH7STHRDYPrm8O50WYQQnLnTX6iNHB3c47AtngDtjSf91keMTN6J35VqJLYNRwwZS7wJshHUrHwjf6maJ8NugWHI%2BdMBISom07fbY6nnG2aDcvY1zFE0PQ\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ee441bf518be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36489,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-14T11:20:40.558004Z","times_seen":60920,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/mostbet-casino-1.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.365Z","timestamp":1783511639365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/mostbet-casino-1.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:34 GMT\r\netag: \"6911cd52-669e\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Lak7G8MsGdxsJd08sWvVNWPeVmlnQyFgmlgdv4xsM1%2FLMgx1xP%2Be2sHawFRbGbrKsof8oUqFJKLYMHbHl36SsKg1RxyfXPs25t9xA8Azgpe0i3i3RMDN5hqeO0q\"}]}\r\ncf-ray: a17ee4420f6b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26270,"size_decoded":27014,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f3136a77726569f88ea922d2c42790d","sha1":"bbd3030582c5b1564498bb1f34c5be328fde4bfa","sha256":"415c77ddf0a86c8b30df423b515d3fc0d92284eacbaa63253b27feea336dc0f9","sha512":"59d26401813015980b15bc3f99d757dc7cfebfd04e7a0fdc768048185d94e46644bb2b98dc8913cb7c61127076e4529b7774540c1a0859bff874cdfc88f6966f","ssdeep":"384:PwTgT8gYXl0iL6RkPxjQ4NtgCX+7fcojD5MDIFmKwKsNAxYzh/6Xm1jccDZqOECm:IT710iL6RkP14CX+7953v6wsh/8zemsS","tlshash":"45c2e148b7b87347c9c19a74c4750376262a672b07d60b5cef4c4f9cec6ba296892d12","first_seen":"2026-07-08T11:54:26.596288Z","last_seen":"2026-07-08T11:54:26.596288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/images/star-icon.svg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.570Z","timestamp":1783511639570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/star-icon.svg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58OnPWkR51TLAYJJSCq9%2FOZS%2BPVdb2nr92tfwcBl9Dr%2FbB0GrxIP12rBGlw1KbNSN0S4OdU1Oyc4cJVBWYoloU%2BNhenN12KxpcLZSUNXMm1DPFlvY9fsk88Mr9%2Fz\"}]}\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"690b7104-11a\"\r\ncf-ray: a17ee4435f998be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":939,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d7d44c0e7cba35b9903fcf5056c2b0","sha1":"7396eebf4cd6481f68577c7ed618da3848c7dcf5","sha256":"e1b89f9939709042aeb824ac851db5b411a542f91f50d143d118f7f1b331897a","sha512":"477b9212fe22b98d53eb7b11c3d1f2382f042c4c534a0db74ac721edba0783a71ba546cc1035889b3998ebef7a658bbe24ce3a7c8abc32e5816d08ebb7a496d1","ssdeep":"","tlshash":"ffd02bfa50ace9064044c724337a6c3d31e730be08de110d69c2f1a1e5794d72e2c9d8","first_seen":"2025-06-17T02:00:31.751022Z","last_seen":"2026-07-09T02:17:44.788809Z","times_seen":98,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.340Z","timestamp":1783511639340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Dec 2025 12:26:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6932cf5f-9ec7\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y46C74kaPhvvRgA49zxlpt8ppw%2F%2BSNLhdq%2FXf8cSSpEbSY1i9rjSdpEWl6LyOUUwI6lzsSfxCw4YTeMWATM%2Fa17KeIY6DfrK8H5sFTRbEusOorq%2BJRIfIXtABNix\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441ef5f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40647,"size_decoded":11364,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-07-14T09:43:31.53414Z","times_seen":8097,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/photo_2026-04-10_16-27-35.jpg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.355Z","timestamp":1783511639355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/photo_2026-04-10_16-27-35.jpg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Apr 2026 13:46:21 GMT\r\netag: \"69d8ff2d-4253\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKzsRLM29tFG%2FBRMdHpytt9jMyfn7s7sF9gg6eHykQn24MpSWQs8SkVIIC4%2FteiDe52W6OEu%2FE0yWYMqq2DQfKjyrwLVBxso0%2FOWGaqw6xkRPXCJDu%2BDKDm8PsMs\"}]}\r\ncf-ray: a17ee441ff638be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16979\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16979,"size_decoded":17729,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 832x237, components 3","md5":"c6f62fa8f58327558376448abe1b2cdc","sha1":"41ca0031d988e28e0118e3170277520bc7c425a7","sha256":"5eeb50a62054657704f4dd8cc6678c3c2550dae1504e884a8fb53aac660ed85a","sha512":"468ead75183292d2415d9a5a7c78c5e147ede02646119444901428834cb8cfc4bd0fa7cb7390660032ec1555f69a7ef0c865cbac5b0f9a2e78c5319a14a8688c","ssdeep":"384:hRb9YxcNcLDccxy7QxOnxUt7KKcZ5/g5g25IB0Gw1Mb1R67MHRjChyYaVcX:LxYIJCPl5Cxw1YR67MHREauX","tlshash":"1d72af018bb247a2d14a1634090acb714352cf714ad79ba7c5509fea39eeab3ccb31e5","first_seen":"2026-07-08T11:54:26.59878Z","last_seen":"2026-07-08T11:54:26.59878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/images-removebg-preview-.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.359Z","timestamp":1783511639359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/images-removebg-preview-.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 17 Jun 2026 14:06:20 GMT\r\netag: \"6a32a9dc-132c\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wITpHhsAs1MR%2FOVQml%2B4enxlBalUsCAtMRNyq9dEY0sOO%2FvGOg68iyVw9cZphBhcLQVFRAp155RR14WRoaEF1udwtGpkaDWRb00A1zG0i6xYs6SOODw7sUxZPxp\"}]}\r\ncf-ray: a17ee4420f668be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4908,"size_decoded":5653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36f7a5f135849dd876d84f0546c96ca7","sha1":"8f8e67a83aa5063e76a8421094d6623a12757dfc","sha256":"5d3df0d22d629885bee584aef9c675f6cd64abaf50a5d1e2b0373d4d7ae1c945","sha512":"4b1c862305b3ee9fefa8a04271260350ec9ee4e06dcce14851f36a495d639be94876b6545381a3114d22cb3fa634a37b227ae32f92d07e7f072335b9c0a41541","ssdeep":"96:JElbw+iXktmziXg/BSNledpbQRNn+P/sdlDehwc2xF2NDi6:kwTktmYHedpbNalDmwc2xFci6","tlshash":"0aa17d54a3345ee4ee646abc6f0063c8ba637f1a0292bb5b58410a01db645c207bfa47","first_seen":"2026-07-08T11:54:26.599908Z","last_seen":"2026-07-08T11:54:26.599908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/slotlair-casino-logo-1-3.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.364Z","timestamp":1783511639364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/slotlair-casino-logo-1-3.