{"report_id":"1c3e83e0-c8b6-4e64-a2d7-78929b499f15","version":0,"status":"done","tags":[],"date":"2026-08-31T07:30:22Z","url":{"schema":"http","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"title":"RAINBETPHILIPPINES - PLATAFORMA OFICIAL - ❤️ - RAINBETPHILIPPINES.COM","dom":{"size":221212,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52953)","md5":"4a8e4e8f780a14ded4641a8df998a85e","sha1":"b726216ea16c1bfaf9cdd92efc28da2788c8312d","sha256":"dca575a5509d779e69cbd376985d74379513ab4bb0d70016b876a2322470437e","sha512":"5e28cb34fccb53d0fa68aba0d2cb1b1869fa2cfd66e41cc87aa7822d8c74c1ff1a11f9de626f576af199a27b31cbb9d783721a9313eaabdad4c1aeef623b0d60","ssdeep":"6144:UhwSA+h1iAFZu3VQPkJNrsFdqmo1PNotcmQovsuWs:c1zZ","tlshash":"9b24d83412f116ba18a3c3e0f694af5ebe78e763c56b4559f26c42025fcbdd68e03618","dom_hash":"domhash3d48b1c57bc769b7f02ea806f1b98d95","first_seen":"2026-08-31T07:30:28.717085Z","last_seen":"2026-08-31T07:30:28.717085Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:30:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ph.countjump.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"c1.maxcloudlink.com","ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-08-04T03:19:13.821159Z","last_seen":"2026-08-25T20:37:03.946124Z","alert_count":0,"request_count":1,"received_data":890,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-24T09:02:09.710604Z","alert_count":0,"request_count":2,"received_data":512769,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"papi.maxcloudlink.com","ip":{"addr":"104.26.10.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-11-12T04:52:17.164013Z","last_seen":"2026-08-30T02:16:54.24904Z","alert_count":0,"request_count":1,"received_data":924,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":2,"received_data":161736,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":1,"received_data":90217,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ph.countjump.cyou","ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-18","domain_rank":0,"first_seen":"2025-08-04T13:23:48.134551Z","last_seen":"2026-07-27T08:36:59.021173Z","alert_count":4,"request_count":4,"received_data":13787,"sent_data":2053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rainbetphilippines.net","ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":12,"received_data":564706,"sent_data":6467,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6ff41f534ea7db5cca13f0a6c99e797","sha1":"4e68adb7f6501329cc30bdff0f6ec3ab27ec1d19","sha256":"dc8a726179f17dd97e2b3b54ca3e296fa1d2625fef306e626415d88151830b65","sha512":"b3b46841f55f637d537e9f25133eab71fae2d58cbb4399309c8a60b14f7998eb05b19fb41384dbcae2d57ad1d0f7a68beb3e1aa1afa337b555b3149aaa1628a2","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbSCyXsFO0s:kg5CjcfkN/YVy61LLCe83nn+uFO0s","tlshash":"efb43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":511274,"data":"","first_seen":"2026-04-25T23:04:45.1437Z","last_seen":"2026-08-31T08:56:30.302291Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b81d24b5584f7f70441b5195b784749a","sha1":"4f45ac94ac03fdd4a2e54d6121a2e87e5b3865fb","sha256":"83d7552861dbb051fb79394c41087469503e72092e588604375ffdb7e2f83b47","sha512":"fba0a9114181543f6f8e00d8422ebf7492e53658d07789117c92a1ccad22bd13f0156c1914ecd3d45e311fc3148d9352e8680c019c4adc11b46244ef70f54394","ssdeep":"","tlshash":"7ae0c25a267930715523f8390eaea2016a3100432c2bbc397c8c0a889f5e26c51f6ec5","size":399,"data":"","first_seen":"2026-06-28T00:49:24.867772Z","last_seen":"2026-08-31T07:30:46.943086Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-09-01T04:57:27.891276Z","times_seen":5014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/js/global.js","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a71b23317998896af2f1fcbce70ddfc","sha1":"abda719d37829e807e3a5704bb0074003314