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:32 GMT\r\netag: \"6911cd50-29e4\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fjFPDA6Ij%2BIx02Ic2FUU4L3CQMKSRMrZIDaYhjAYq%2FfjQguuzh%2Fgb3deRLrx1Wg9x97rb9zLfPn89tp4WsFyti1bQgzcKdTk9SL7qCrsm30qHRe5%2Fif%2F2q5pE7fT\"}]}\r\ncf-ray: a17ee4420f6a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10724,"size_decoded":11474,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"715dfb237bf981efb1a8276b95196fff","sha1":"4e42ccd51df57b217085eedfdb23e0e2d7c4dd32","sha256":"44e32c92af91a7c3d47e715b482ddbea94abb1343d9bd1049f3b825811f2a6be","sha512":"36f44b5f3d9620ae4907765bac2738c503e3fb852b43df5d154d48022c2631d8de7e543b69e5f1ba040f4c3392f95274f7b64bb0e45c40489004709c241e0a4b","ssdeep":"192:sYwTOr3hJOssqx0WtHswh5/vh5olW/pUhFMqwQI/NVru3GC7r9+jUnaPrFAz:5wTMJuqxJtHPh5olW/pIFEQsNQ3GCvAK","tlshash":"a322c0db63150905eb244d38e2204b90d637a23fd9c37ae6b04b13932147379be8f94b","first_seen":"2026-07-08T11:54:26.601037Z","last_seen":"2026-07-08T11:54:26.601037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/bank.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.382Z","timestamp":1783511639382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/bank.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Feb 2026 10:47:24 GMT\r\netag: \"698080bc-145a\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qv%2FknAS2vRD6Z1zIR9kfadHf4F84%2BLYYcjKQA1YjtMuVmntCG31ALHtHAVVrCKA%2FYKjfz4V19U5QDzb06mGsNSiYerZV6mTgB967SnQGKJjtYsqt%2F3kj9F1YQ0ow\"}]}\r\ncf-ray: a17ee4422f768be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5210,"size_decoded":5957,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc44b3375a37389dd91bf5b0316736bd","sha1":"3a70d975b0732e375b2e2436ef22225f46109658","sha256":"426bb2951901c43a7da1a1194211e909f656d24a05d6491b2301f2f7f79e4d1a","sha512":"b5f57f8b6b8eda7bd963288afc968fbac6d412e1e3193f299f60163e69499c3967c44aabe92feb25dea9136fa929fb7797fc09a23e3044b198adf6ca98e0965f","ssdeep":"96:lElbw+inMVkf+sgHf0DLhERwnzWVOmpeZqNRHbSCVROmhQS7b+vPrM0G9/AyOxC:owjOkGsg/Ha1mp1dbE7GmZ+/A0","tlshash":"40b18e2c7bb01754dca0a8f29c7963e0d358e1a7975c49b200872392eb297fe35b95c8","first_seen":"2026-07-08T11:54:26.602285Z","last_seen":"2026-07-08T11:54:26.602285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.670Z","timestamp":1783511639670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jowCQOmXD1wFrGAM7dBhCTbxGc3tcWBQLonwnEhmQ0f9GJbc%2FRSP93WpWlm0y718elIlfTbarrHMoRcf%2Bo3%2F%2BotkpRaWTXn7GEVzBsdu2%2F6D%2BBKvJKFluky8EJq\"}]}\r\ncf-ray: a17ee443ffa78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20219,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-09T02:17:44.800827Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/images/rating/badge-3.svg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.360Z","timestamp":1783511639360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-3.svg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b7104-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okKKA4605w%2B0Fw%2B1RyrweiB3bMJwmOQ%2BgOia8oM3Igv4%2F5fnKIK6AtmxfsHOBNVBXxmLhnh%2F46L%2B6zslBxYNX6As8bPjufk6vLzJUG8%2Bf%2BFH8MFUXf3zVq38J7yt\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee4420f678be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1510,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eeee2de42abcacbff2a6c7bf5a657cc","sha1":"51a3fb1504d7b7e0e33aa5726eeb44afc3bb71d5","sha256":"27c33f3c5feaa8d2e46c4825da890fdc4c413b92c15832715497f617668f9ac6","sha512":"1be718acc70ef82173c17393f61186cb71ef7ad5cbcc77e479846d73c067063e7b9eff8239cfe111b3828655f3f966170677a6e998bc1a8f5d2335a1087ff559","ssdeep":"","tlshash":"5631877ea20d2d7af12885bc9e12d479147abcf74cc3000145e1f9a7d4a60c61cfae9b","first_seen":"2025-06-05T18:04:56.837162Z","last_seen":"2026-07-12T22:10:25.132138Z","times_seen":36,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:53:53.737Z","timestamp":1783511633737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://rainbet.pt/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://rainbet.pt/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://rainbet.pt/\u003e; rel=shortlink\r\nx-server: srv01.cofeco\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4%2F2N5xlDHfZ756Y6WsGg29ehDZpxBzOj%2FUCm9UtNyqq%2BPtYmKVpskA4THrQd9JSSzVt6mBPPBvsDA41Nm4MjERItQcgZYFgsJBJxZ7TXns%2F3GZdbqNRx0iaddAV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a17ee4380de48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":263124,"size_decoded":49812,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"e160a596c459e870cb9ee0111038a726","sha1":"650dca0676b32f468ac831f5939680b5b8aa92de","sha256":"0a188d991c8f2f1d6972e46fa955f8d51e087cba72fb82cef0cb276fdd30fe4d","sha512":"27e5bb9fad7ca871039d609d898f8be3a0e800101a80d60d8374c8db42caf536264597b176ad466a6659ef829d2703bea313ac7c4f8944339308542cc0789aa0","ssdeep":"3072:AcOWpPtnNpMJALlWusfL70MsZUGhGx9+ED5dJ:AqfnNphL81","tlshash":"ee44f95756d72059353bb2795faa6348b26cd013c905cde8beded2488fc9a9088b3f0d","first_seen":"2026-07-08T11:54:26.6047Z","last_seen":"2026-07-08T11:54:26.6047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5260,"timings":{"blocked":-1,"dns":4011,"connect":16,"send":0,"wait":1177,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-includes/js/dist/i18n.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.331Z","timestamp":1783511639331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 10:07:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed948-1641\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2OHsc8ZZlQplIFdd94SsOMgut40TYKt1nAu2%2FGDzG5zxftywAdaUZuc%2FEPOjsLaSBRflRYuwuwiQT%2B5qdJ9m6V5EKfscH91XahHZe2Zkn9q8lQ05lCQo0ulq%2FKc\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441df598be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":3220,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-07-14T11:05:58.888734Z","times_seen":35238,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/contact-form-7/includes/swv/js/index.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.333Z","timestamp":1783511639333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Dec 2025 12:24:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6932cf17-30e0\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObrBDlSSv9nwnZQVvsgHDYuAJBfo7IoH6gejaVoNgnQE643azYakRPm2XtIdarm8QZh%2BUUDoUgAk8e6v1J2jImofUpgQ98glS34RTMX7XtKC7ZkEoOxOCC%2B2sEe1\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441df5a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4281,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-14T11:15:39.070728Z","times_seen":215032,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2025/10/rainbet.