f851","sha256":"b971081cebde1abfaebf463aa80667bc0574625438e09f6345bde079fdb92ce0","sha512":"68ccab881afde01c7c04fab18e8e14b0f2995c1fc7eefc84e93e9025ce728a91688b5ecfa3e5c59e07df73465947c67d9f8a85cdc21ad3867f90b8c77f9e8131","ssdeep":"96:QJi5yFzOk1bIL89A/VtsxpQKJpwGLD97lBmBEnJPWuhZIW5Ag29QDG2NrADpuDbc:QcQNTToVt0Q2bmqec5AfkGU8DSVW32O9","tlshash":"3c1209902f42308c47b159e3bbb1a509f2358cc27607c8caf13d366fad2571ab75ab48","size":9713,"data":"","first_seen":"2026-06-19T02:48:20.721109Z","last_seen":"2026-08-31T07:30:46.94078Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/js/rainbetphilippinesnet_language.js","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e68bc527f0e31cb7730a0cf442572335","sha1":"485de7e1a02596a5c2511cf68c84e0ec2d2d1488","sha256":"f17e8e7c066a3c22776c20b2dd31a8ae15caf37c0776fc797881c9ad60458444","sha512":"caa2b430d8e8009dbc6625b90fdfdcacfaae4b4e4678348aa1585d30340e39410c68d1efdeacd446c8b77aff8ef9f69fb82918cd1b8bea88a3faffcb500ab661","ssdeep":"192:uJ4T3wzIX1v06UrubS3+QL2altm9ljN9U9J:2G3wzIudrubuDltm9ljN9U9J","tlshash":"a5d1d771b53122b8ff4e8dd7b2726d1570690811b11e3c4ca37e2928afa7543dd293e9","size":6644,"data":"","first_seen":"2026-06-09T05:43:43.919079Z","last_seen":"2026-08-31T07:30:46.932271Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-01T04:19:24.051803Z","times_seen":15296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.countjump.cyou/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"ph.countjump.cyou","domain":"countjump.cyou","tld":"cyou"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-08-31T08:56:30.288165Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","line_number":68,"column_number":797},{"level":"warn","text":"","filename":"https://cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","line_number":1,"column_number":7621},{"level":"warn","text":"warn-As of Tailwind CSS v3.3, the `@tailwindcss/line-clamp` plugin is now included by default.","filename":"https://cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","line_number":1,"column_number":7651},{"level":"warn","text":"warn-Remove it from the `plugins` array in your configuration to eliminate this warning.","filename":"https://cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","line_number":1,"column_number":7651}]},"http":[{"url":{"schema":"https","addr":"ph.countjump.cyou/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"ph.countjump.cyou","domain":"countjump.cyou","tld":"cyou"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.634Z","timestamp":1788161384634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countjump.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 15:44:47 GMT","end":"Thu, 26 Nov 2026 16:44:30 GMT"},"fingerprint":{"sha1":"46:7A:C8:AC:C4:AB:47:AA:60:32:D7:C0:B0:DE:CC:6F:F0:B9:DF:E5","sha256":"B7:51:78:54:04:79:63:E2:10:98:F3:0F:78:B9:7A:25:FE:34:01:DC:59:85:EA:7E:87:04:83:4F:03:13:D6:C6"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: ph.countjump.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 56497\r\nlast-modified: Sun, 30 Aug 2026 15:48:07 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWVd1JB5QVekbaKIyN20tqgMJGaZo014P4ePagd3keualHzXUDGGuY%2Fhj09iXLAAvjn7lO9iTTyusl7tyoNEbZ2eI3E0r8n%2B3k7CUspTGeJudDMvtKFjdSGk2jF0vWIAIJgVqQ%3D%3D\"}]}\r\ncf-ray: a33a536eabec56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":3224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-08-31T08:56:30.288165Z","times_seen":415,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":93,"connect":1,"send":0,"wait":37,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ph.countjump.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/45568e54d63c087ee27deed7a2a7eed3654444d8.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.631Z","timestamp":1788161388631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/45568e54d63c087ee27deed7a2a7eed3654444d8.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:36:18 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413162-6d64\"\r\nexpires: Wed, 30 Sep 2026 07:29:50 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVmn2DQ%2BRj%2BC9lx4xpyOnKwxYELoOLjcZS3brnxIYq5g1Mv929J%2FjJSxv3joNdFBYhjxzmWbstroQrSxXXLfs58lKoU3%2F8b1NwW8%2B7l%2F9JmXd3qw5VpjQm3QQjmsCYMajBNrVDbm2o2z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a5386fede568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28004,"size_decoded":28876,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"fa055579e39c9b6224230fe35fadc28d","sha1":"5508869ffd8e97e73d4efe2d6a5981f64dd0d8b1","sha256":"97356a3ca2bcef3e47afb410d4efdc2e8549b2a126d1688367fb959b9fce4a5c","sha512":"2817b8c8f3f5fbf1b890e5097c11a258a5c2ad2461b3868e994787529fd5ed2d88be84030a0032c0947dc16c4c76856fd82a79b16545ee93216ea71605216dde","ssdeep":"768:Jf4/62Hm9PWb8kS5pOk6xOzAe8OvPO6yi:N9uYkaxzAbqPJL","tlshash":"40c2f164b07082c37ed0d45ea40b5777e28ad16e53188bc078ea5ec1e48ce5ad0fa592","first_seen":"2026-08-31T07:30:28.722396Z","last_seen":"2026-08-31T07:30:46.933167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2123,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/37b41a5c1286618bbbcc9c5ed3178238379e6974.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.633Z","timestamp":1788161388633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/37b41a5c1286618bbbcc9c5ed3178238379e6974.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:36:18 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413162-665e\"\r\nexpires: Wed, 30 Sep 2026 07:29:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cS2TAz7saVmpVERREhh58U7bvNN9xUheRUcTFKJGeXYM2DliOIUHkCRjLdpG%2BQaLVzBZLGcQloKy87KZ2AMZUSaVBdpG01QdVTLAvkfIfwMa%2FKAL6NNsl7xRxV4zTL5EkpU5hlkbpFBQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a5386fedf568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26206,"size_decoded":27070,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"4fca344dabdf93b7e0fbed6f6fd256c4","sha1":"cbc8dee7ee403056db3d20393a4bf18a7d542312","sha256":"e00f41decec508ee9880289bf0fe84dda8d21254ea4207ee517e65b25358e504","sha512":"3afc188d1c98ce244703e6804ae720ca7db62eeacf676d72ca618d86df6e4cfc8f3c2c2b7f1c15a0976ebf21207e14ed91bef42217021b9cd5e96fc3431d3c13","ssdeep":"384:fxLdMKBmO3bAAVQkXObtDng3j5i/tpQ3Pne6lmOXr+ejEJnsRyDnDRl6W:YKBxsAae3AY3P7Xr+ACsRyDnDRIW","tlshash":"59c2f2d4d8a9b871a389cb464222d1d572d05ed3e4e7a85e2136613ff539bf9f307802","first_seen":"2026-08-31T07:30:28.725922Z","last_seen":"2026-08-31T07:30:46.941342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ph.countjump.cyou/api/event","fqdn":"ph.countjump.cyou","domain":"countjump.cyou","tld":"cyou"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.676Z","timestamp":1788161388676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countjump.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 15:44:47 GMT","end":"Thu, 26 Nov 2026 16:44:30 GMT"},"fingerprint":{"sha1":"46:7A:C8:AC:C4:AB:47:AA:60:32:D7:C0:B0:DE:CC:6F:F0:B9:DF:E5","sha256":"B7:51:78:54:04:79:63:E2:10:98:F3:0F:78:B9:7A:25:FE:34:01:DC:59:85:EA:7E:87:04:83:4F:03:13:D6:C6"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: ph.countjump.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://rainbetphilippines.net/\r\nContent-Length: 111\r\nOrigin: https://rainbetphilippines.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":111,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://rainbetphilippines.net/\",\"d\":\"rainbetphilippines.net\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GNDTTye8dB70Br8q88fC\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BCwvSTm7y8LEPZ5mXmn4rdUkIdIonrK1CVMz55MmoqeC0QMTcU6by%2Bp%2F2I2hvrMcPVAlYsvn%2FyFgBpV5p3RTi2lwGnM2rWGU0iif%2BWkCMhN%2FA0V2d65nHXec5CreFNcphfrZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: a33a53873f38b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":888,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-01T06:06:32.554653Z","times_seen":454737,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ph.countjump.