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.349Z","timestamp":1783511639349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 09:08:11 GMT\r\netag: \"69032afb-2c66\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqN6dreUuIufm%2Fn%2Fj025%2FcminCxjBhvDBEmpZpuRvocvrCDSuBS%2FbRGlmaDXlDAtyr9sHd1I%2FsfPnS9K%2BBXqzca11mmcrRv%2FhbzRV6mMOButxU695LgLgTZ5NzLh\"}]}\r\ncf-ray: a17ee441ff618be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11366,"size_decoded":12120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18646d44216e8b72636543012e531189","sha1":"7ae64adba4679d5aee2a9a938783cf24d68926a5","sha256":"cdf6d0c0cc2ead524d5c83dabe0b868a3dfdeb99769ce3c0a974c201bd338229","sha512":"be4b3af103e4341cd160e69781c045bc0e1665de6f69e27f39122dc2071106c5ffa225e31fc1cf6c02edbbb3b7cc05cfdfbdfc6b6dd53a3893c69f3da2ff96ae","ssdeep":"192:5wTfsnWgbSJ0kQqpnwRAd8f1skigrGCCeNt0W5QtThRBwqWFeyxWAUJ+1zJ7r:5wTfsWgb60rqpnMAuwsFNCSQPRBCWAtj","tlshash":"4f32aef61164a42fea0aeab582a13a62c9a27f34f054eb2ca17947f475a06c61945383","first_seen":"2026-07-08T11:54:26.606924Z","last_seen":"2026-07-08T11:54:26.606924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/images/rating/badge-2.svg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.357Z","timestamp":1783511639357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-2.svg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b7104-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAjXLqR6VMUeXhsT4hgvkuTV14pwbckQXl1Luw%2BB7Z1m4FOs%2B0LOQrOVT27gREp8QC43EhV9XPDY7Dl9rWTHMWxX%2FxIC4BAxUthNDLVbgFeHLzc%2B%2FfdsWvwOFxP4\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee441ff648be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1503,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a307288943507758d275c24d44b7b8f","sha1":"d448cc20c31b50f716eda30aa040806c162aad94","sha256":"34dc3a35cfb7de60205d9b47f253ae9869f2b590c7cd8a5781af35d1f9b368a7","sha512":"b9df3f2005c9cec2ccfeb85fd04e037e3bbe801d39c7e82da29da3fbf8e7368d789f690ee0dedc474dbf1b1d557d0f13ae14ace045c14b3afcd92efe8a8f03aa","ssdeep":"","tlshash":"0931927ee10d2d2af13886bc9e12c478057abcfa0cc2100045e1b9a7d0a20c60ceae9b","first_seen":"2025-06-05T18:04:56.833392Z","last_seen":"2026-07-12T22:10:25.115501Z","times_seen":38,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.663Z","timestamp":1783511639663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ix5UkHDsXbsIeWm4USi83IkkJMiV0bx%2FIHNRLMeJxYd2fBbSJO8KfzipyUO%2FEJj5Apsj68zvvd2tMdDuHWNr%2FnaM9u5SCjVqQNOQWWELlUp1yO2cb70iFO91lGMe\"}]}\r\ncf-ray: a17ee443efa48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20145,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-09T02:17:44.799177Z","times_seen":131,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.914Z","timestamp":1783511639914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-600.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4c08\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAd1iqUxDSHZKdP399aiAcOgZnGvnYj41CedG054DegaqF2Gy%2FLrBMLENakV2Wq8Dh6sk9s8LluOEUGLM0MA93Ku4OgaRo0HU%2FD%2BxD1lFiFUzgVuBeLmYgZAkqXD\"}]}\r\ncf-ray: a17ee4457fda8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19464,"size_decoded":20220,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19464, version 1.0","md5":"765a7790e9005f066ddfbc939bdd4621","sha1":"c730bde751b462838db69f24c2c94019f964e029","sha256":"3c316558e18d2996ed4394bc36b17d993c21584f30d16dd0e6d87673f5892c18","sha512":"06147c122afcb704457b3a2775d7e375bb7672a47faf8b4743d12b88a784b20af6580882286e2adb0dad9dfd22648e4994e72f54013172680c2c596fc142ed48","ssdeep":"384:7MtxnDHqurSlYJePkNY2PEJrIJpbXHjn8Q3XSPb0W2pphsPwnyuDmsJlbrUM:7c0ukPkjsx2bXz8LTv2bAu6Sl/UM","tlshash":"6392d0bbb4af74f06d03bd33364b1ba1d9da25412cb8981842f7f481a9fbd88e655009","first_seen":"2023-05-04T15:17:50Z","last_seen":"2026-07-09T02:17:44.800827Z","times_seen":157,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/vulkan-vegas-casino.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.375Z","timestamp":1783511639375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/vulkan-vegas-casino.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:35 GMT\r\netag: \"6911cd53-90ce\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cf0CeMMA3r5Q57K%2FbBQdNprqcxnf0LKrMLh9E%2BwzFkHcYAj1O3x9Emoc2eNpS4dBTPVFOuWq74ww70tzlwwzxt%2BlrEVImiCC9JLDD6ODtQ7u7LJPJF%2BPzL3wx7uz\"}]}\r\ncf-ray: a17ee4421f718be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37070,"size_decoded":37818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1dbae9bafe25c1267d90500704ee07e","sha1":"3742305a3419ca5822ee80baadde0de7bf83420e","sha256":"83ebbd3560a6e11538fbe241889a600ef351edeca71f1f6e9163cf2f88374fce","sha512":"1022895832ee913992774db15b96e1495224f9d72d81bd60e197e0ebc5fe67cb0a74fe6096b5c19fc75b4f52d2a79f956a07a71d145fcdddac60ffc9a8bf1fab","ssdeep":"768:A6JHtrG1Ef/ojHk5GMG4r/ReLHLykoyqA5x1b2J7ewZRW0rgOKWM2:FJNrG1tjAGF4rZeLryRyqAtb2JBnaj","tlshash":"49f2f1289b591cb1c9640675b7823d9f3b548bec1c72d217eb029098f589c3a79cbe6c","first_seen":"2026-07-08T11:54:26.609136Z","last_seen":"2026-07-08T11:54:26.609136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/contact-form-7/includes/js/index.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.335Z","timestamp":1783511639335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 05 Dec 2025 12:24:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6932cf17-348c\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2y8aZBExFTSd5yXCF961ISiJvbxcWmLCOCtkbUrjkT1Ikjmb4N%2BL4g26LO27hNWzYgLKiB2KPsllj2lHminuU24K%2FOZuCxA%2F0VhGRGCK88cjqI3pXdtHFybo%2BQj\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441df5b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5047,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-14T11:15:39.094209Z","times_seen":222651,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/crypto1.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.384Z","timestamp":1783511639384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/crypto1.