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/d08c6833b0e7af2ac612233ddcc4e17d1e7aac19.webp","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.645Z","timestamp":1788161384645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/d08c6833b0e7af2ac612233ddcc4e17d1e7aac19.webp HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 15:49:32 GMT\r\npriority: u=5,i\r\netag: \"6a41428c-14022\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1zziVgqgC83FJ%2BPXZqFEbqVHzL%2B%2FypcKngHxvpE0c7db5m6Y5Sk2EjuzUuGLZFZFdY2RhXLA%2BjmfQWfW%2Bh38zLx8Bi9RqXbukb7CPfW9jhZIQ4TnfxLD6chxFItnKG8YG0P2MWuGNsl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: a33a536e0d76568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81954,"size_decoded":82722,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b8a5ba838513bbf55093a7ce9ad8021","sha1":"7c46b3cc9e38902862c001598122e5b8a81fbfee","sha256":"03b6e873b7515cab5df836cfba633afce614ffc73bf5c14f33b24742f7763c45","sha512":"73bdb8ac45e83a9de36908917c9559b0f7884b373199cdcb718b6558ab3eb6b4ad04d8dc59f791328a8a198b276eeda90e6846e548fd1cb1b21783d043e94fef","ssdeep":"1536:RqszgHTR+CmbNRYJhRU4hADvd3L/OKTDmBWS/dlw42GOoVmfkn:lEHTGbQ8DvNTDm71WxtoVmMn","tlshash":"c083f1b87f835b6ddf8a113fe71877887753d94b40a0bb02d5b43461afe9210b684ea1","first_seen":"2026-08-31T07:30:28.731652Z","last_seen":"2026-08-31T07:30:46.926302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":415,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ph.countjump.cyou/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"ph.countjump.cyou","domain":"countjump.cyou","tld":"cyou"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.447Z","timestamp":1788161388447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countjump.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 15:44:47 GMT","end":"Thu, 26 Nov 2026 16:44:30 GMT"},"fingerprint":{"sha1":"46:7A:C8:AC:C4:AB:47:AA:60:32:D7:C0:B0:DE:CC:6F:F0:B9:DF:E5","sha256":"B7:51:78:54:04:79:63:E2:10:98:F3:0F:78:B9:7A:25:FE:34:01:DC:59:85:EA:7E:87:04:83:4F:03:13:D6:C6"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: ph.countjump.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:48 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 56501\r\nlast-modified: Sun, 30 Aug 2026 15:48:07 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJcPA5mLGaz6u%2FMB3e8OJXxCw8sh7dSKJpM%2BPnXxg5Bz6f%2FtuhpOGLg77pS6AWuZjr0yDeIalY6yr9SKNln4akZXH1kbUX2Z64qooNN%2F2fK8vZBv%2B28aIbMjRteH2r%2BpKwEeWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a5385cf26b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5115,"size_decoded":3257,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-08-31T08:56:30.288165Z","times_seen":415,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ph.countjump.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.623Z","timestamp":1788161384623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"406d-rwCOh5O6dcNGNg6U6W482jFM4n8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\nage: 8656\r\nx-served-by: cache-fra-eddf8230104-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16493,"size_decoded":5330,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-09-01T04:19:24.009092Z","times_seen":12967,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/js/global.js","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.636Z","timestamp":1788161384636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/js/global.js HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 28 Jun 2026 14:58:44 GMT\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4136a4-25f1\"\r\nexpires: Mon, 31 Aug 2026 19:29:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTaWDf15NnBwEAbfh3oFM4G5NJCbmovvarRxwpQ87VNOr13HRohgk%2B8LDpi7aqKHAGr4Cc90IKscHELlEm9d1wmWoKNyOLy4Lg5xDvXpKreQcsNZ0ZlqQfCPVhoKDBiUvhI09mTVnek%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a536dfd73568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9713,"size_decoded":5193,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9694), with no line terminators","md5":"3a71b23317998896af2f1fcbce70ddfc","sha1":"abda719d37829e807e3a5704bb0074003314f851","sha256":"b971081cebde1abfaebf463aa80667bc0574625438e09f6345bde079fdb92ce0","sha512":"68ccab881afde01c7c04fab18e8e14b0f2995c1fc7eefc84e93e9025ce728a91688b5ecfa3e5c59e07df73465947c67d9f8a85cdc21ad3867f90b8c77f9e8131","ssdeep":"96:QJi5yFzOk1bIL89A/VtsxpQKJpwGLD97lBmBEnJPWuhZIW5Ag29QDG2NrADpuDbc:QcQNTToVt0Q2bmqec5AfkGU8DSVW32O9","tlshash":"3c1209902f42308c47b159e3bbb1a509f2358cc27607c8caf13d366fad2571ab75ab48","first_seen":"2026-06-19T02:48:20.721109Z","last_seen":"2026-08-31T07:30:46.94078Z","times_seen":34,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c1.maxcloudlink.com/?ch=2NGS6\u0026status=1","fqdn":"c1.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"172.67.74.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.734Z","timestamp":1788161388734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 07:59:02 GMT","end":"Fri, 27 Nov 2026 08:58:41 GMT"},"fingerprint":{"sha1":"CF:B3:19:E6:7A:5B:A1:E7:ED:18:98:66:EA:4A:B3:46:15:44:EF:25","sha256":"1C:5D:AB:1E:68:97:54:3D:86:71:86:47:AF:E8:E5:69:23:0A:FD:C7:9F:36:C7:A2:DA:CF:6C:70:96:1A:4A:A3"}}},"request":{"raw":"HEAD /?ch=2NGS6\u0026status=1 HTTP/1.1\r\nHost: c1.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetphilippines.net/\r\nOrigin: https://rainbetphilippines.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=blq3u36omirq718cb09fk09u6i; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qirwsnOFiZXOjVNw8U7uGIUorQpjzEthDpbXjbZrmkFx1obL2u326EuHvGUaNsqTEptZU8zcGeDm47icOPxUsCZPphsp5rubGSKGwUWMZ%2FtyVENg9P5o8iotp1wpZaurG9Hmk8o%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a33a5387b92456bb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"blq3u36omirq718cb09fk09u6i","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=blq3u36omirq718cb09fk09u6i; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-01T06:32:43.24748Z","times_seen":18213218,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":11,"connect":1,"send":0,"wait":409,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.640Z","timestamp":1788161384640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"2315a-9NyNRghnOcWBIRhbLQ9OGQcQ8Rs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\nage: 19714\r\nx-served-by: cache-fra-etou8220030-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143706,"size_decoded":41437,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-09-01T04:19:24.051803Z","times_seen":15296,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":9,"receive":9,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:47.824Z","timestamp":1788161387824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::fdwq5-1785542347567-d3795dad48cb\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2619039\r\nlast-modified: Sun, 23 Aug 2026 15:01:08 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVFbRMPOPHR%2FXzw%2BiSnITSvUNGku%2FH1YBUR%2FML4BFrjnRdpebpj%2BguicAzxqOLeeFbL%2Bux9xP5bvvzXiyg2uSaQ44pnUUAtQfhRkX8XAwmdeXHJQkE0NZsowDloViCQ%2F9zOZZrQ%3D\"}]}\r\ncf-ray: a33a5381e8ef7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511274,"size_decoded":146607,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"a6ff41f534ea7db5cca13f0a6c99e797","sha1":"4e68adb7f6501329cc30bdff0f6ec3ab27ec1d19","sha256":"dc8a726179f17dd97e2b3b54ca3e296fa1d2625fef306e626415d88151830b65","sha512":"b3b46841f55f637d537e9f25133eab71fae2d58cbb4399309c8a60b14f7998eb05b19fb41384dbcae2d57ad1d0f7a68beb3e1aa1afa337b555b3149aaa1628a2","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbSCyXsFO0s:kg5CjcfkN/YVy61LLCe83nn+uFO0s","tlshash":"efb43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2026-04-25T23:04:45.1437Z","last_seen":"2026-08-31T08:56:30.302291Z","times_seen":108,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/adc042fcc14fa0bc0468c0fe3cc9caf9ca0a47c3.