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Feb 2026 10:47:28 GMT\r\netag: \"698080c0-1dc8\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIOlzKCBYipI5DMcYF59kFjva1yub%2BsT2QfcSzK%2B%2FVVpo1yrwlAvn4yx22X6OxBtg2BDdYhyPHqrpy5Q98JWPxjfE%2BmJIQ28wh66OjDXcGeyjrkvsfeZN0yn2dfy\"}]}\r\ncf-ray: a17ee4422f788be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7624,"size_decoded":8371,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f5527bf4e0c906797198a618f6cd40f","sha1":"aa5ae48c6a0978f7a203438a792cd188d28c6667","sha256":"9a06a681d92494d24bb196b50df498aeaae2b4009261a4bd7b15b2e27eaac158","sha512":"f6e852f17a520ad3ff74357b2a279da8b07a141d9d97bd38463b79a7b5d7fc3e4c45c517a619a749b446218c9567f63b5da95cd747c6b3afa49d3d42ab353521","ssdeep":"192:PwX5BYGO3W7Jdcmlb0+rHn+4kary/8uhI0aN:PwX5BY8n0uHBri9hyN","tlshash":"a2f17deadb5907f8e71c70b89790371a8515650657eadbbce0b643bd35888963acc009","first_seen":"2026-07-08T11:54:26.611152Z","last_seen":"2026-07-08T11:54:26.611152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/images/icon-arrow-b.svg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.565Z","timestamp":1783511639565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/icon-arrow-b.svg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkUi%2F8M23lCISgyaMkw4E48J2ag2GPmY8jaJw%2BM19kNYu0YQggEbzITZaBolRic%2Bs2wlfHOltw8QWBVPTz073vjcXV1fxoY%2BKpJT6%2BNyGVDlLaO2B4xwnBaxmCGg\"}]}\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\npriority: u=4,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"690b7104-df\"\r\ncf-ray: a17ee4434f988be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9bbb1c127978be9567884421ca6c6e","sha1":"0cbb80cc31a816566457ce4f7338bad10b1ecbf7","sha256":"ca3ab0f046ee46c65242e6c7ccaac1eb8c4055681e62fdc567547f2c5edf287f","sha512":"c27eaa9710a44a986643c39523c20a2ab664607a26efc600e5deb9e577641fca2042391936bea881f326da3f2ce9607983b3c6bd61e451d3731b4bcbe78e6e61","ssdeep":"","tlshash":"e8d02357530c4d1cb511c620d76d3239847d6143434c519cc5222138571915e7d7fdec","first_seen":"2025-06-17T02:00:31.733848Z","last_seen":"2026-07-09T02:17:44.832929Z","times_seen":31,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/dist/js/header-search-logic.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.339Z","timestamp":1783511639339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/header-search-logic.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OenhvhkhIu5iR4U5ejBLinRj2T016h%2F6ktl%2B16F3ti8ui2Ghh2JUCD51QO7d8fIRHVbnGMbjkoPozkvUwlRTZApg4K9haiekzioujHMnJW4P5iH9yULu6A7OA3ad\"}]}\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"690b7104-3d8\"\r\ncf-ray: a17ee441ef5e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984,"size_decoded":1044,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"95a9aec3eec3385f61adaccf426e2fd3","sha1":"67e44e58f75a4514ba008c2ee3d5dcfd307c2a75","sha256":"52cd79f5c766b41f3be8b2c592ffa11eb63d657ea8c77b8d2be5875a2f98abe8","sha512":"a78a430b4249582e89a6da526bf80eec5e11991c0c780e248e53c3acb9b315b60bdd03082eeb146fd9d218cf61952ab5408afa40adba8081e03d1dfee3cca148","ssdeep":"","tlshash":"7511b4396128b439923b01c7d266afd53d59008ff840427966ac47ee2fc1ce3a3625fa","first_seen":"2025-06-17T02:00:31.74037Z","last_seen":"2026-07-09T02:17:44.806047Z","times_seen":28,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.668Z","timestamp":1783511639668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=luVG4SpmpQPZEAhR6Yz3sLopERZGp4ACSurVBAE9PdelFSUDUJDvlNdJb9R2kbfXoFX6Zeo3ZmS6AxNE17cVxTfwAYca3sUbW2owsaXy3in3QRjPczFDCF42yEub\"}]}\r\ncf-ray: a17ee443efa68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20511,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-09T02:17:44.790014Z","times_seen":168,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.337Z","timestamp":1783511639337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/dist/js/scripts.min.js?v=1.2.5 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 20 Apr 2026 14:30:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e6387e-2174\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuR%2FbieU3JrKM1%2F34LqjuRgZoBtFFyFMqiXKslW9e5wev%2B0YWe5Ppfgd4pierxW0azQ0rYhYhKZZf89Azh%2BdfBlCKbAdxx6qJ9GOXUCH4szsr%2BEcsO4BRjqIkZpy\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441df5d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8564,"size_decoded":3472,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"a29e919a7ad4f1c42c51a2b6d2dd87ec","sha1":"7df0c5b5b1fcca1ecc4def8696810f2adf909e5a","sha256":"cdd1573f5fd063c24a0c1748dba5c40d07f1c7e33141709cbdc0383c26687f64","sha512":"e738f6c5577e1ae79da0b61907adea949ce9c0229e877268d7a826580bc63b0dc4e12b36bf048befa04e895285d559c6b09e370851008b4554bdbe1995a7a768","ssdeep":"192:lmPfv8AVibaWFIkwYbRHzK0r469nlIKzgcxh2xCRvGQORa20WGW/dc7yyj/qCho:lM8mibdxPzKg469chJ7","tlshash":"1202846a53a23c7d44776a195e3fae4679b8806b2e83f409380ff4844f644fa43b47d9","first_seen":"2026-05-03T04:42:19.78543Z","last_seen":"2026-07-08T12:06:19.241339Z","times_seen":7,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/simpletoc/assets/accordion.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.342Z","timestamp":1783511639342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJHxoj8uYtnGfC7jNnYLLsWQ%2FCpydYuAF%2BRtnqMJLL4kws1DzMMwIYRX8V1%2Fz0I1A5sbgZ0Q5GlVxd1TpGrnxBC%2F1JIcalLuZDx3%2FA8gy7hA9vlmWI87C2ZvUfcT\"}]}\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"660dd398-256\"\r\ncf-ray: a17ee441ef608be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1096,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"4440d679d097638af0608509e706e642","sha1":"c897ef6bce63b52372e28a415d6d49088108a662","sha256":"169f6f797ab62f0af18a12c81dbff9076ac66b441abdd296a2acda5bfbe200c7","sha512":"b7db759cc245eb52919e34f7e657af3147a6968c2ed5fd44e3cad970fe0b904db6bf185a3c2cb506d075a4a5f3f0a4f502ef55addca044b837789db63015a904","ssdeep":"","tlshash":"4af046b46b2c333647e9d0455c1626d6763cc006ea41a4eb0c14ccdd28c8ea469eb6f6","first_seen":"2025-06-17T02:00:31.745723Z","last_seen":"2026-07-09T02:17:44.790655Z","times_seen":28,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/iaj.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.379Z","timestamp":1783511639379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/iaj.