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.702Z","timestamp":1788161388702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/adc042fcc14fa0bc0468c0fe3cc9caf9ca0a47c3.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:36:18 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413162-80c7\"\r\nexpires: Wed, 30 Sep 2026 07:29:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JI6UxH87Dj1drI3MMuTxTk0s9Pgofc%2BUyaZXnicH5OcV%2FDzRB5keQ8mduCtDYfTSSJuUs%2BV%2BZKhDV5AlwdSSfbzD%2FVmBC0CMrEjGsXa3r%2Fz0pZ5avxI6q%2Bs7tBhRVpe9rSzFE5wSqPV3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a53876ee5568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32967,"size_decoded":33841,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"fd710d5f22d757f7c880db0873876f90","sha1":"cbde3c826c32a3dffc521190b6bc724973957533","sha256":"0bc92170c5bf0e0d2b4b82e691ea6a8ca65352e220d9fd675d676f918f6d7bad","sha512":"091f607725821aa29cef9fa46fd5641559340a51af6f095dae070ee58ec9cf72919f4af9555c3f8b061b960778190be384875fb860deb3ff0bfeaea6bd286f66","ssdeep":"768:yo9Tm+mI3jSPKyeQ9MtKEmKTvuNRQuWmdB0i/mIS:3dXmI3sKyMEEtLaJFqi/mf","tlshash":"9ae2e1c51091df21952f195ec3e10ec6cd4db85866c9a663d2fab33e59e09ae0893a24","first_seen":"2026-08-31T07:30:28.744466Z","last_seen":"2026-08-31T07:30:46.928111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":453,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.620Z","timestamp":1788161384620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /?plugins=typography,forms,aspect-ratio,line-clamp HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 31 Aug 2026 07:29:47 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::j86k8-1788160852218-87474d2d63e0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7G5Tt4KXlZsVztI7V3gfya67Wrez7cd58mTTziwDTrshQWv6Vh9MsRIvtdBNryH%2FoWxqymMooXtXgoe2s5ZVdRh8pCIpy%2Bxmce8NyNJWNgkotmY7j0aZTR838gBh7dFt%2FIIZOAI%3D\"}]}\r\ncf-ray: a33a5381a88b7127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-01T06:32:43.24748Z","times_seen":18213218,"resource_available":true,"data":null}},"time_used":3199,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":36,"receive":0,"ssl":3156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/logo.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.633Z","timestamp":1788161384633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/logo.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:57:36 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413660-1e844\"\r\nexpires: Wed, 30 Sep 2026 07:29:46 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQmvjr6QKlGqRV%2FYNPr37jR5TctR%2FxoUtsmLK96p61nUNuhSwDro8u5DT437bEf7wl5Q2CyxgQwE%2B7313alIONcT%2Bs7wVU9I8yh3ZZN9EYAfgMoXPtom1GPHdSbpfOjSRKUG%2BlEyKEfu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a536dfd72568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124996,"size_decoded":125758,"mime_type":"image/png","magic":"PNG image data, 512 x 199, 8-bit/color