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 10 Feb 2026 05:59:44 GMT\r\netag: \"698ac950-a5e\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxOA1FV2XYREYEfc9n%2FuHks4pClil%2BOmwT%2F1uZ3VD%2BxVfi3F7fA7BUSvZrtbuTrgIKKMdOAn%2BPDCr4TwnXGpwIbYHZ1NNSFD7Tx1W4Ol0yhbWpawuBbcOAGJJjHI\"}]}\r\ncf-ray: a17ee4422f748be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2654,"size_decoded":3402,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac88fd6aa03e6cbf8e131d924cc87298","sha1":"ca13596e4cd159fcc7581d5b432ddd4b79c73b3a","sha256":"9ba5737f1f6c55ca31afa8621a8a922d06edfe5ff91619ab8c686efc2c549fb9","sha512":"98787f8d4bfc0b86bf84846dd70f6384f0a72dbc8e91c2941e726e2ffb4bf69e1384fb85e3656a0d8b7de85036ef315b2c36770ee8e470975d15b4e053777c46","ssdeep":"","tlshash":"5a5107a277490208f9b27a3040a7274d4faded41d37aa13e6dd28217a26c88c78a83c1","first_seen":"2026-07-08T11:54:26.615347Z","last_seen":"2026-07-08T11:54:26.615347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/visa1.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.386Z","timestamp":1783511639386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/visa1.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Feb 2026 10:47:14 GMT\r\netag: \"698080b2-213a\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bH75vzEF7yYE9yz3bV7zBroUlQi%2BxG6d6LnCH0BjAwj6dmBcCn061OseJqnn%2FvMRS55DPqRoEFO7E8l8j%2FjqCHr86oCVOxg%2FOheWqpszbJCsBkbRwOxTFGtbIWl8\"}]}\r\ncf-ray: a17ee4422f7a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8506,"size_decoded":9253,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68025fbca8fd504bdcd6184624d2774e","sha1":"a1eb2e4cc9860d6b90f38449a8bb977f4b8e8b19","sha256":"7d82cca909edd45a60983e84b4226502da46cba06eb8b738d3e18185cbf8de2c","sha512":"f8f141d3a32ff99b0f40f3d8d828700f1c7e18602ba92834775b2561e98f658ac61355ef459ff81f2f7239413696b0790bf35b5c745ad15eda726d86b4481839","ssdeep":"192:5wiNihe52o5qGehYztwGE7EaAuQzw0Vor8JXjMWsN/KXTqiats:5wiNIe9MeOGE4ne04a4X0Gy","tlshash":"4302af3337419377d1301df8a05aaa9787341f632e1fa969995117d12fdc14f1368d86","first_seen":"2026-03-28T20:05:45.576712Z","last_seen":"2026-07-08T11:54:26.616291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2025/10/18.png.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.390Z","timestamp":1783511639390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/18.png.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 09:23:48 GMT\r\netag: \"69032ea4-68a\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eb%2FH%2BBOfkSau7Fdh4%2Bt2dlyyx2YbdzY1kN5IyzV0z0Y5cuScuXJl%2FUFMHKn0bMJ3ia5Ry0YXYOcyb2kPzFXCxv%2BXKxOQLy6%2FtwW2dFi2otKMOnuJyX%2FFK68DEhjp\"}]}\r\ncf-ray: a17ee4423f7c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":2426,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ddb9679d196cec820639d2f1c1705278","sha1":"4c17778abc3d28628a47582d0e4da8d8a798f449","sha256":"f761861b05235b7837d4efa97a4b41610d99da3d72e75f92786f3ea98f6190a3","sha512":"2a46125c0b6f2989ad13ad9dadb536f86828aa235435f5318f5c7997e2333187aea5e187b23ff43bf95b39562070c2ef5c3a72644fb089b6fb8a0427c6645f68","ssdeep":"","tlshash":"e1311aba8712fe7834012bd81624b80b2f42a047181a105648129ceedf6ca18fc73512","first_seen":"2025-06-17T02:00:31.737495Z","last_seen":"2026-07-08T11:54:42.194181Z","times_seen":9,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.666Z","timestamp":1783511639666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9%2BAoPtob2VGQTuWWCnMXSidxQrt6OSgzBTw2UhDSf1DASFKi5FPKjL%2BmF1yqd%2FUr2DcjlVuhVTODojoCBwlRCxEp4NxByKF0pAGwzPHTe277gXd8HYLU%2FpczQip\"}]}\r\ncf-ray: a17ee443efa58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-09T02:17:44.800113Z","times_seen":161,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2025/10/rainbet-pt.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.563Z","timestamp":1783511639563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-pt.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 09:56:17 GMT\r\netag: \"69033641-26e2\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBeNmhIYGNgzUTRYmMTshD42BAJdktdK81ZbwZcwWoGkatelYDgieI0rrWM1NBN8h%2Bmrs0HWvLAzTj3W%2FWTp96VNmSphXJDWPaWrRjFfaaauvODnPPXTzh5JZeXn\"}]}\r\ncf-ray: a17ee4434f978be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9954,"size_decoded":10697,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b5aebcb6cda43d4571ba0a1cb083b81","sha1":"49d406717abd6345915af22ef88428c1c6ca0a62","sha256":"7f76506af23ff7f8a33cbe6b427e12a46b20f90113dcd7dbd0c1608d2b04f317","sha512":"931fb9ee01f8ed6423fa9d284fe1b42592662eead7874c45c92cfec8a1a63525cf09c62373ef91e6bb35651151da229b1e1703b316b1e87a3cba353054729b83","ssdeep":"192:4QPor5zQacPfGJXYimrIWGoKHD0sUZsx+i+GBUnfA/3lQFKwIf:rPK03GJoimrXvhzsx+iUfNKwu","tlshash":"f8221824eba809e1f60b63b0789d0c328359ddef7da4df9c43a48d5f2754b81a6749c2","first_seen":"2026-07-08T11:54:26.61941Z","last_seen":"2026-07-08T11:54:26.61941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2025/10/rainbet-logo-300x300.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.811Z","timestamp":1783511639811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-logo-300x300.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 08:49:21 GMT\r\netag: \"69032691-908\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQcx%2Bt%2FmpdzaqmvoZ1QVhwh95bEksjVGRfDB41f6lZaSTrZy8UD0n9kvPaW2mdlwRQT8ajroIjhN6Mcet3OMisJiCcTU6YNQ6jEOBCinEtvtnbWiyV9AMT4Tmpvo\"}]}\r\ncf-ray: a17ee444dfc58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2312,"size_decoded":3057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7cb60123d80b144011c2a55d1ef110c2","sha1":"df3a56704525704037f87a362bb1c0e506666555","sha256":"a8951435a889388c1d6608650388349cda22dae6553fd891418d5ded3cf04578","sha512":"0c17d07431c5410676f7a3024a4c9b945af68537c8eb4db105b1177b012db302ddad83d9f6c0427ed2fd46079a33d7de92a2105d46cec3663277530426d0e643","ssdeep":"","tlshash":"d4411a7863204368f018aab59df51381b0c8bc32779d622a43e4de290f3ece505af84f","first_seen":"2026-07-08T11:54:26.620321Z","last_seen":"2026-07-08T11:54:26.620321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/simpletoc/assets/accordion.css","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.316Z","timestamp":1783511639316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/simpletoc/assets/accordion.css HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Apr 2024 22:09:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660dd398-403\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYLykJqBL44bd6g9mlcu9qSBZ6zM4l6IXEczuMU9G1IrbxR%2BO0ATiU%2BYTnVBxKc%2B938%2FfcTNzHrL1BR7zGQFTq1nViATpw77mvSSnxwGIFk2DVnoFX7p3ku72UJ3\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ee441bf548be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":1215,"mime_type":"text/css","magic":"ASCII text","md5":"7e46c6d521d06fec54ccbe595100711e","sha1":"f07cba2f0f32a53e7b8b1f2064a45c16c73e7269","sha256":"a33079577d26f8a8906e24b3c3cf041b3f792f560802715514cf24e6bd4fede6","sha512":"be8bdb655cace77565a89bccab6c4b3c67694b691e7200894797f3246e2434dbe4091917d680c64e289c1fd28c9fc97fcad4eb9eaeca719149578e246a39ade0","ssdeep":"","tlshash":"3311cb1d23443583632eb19a9683e7759a0f4586ab8c0d9a31c4357c7288adc2b77aec","first_seen":"2025-06-17T02:00:31.820186Z","last_seen":"2026-07-09T02:17:44.821022Z","times_seen":30,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/apa-jo.