RGBA, non-interlaced","md5":"c82602a46261bd66a95730945e629100","sha1":"213770c6b16f58a45dd1d87ed070f164bd812786","sha256":"f225844ad92ea54d1c7c38c3c0dd7db0eee20ce6d649ae0f33b8931839530941","sha512":"2cf79b9d291515bc9700234c83944cc68bbaa05822c60818d09a8886177b8932da1a1e725cbe43fb6398afa216001c5bdbfbcb4e525e4b979c4786ec674a48e4","ssdeep":"3072:yiWSAv1UPosZWPP+jA/zrptql8PkIUQuagsDysubbBH7gFbV:/U1qa+UPhXRuadD8nl8FbV","tlshash":"f3c3129de086f78d5d0342b9b8c3e841eef499ccab116d08f5c474f9246951fb972a02","first_seen":"2026-08-31T07:30:28.746971Z","last_seen":"2026-08-31T07:30:46.93663Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1500,"receive":602,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/js/rainbetphilippinesnet_language.js","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.637Z","timestamp":1788161384637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/js/rainbetphilippinesnet_language.js HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 28 Jun 2026 14:58:44 GMT\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a4136a4-19f4\"\r\nexpires: Mon, 31 Aug 2026 19:29:44 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhT0YSn3sCuvcurBh6xONbs9ObmJyZ6aeWcSwB2tQv8WtX6QLQ6AKIiV5n4QguGh69wwVrG6oCSaOT5milXq%2F4Rh%2BtWQCytLKbqtmM%2FggTT9WJZ6lwjGtrbuG6cFPrLLM2zDuwi3pGnI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a536dfd74568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6644,"size_decoded":3030,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6631), with no line terminators","md5":"e68bc527f0e31cb7730a0cf442572335","sha1":"485de7e1a02596a5c2511cf68c84e0ec2d2d1488","sha256":"f17e8e7c066a3c22776c20b2dd31a8ae15caf37c0776fc797881c9ad60458444","sha512":"caa2b430d8e8009dbc6625b90fdfdcacfaae4b4e4678348aa1585d30340e39410c68d1efdeacd446c8b77aff8ef9f69fb82918cd1b8bea88a3faffcb500ab661","ssdeep":"192:uJ4T3wzIX1v06UrubS3+QL2altm9ljN9U9J:2G3wzIudrubuDltm9ljN9U9J","tlshash":"a5d1d771b53122b8ff4e8dd7b2726d1570690811b11e3c4ca37e2928afa7543dd293e9","first_seen":"2026-06-09T05:43:43.919079Z","last_seen":"2026-08-31T07:30:46.932271Z","times_seen":6,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/2bbf0155720a45c3df0c949a47817f71a7b8c6d6.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.701Z","timestamp":1788161388701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/2bbf0155720a45c3df0c949a47817f71a7b8c6d6.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:36:18 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413162-79bb\"\r\nexpires: Wed, 30 Sep 2026 07:29:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrAZnKgZXWnDe26G0ZBpu4laYpRQTo%2FhAvqpIQvKJ80aBbRoRm9IvkWXMCiZipDFXfvvKmly4Pa9O%2FW%2FTO6E6FzcAxTf6iCVZvWgB05ZTX4zfJtgiUDPe8fFcu02nkhPyCSO47MoWkiI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a53876ee4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31163,"size_decoded":32021,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"4204cd8a847af9fc113e86d8481954bd","sha1":"3c3b0afc1d57f141b810e8518aa999bcdd6605a9","sha256":"f292d3980649c2459e4b30ca86064b2630db27d9b88cd35c077f0145768ff497","sha512":"31b5f776b4559055cc68899a4faceec6d6df439638dd61d511dd5296eddce48905c2f2e1530d17a11e1fa3d6a01d4056a8b8159296473d1330b244fec43ba8a9","ssdeep":"768:autlvuablFuMGird81ql871jmkPX+5g2W1tgLbNqjzS62iDNuglOe:au/DxGihc1pu5g2WcNT62ipjz","tlshash":"f9e2e1c586f56488837210ddde8b944f88eb384586a7e1153a84c6d60f9b8364f8bddb","first_seen":"2026-08-31T07:30:28.751227Z","last_seen":"2026-08-31T07:30:46.937891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/ico.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:49.458Z","timestamp":1788161389458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/ico.