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.376Z","timestamp":1783511639376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/apa-jo.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 10 Feb 2026 05:58:44 GMT\r\netag: \"698ac914-d2a\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kI1rGIUlffL6CpibS9Ck%2BiEAhnfBMsmsgMEW23JQs5fjzG8zei%2Bq5DkE7caxeCqTvNMToUF9KAmqY0kEd%2Fw8ruY6UWMiDjbpRwFCDpyoiCUMF4Xe8usv0sQh5A59\"}]}\r\ncf-ray: a17ee4421f728be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3370,"size_decoded":4114,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3e1182764549b223e2879d57f47692d","sha1":"d6d687177f1c732515d99991687baca33fc43e38","sha256":"eda2b82d49c676b7d972ba0de3e16ec22a015c6a9990a98cbcfdce73bc6b63f8","sha512":"9b9d3e1d3fc00e02dee07b5aa2a81be24aaebc4b66a59c9973f311724f3c83ffc9db6298c3777d122ad5fd28cef756d99833a89cadf2629dc756f430f5d05695","ssdeep":"","tlshash":"f1613b2577711b4afa4076b8e068175edb2daa24c68ea7b68354836a2a187c00f1d10f","first_seen":"2026-07-08T11:54:26.62193Z","last_seen":"2026-07-08T11:54:26.62193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/mastercard1.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.388Z","timestamp":1783511639388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/mastercard1.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Feb 2026 10:47:25 GMT\r\netag: \"698080bd-1c26\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGuBiKL4MBO6f5aykmsb%2BWti3KuvPeK%2FYsihAbraZlunrvwWh6w%2Bwr3XL%2FpTNkkczJpVj4gMqXvY%2FegNONJt6yNSvaZVw4iy8p7FMYjE%2BMrDg%2B1gSX41gQwrOz3x\"}]}\r\ncf-ray: a17ee4422f7b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7206,"size_decoded":7959,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15e52216b45e712f564d938f13b8d124","sha1":"59c3cd0b8a6d3f4fff786466dcf3ef0f3796d859","sha256":"4f68025b388e35c50f8be6a70da8b0e8a73e1a9fcd136b11c9c2126c91bf4a33","sha512":"34822a70b39b5d30efacab463342e73694882db8d6111254bf8f3ec3d50011787005506e656d3e2299b4fec99f3abc6d34ecdbd8d33c8e5839d6843a47bd3a26","ssdeep":"192:cwJrGyml2R+I2tLejy8xuyIvyn9x42s2+:cwJ6y/+7cjNMvynks+","tlshash":"a8e18e5fd3190b4fc8885b3bb5c3574adffabd1b5d5a5a46b2041b8233152fa7988006","first_seen":"2026-03-28T20:05:45.596242Z","last_seen":"2026-07-08T11:54:26.622762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.910Z","timestamp":1783511639910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-700.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4d38\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uWdwiej8985rTrscv7YBDVvwG8ZxGHMeQkInvvTQSJNV%2F%2Fq%2BILY61YVHhJeMLtWeDNpVPqT66FwWNlShzslu20ic5PPzVM1PIXX0t56pU4uqYzuZvMIk1GYxf2U\"}]}\r\ncf-ray: a17ee4457fd88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19768,"size_decoded":20524,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19768, version 1.0","md5":"8b364bf29bcf08955e8ab90358a8c1cb","sha1":"c8069a4fef1e4643f0454f3b11ae920688a6d121","sha256":"3c3e418bbd1355279dc9a7b5d7a6ff58a73432bd49d6082a0f1544cc1c593e5c","sha512":"7ce04e5001b01d3e4f416f6674d19b76e768fe0f036b1b03fa929af6c430f9d5fb008307e61163b3948ebac0507125cfbd12b49c9419eaa0b82e3693ab7384fd","ssdeep":"384:dA6vMaYevWRWREANJZjjrHqj1aER5RDJZWxHQP73qA03fMtxNjLs:/vMaECpjrwL3XQxHoL0P4xa","tlshash":"c892d09e8d29a0e4da5e5f718ffee6de006fdfb510c5c80c0596f718c805dba941e81a","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-09T02:17:44.790014Z","times_seen":168,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/verde-casino-7.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.373Z","timestamp":1783511639373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/verde-casino-7.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:35 GMT\r\netag: \"6911cd53-2122\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUqO6aC7YN%2FCnfJU94Uevmqe%2FHBk2tlis%2B3ksH6t0hV5iJ1osnzmU4ZAAgE4WbI%2FJKsBmuA%2FNeByYzRwPWvXWEQ1%2BDwzhVNeiFq37nvHxpRFrARiDv7%2Bli0ZJvS0\"}]}\r\ncf-ray: a17ee4421f6f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8482,"size_decoded":9235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d6a1157713c25ce590e5a8a300baee6","sha1":"98673846b415a3fdc76102e8e4c54d433a776f11","sha256":"ac2934ad6ecaea312e4e5b9d065671c303a6992a57437fa9c6bab420c328cbcc","sha512":"42b5a87101eac27104609554a450851a5ffbdeadf9292af29bfec98d4d71e65c511bf1a84ddf8816d083fa707da12de4d7f9a5c80ca3514e6ce70e2312e9d7f1","ssdeep":"192:9wTXUbR4NwXWOo06k7OF0zkg+YXOvW4awmmV2yTWtmakKko:9wTXeRgOP6wOF04gRx4TmzyTGkK/","tlshash":"30029e22a34d927af1591bf644b02b05c72d52124b9f233ea3564f998b2cd5b4dec2cf","first_seen":"2025-11-13T03:52:08.150516Z","last_seen":"2026-07-08T11:54:26.623867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2026/02/anjouan-gaming-.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.380Z","timestamp":1783511639380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/anjouan-gaming-.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 10 Feb 2026 05:59:31 GMT\r\netag: \"698ac943-ad6\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xet%2FfyY2VI0HBIw6TtJwm7wx0xs9h76Qkuag8twnqvE7%2BaSFufMXZnupNNJNmtIXpK%2Bdf%2FWSKyWj1gRzyQszFmMxRO8Lz0f1wUZYDAQ7lnK9CAISciX6jFTqpgBr\"}]}\r\ncf-ray: a17ee4422f758be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2774,"size_decoded":3520,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48f0631d443c371d7d9a9773329f7e41","sha1":"8253e23302d7bea23909ce9948865fd62b3d0183","sha256":"aba7646ac8a57e353dc98034ad697f33546a21985b74d64da60d4db27c75d21c","sha512":"d0b61550864c7e132d65ff73810eee05b33938ba68f8c88c404b76623c98936ae57ca1d07e75e0448fe058b74a5b03c38377004dac2e46fa3a4abb4d993e34cf","ssdeep":"","tlshash":"55512b96573f0b64f2601b7d113127c15266ef022f196634e3e593639b04ee51aec18f","first_seen":"2026-03-28T20:05:45.640897Z","last_seen":"2026-07-08T11:54:26.626194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.905Z","timestamp":1783511639905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-regular.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4bc4\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyeMT1TDndNKnHJwy2UFcjatNRIBRCAKD6leqosJm%2BRHCfRDmjlofyS6idbDTDRcbrS3%2B257Z%2B0xYGZfUe%2Bp1OIQRVltwCtHWsCuA7lC%2F0g%2BWs7wZnfrO7LN45mu\"}]}\r\ncf-ray: a17ee4456fd58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19396,"size_decoded":20158,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19396, version 1.0","md5":"28ab3b0e8151123d4dc1d08197b61f8a","sha1":"7cb91342ce5dbc20a2378b5d5a85dea3f69467ea","sha256":"fbfb7cf0faeba70db28a9ed1a35b932b2a85bac25d27b1859befec067937393f","sha512":"12788bb3cea49ee0b3195d2e0588d7dfdb727a87592cc7772ccca81f4c58d9304f49d45347e9caad96334d451e17e4d4aeae98e1005d463aaf4870e34bc013e1","ssdeep":"384:xb6z6mPqSU/zTjdeJUlq/BJslogLFQ8oga3tkYb4GFD34QXCZigPBc8MU1L:xb6z9SrVil/glooFQ83aCYjSZiQmBGL","tlshash":"9c92d1d5936a5801fb730bf0119a94dbcb83136a0bf4b4e8818cd09bcb5f097417aaf6","first_seen":"2023-05-01T19:05:47Z","last_seen":"2026-07-09T02:17:44.799177Z","times_seen":131,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.908Z","timestamp":1783511639908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/fonts/montserrat-v25-latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\netag: \"690b7104-4c7c\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SloBYuwSpAuDw4XZKiE1Uyt%2Bmvpv9oi%2BQP5pFppbn6zaJyBLCH9ZteLVZm3ApqN6y1ccQkCu9APvEZM6qvtrA3cyM6Blkfngs%2BhdOn1wqmgyclwO1NwYju4snYuz\"}]}\r\ncf-ray: a17ee4456fd78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19580\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19580,"size_decoded":20336,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19580, version 1.0","md5":"95c5b525d84aaf5a8411f6ae51916cfe","sha1":"426515e1c6be3e3b101c0c79f29741ea57cdb0ec","sha256":"01ffc8802167df3b7c029549092fd0aa9f0712e089ef4e26c543376de69faa91","sha512":"24907cb28e09ebc62f256916b1a104a53f53b4b284c78380ce450efde9081772bab7b1772dccc7c464e9be21ebd2ee8e023046714a047fd1973b68969bc90685","ssdeep":"384:q2wsotK+EWugFk5Ab1n1sHQySPOqTJ7BsARD5Wzxy7ZlcU+jXzauPc9m:GzlE6r0wtsALhjuWuYm","tlshash":"af92e1217443c4c9ee3d98f24e4fdf3481b8de1d097e21592ed24283ebe57449a3e945","first_seen":"2023-05-01T05:27:13Z","last_seen":"2026-07-09T02:17:44.800113Z","times_seen":161,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.313Z","timestamp":1783511639313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Dec 2025 12:26:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6932cf5f-ade\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxMez9RYMFsjnrinNK9IagpLbrPGAjOpxkkLUX%2Ffhp%2F2r0QG%2Fj3DRmRsmObQu7D0z9h7%2F22RiufGtiiIT3WveyzoyOaotjXlOWKavjtgr1ZT5uVBSOMmCqOrclea\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a17ee441bf528be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":1475,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-07-14T11:05:58.706238Z","times_seen":29865,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-includes/js/dist/hooks.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.328Z","timestamp":1783511639328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 10:07:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed947-1397\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqBbYiha%2Be1SKEI80NLDj7ZfgvZ5FI0viQhMs7W0fgSNO1vCGJ8OJHOFyV5BHwgGcO%2FEOyqxwVLZ8%2FjjybkgdALEmTxl2nWuBTD9ohpPbJZTJ6K%2F26rVifn3E9ri\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a17ee441cf588be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":2581,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-07-14T11:05:58.886318Z","times_seen":36024,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/themes/aviator/images/rating/badge-1.svg","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.352Z","timestamp":1783511639352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/themes/aviator/images/rating/badge-1.svg HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 15:45:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"690b7104-5fe\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kdcy7vsnYGH6M%2BwpTD%2FjqotlV9L4onckdTBwChbCYrv4tGljcQ9zZBMfRJh6I8%2Fe%2FBjLjg1XaPYEi9iDtkpnoQdZiU2V2RtaL3PXl%2FHAODcbTMyq2fcUtp0YTkGI\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a17ee441ff628be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1534,"size_decoded":1503,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64a832d2a41fe3c9035f305366cd00b0","sha1":"75abbc24c6efd1bf1cf81332b149a7fbf059a609","sha256":"889ee0275f0ebef2da49a348e54930f4e1661afaf111b8f25102aa9352788c0e","sha512":"da758f48497427d11d4f77cab781459a8fd6191731aa1ce2dacd0a0af4c48ba2f265f4b7109bda3f653d1c9eac13d56c93dd05bb963666b4a0e5adaf3eb3c612","ssdeep":"","tlshash":"6131957ea10d2c2af12885bc9e12c4791476bcf70cc2100146e1b9abe0a74c60ceaa5f","first_seen":"2025-06-05T18:04:56.815714Z","last_seen":"2026-07-12T22:10:25.112413Z","times_seen":37,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/leon-casino-11.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.367Z","timestamp":1783511639367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/leon-casino-11.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:34 GMT\r\netag: \"6911cd52-4876\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kv9RthtfuDXyWrtqT3o%2BfM5H9c3PQ8afkxUD56yZb%2B7t66GfDab91Y%2FSggREyZkPLttwqFeoYw7PdnCocQ8rbXtlaAExkjW7kY8ibLPUh8RNROVBhj%2BVG94WiP4A\"}]}\r\ncf-ray: a17ee4420f6c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18550\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18550,"size_decoded":19298,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"166d03399e00fea5ee95682848ba6ced","sha1":"8d3a4362d0652539757cc8b6df0468130bbae229","sha256":"b40dd7bfe23198f37953a766fa35a394b0bc618a188a99a46f09b873bdf4bc62","sha512":"d0ea56bb3b02d3cbfed8f84ba8cccf710cbfb36db9463b032c15354a4beda700ed26f05b2d7aa215b38c7af9d6b76d273b9c0ff6f32ac15842743d958a5143cd","ssdeep":"384:LwTMXYtfhiys63x8GW1AtcB4wP05M3PPyf6tCgNqDq74NK2QoT0UH4yFHgos:cTMRy8GCAtmnA6tCgNcq74NKkTrNZgos","tlshash":"5682d0e3dbd15b18fd1abe345f535001aa85bab8a86c5f34828bc0187f8c785f61e643","first_seen":"2025-11-13T03:52:08.1269Z","last_seen":"2026-07-08T11:54:26.629927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/slott-7.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.369Z","timestamp":1783511639369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/slott-7.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:34 GMT\r\netag: \"6911cd52-dce\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUcjOlCvTIPp2o5wNu4GxP98nDTxz1wK%2FirNBn6GZ6zdaZ9k1bcEmestGU61nmLCd5pRTXvQzSD6gWFppfGD6sqysc8EnZNXbNQKyYVLanYrh2sQwlyJ1%2B5ieyDl\"}]}\r\ncf-ray: a17ee4420f6d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3534\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3534,"size_decoded":4276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ca608c213ec6526681f2205e5a6673f","sha1":"4281e45353092a1253cf3c4af6f6986afece5099","sha256":"a5616fa9a55b9f644cbc0b511c91dad06374b4abefa3af9ddc70005273baade7","sha512":"702d862e010b0a3826fe55002c0999fb788926f2bddb219e87a2a2d90cfa9eff9e2306e5acba2bccda9fd5a0a963cfbddd355418469076004cb12aeefedc82b9","ssdeep":"","tlshash":"49714e2863756988e8c39a74706c0f948a57f713810b64b711e515f6ba4114f397d2e6","first_seen":"2026-07-08T11:54:26.630924Z","last_seen":"2026-07-08T11:54:26.630924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/twin-casino-1-8.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.370Z","timestamp":1783511639370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/twin-casino-1-8.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Nov 2025 11:32:34 GMT\r\netag: \"6911cd52-14ce\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnSCPXL%2BlDrOmsxM8h7OxpO4kv3nm8M33gHNmyV1jbWUFF0k30FMawnBjuz68jpzjcanEMCRwwe3C2WWNReHtCp6QkgK9V5p4iG7h%2BiwBvJDO1Vk%2BzzdUZfysNez\"}]}\r\ncf-ray: a17ee4421f6e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5326,"size_decoded":6071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b02fa64e12350f2f536c57b6cea25f3","sha1":"c4c88c5fbff5d4a6eee2fcea1102ef2ea35204cb","sha256":"4ce9975b911e4014b94e65dc254592b41e8aa7e93f4616e4b57c41f5479b5a75","sha512":"3466e6be6ffc7eddc46e6689ff19f2d5fdb01264ebe01c71c9477cc8e35aea89b807466f40506bdafd27992ad9b9b7fe1ad1945e1ea04b4403cc6780b9cc8179","ssdeep":"96:BElbw+iXWihNdLftZx4Vd2RPPID3R8SdWyNtw12joNl5Vb1YTksAnJxZAqM3E9L/:swTWih/LDLmDBrdhTiN95YTksAnJjoi/","tlshash":"30b16daa13fcd44ffc7f7538c99d99408d1f5b068345ae064e02d67d6b29096bde8503","first_seen":"2026-07-08T11:54:26.631887Z","last_seen":"2026-07-08T11:54:26.631887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.326Z","timestamp":1783511639326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 10 Jul 2026 11:53:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4cAh%2FcWIsu4Ry7FzvzwH0%2FVkrZyHqp3shXxq%2FAxHRPIvQvGHiVqHiu45vIVKDItUIxQ8Ays2qPpLtd5%2BmASNHghss16yI%2FvEQLbBgdO3sACsTNUKGxj%2BbBepgdf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\nserver: cloudflare\r\ncf-ray: a17ee441cf578be6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-14T11:17:53.97831Z","times_seen":395626,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2021/06/images-2-1-7.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.362Z","timestamp":1783511639362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/images-2-1-7.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 11 Dec 2025 13:34:35 GMT\r\netag: \"693ac86b-1b60\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTa2NL88Iu7ytVz3wGNffVSSVEYBzbuk7bF%2B6IPv3bAfnN81xIZzcpJqU5sj4vKSAmQzixB6%2FDsOfhr1Q3ck2qOA9s%2B5jtfKo%2BCOUCRQzy1nipBd%2FBPElzNCGESy\"}]}\r\ncf-ray: a17ee4420f688be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7008,"size_decoded":7757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a564426ee7b256014d57c1180db9442","sha1":"271b25da225c32f5df9229c651ac8cf516999956","sha256":"1032464d8f3cd5305aa560cb1ad61c1cbbb35c38e2106831b3662ab67e89c22f","sha512":"4972897e790f85d1f34431743b45405950230eb4a433c433ffeb65a8b0c77ab944422bbaa97d785c730e7da924c11cac11ced50b4cc367a423fa28edc00ba38d","ssdeep":"96:QElbw+iUPRAe1DMNvajDVYsbz4a5lSKYgEM+GNq8CAFMa8Uqy4ievrdFwLb3qmaT:1wsRAeygVYswFM+GNJvCRwLOl+gY/q","tlshash":"6ee19e3d735003dae61ba9f4552aa351b94e0e2e7016270b8d1edb7525abc0afc6d433","first_seen":"2026-04-13T07:01:10.931794Z","last_seen":"2026-07-08T11:54:26.633336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet.pt/wp-content/uploads/2025/10/rainbet-logo-36x36.webp","fqdn":"rainbet.pt","domain":"rainbet.pt","tld":"pt"},"ip":{"addr":"172.67.213.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet.pt/","date":"2026-07-08T11:53:59.813Z","timestamp":1783511639813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet.pt","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Jun 2026 21:59:41 GMT","end":"Tue, 15 Sep 2026 22:57:24 GMT"},"fingerprint":{"sha1":"02:E8:50:D3:66:9E:98:A9:BC:AD:12:70:DC:DD:D4:C0:FC:1E:7E:EB","sha256":"D0:3B:46:86:85:A0:69:D1:6D:C8:2F:F2:E3:C9:64:4F:99:E7:94:8D:EE:3D:70:0E:AF:75:8E:21:50:44:D0:BC"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/rainbet-logo-36x36.webp HTTP/1.1\r\nHost: rainbet.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet.pt/\r\nCookie: fc_popup_unique_name=GVgRBVsdHxcIHw==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 08 Jul 2026 11:53:59 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Oct 2025 08:49:21 GMT\r\netag: \"69032691-2fa\"\r\nexpires: Fri, 07 Aug 2026 11:53:59 GMT\r\ncache-control: max-age=2592000\r\nx-server: srv01.cofeco\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59w9gFd6jNEPx2sKAz8FvONT5ZxpEy9tnFk1lSD3P%2BgKREIv4XeQqwTEXLu%2Fks%2BkUWL9t%2B2WEkzC1gtxZM7lWANR3Zrp12PbqsDxAp6VfeG%2FSBTH3WPBP7b1dDGP\"}]}\r\ncf-ray: a17ee444dfc68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762,"size_decoded":1512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e7c029ff32804d1edc7b534e3f006ef","sha1":"3c435e8238e1a809af7c6c0c585d2e8bdfc989d8","sha256":"57f9991fbd2dfad8ccd82e4d6414ba1f4fb4c2aedaffd90afa09ae14be8a0e27","sha512":"9ced759317dcbd4a8b9be8ee0254236a5e680f9c6e25521d5d882a44751396692b03380a20a19bedd03816d2b9f67af6d97cee3077bac29e54be3e483cb9fcf3","ssdeep":"","tlshash":"4e010c3d9338034cf6106bf068a11f83eb6dbe2a86466719c28483524f486c5b81dacf","first_seen":"2026-07-08T11:54:26.633891Z","last_seen":"2026-07-08T11:54:26.633891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbet.pt","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}