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:57:36 GMT\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a413660-5022\"\r\nexpires: Wed, 30 Sep 2026 07:29:49 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jb%2Fw9ZJkp7QKeQBeQiJ3GJSPjv5HbXlSd6ABklv4dmjyQhnpr6QFkfq9kjegl406H2j0kaYJ%2BYMqgYYOHqICw8paAVUSIBuUUqli331P3%2B9aaGcjRZpBBGrS%2BEnrkj%2FSsSizU1gNpUWA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a538c1f0d568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20514,"size_decoded":20803,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"6b579037ec048d0c034cfa58469a9523","sha1":"b0e7b630f40337d5fa290308894b3dfea27ae653","sha256":"a17e027386512a4f883f41e6b15e2f866d5326cc35ffab894f5f47ac0f5f9603","sha512":"ba7ef1e73fc9fe60ed54ecf3f87f3ed25a6518fbf6f69646839c0a35e065244f7fb7b7bd51977bf977cf325c4300cb15a3c770678463e83a9a59a25552a96c6a","ssdeep":"384:XZZJpiJU7rvraz63J4GnC+bryrdBaN6BDo2HdORJFBrZY87qtiAaNLx:pZicvrOuCFiYBDo29OZY8WtinNLx","tlshash":"1592cf8341e7e1d2237393f61012a38b33fa46f6c6a5ade2bc99b00d4e52517d6b644d","first_seen":"2026-08-31T07:30:28.753343Z","last_seen":"2026-08-31T07:30:46.939279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":413,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:29:43.753Z","timestamp":1788161383753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 24 Aug 2026 04:14:17 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=36000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgUebNlub%2BnB9XSqFg1fjH74aRlABJocGoeGhEIOmKpdyjNDAvYtOG77jvvL7kAaMeovm5r4fK7Umfn9o9fbJPhE5vK6aA%2FU18tBNrn37nDAQEVdDmWETPQ3bOVg7jipuWe4tNyTgDLO\"}]}\r\ncf-ray: a33a5368ad52568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162294,"size_decoded":21025,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a326ce3f34830d7c3188fdb001ecb7ea","sha1":"2d137b8b14a7dc6f1045b173372eda526fcea9d8","sha256":"9652fff73726f63c9b3a09d1c65ec199dd71af68c9481de68935cbb9af4c531b","sha512":"6bcb3395cbac2746a363594bbe2da942c25245fcbf95e2c6d8bf1e666e31dff60ab3758f394cead3d828d13dd798bbb1c0fc712d944581a89f9a54b99096a5f4","ssdeep":"3072:qxCAFZu3VQPkJNrhK7Fdqmo1PNotcmQovsuWdeCwVT8RO2:qEAFZu3VQPkJNrsFdqmo1PNotcmQovsR","tlshash":"def3647422f11aba10d383a0ba91af1adfb8db27c1578459b36c46531fcfd96ce43258","first_seen":"2026-08-31T07:30:28.755636Z","last_seen":"2026-08-31T07:30:46.924253Z","times_seen":2,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":17,"connect":16,"send":0,"wait":411,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.619Z","timestamp":1788161384619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 07:29:44 GMT\r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-09-01T06:29:06.113527Z","times_seen":6162,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/dcdd9618d080d1737c7af164d257e8e69624fd9b.png","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.634Z","timestamp":1788161388634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/dcdd9618d080d1737c7af164d257e8e69624fd9b.png HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 28 Jun 2026 14:36:18 GMT\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a413162-7452\"\r\nexpires: Wed, 30 Sep 2026 07:29:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gm5ivpFzLopHR%2BcitO3lmOVDhtbl5kEDXK%2BzVsgzRhcMqnoozWjSCpe2vgj8IHML6qiE3c52mNfQVDkg6QVqe50MnCJdSTMQM%2FoeE8tXLbRtD6mYPq3xqB%2F8auWljAgwAaO0LX0bDZTk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: a33a5386fee0568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29778,"size_decoded":30641,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"e8c3696d0d167b09c85e2838c3517f70","sha1":"3943b7fc1cb2788cd2b10843d805a9a793161697","sha256":"1be5139848a980ed7f8a2af79d5c286910b54a3dce8e3b38cd6243c0a838465d","sha512":"b195112fddc7a243391582edd6fe72e32d1e2cbb9db725e9be5ecf759711cf94408e3bceed135337fa1e8980bacbb8a6b933208db1a523b67b6bcba277f8bc1c","ssdeep":"768:hY4wrcSSZ4Sk2REApOF9pHtXJeA8Rt5TCrhTA:hZwBkk2R2FvHt5eA8RfCrFA","tlshash":"e2d2e186d64ffef3e1ab61e2f426112ff798652099878a5124d408e07bd78d902f7349","first_seen":"2026-08-31T07:30:28.758621Z","last_seen":"2026-08-31T07:30:46.942139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":426,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ph.countjump.cyou/api/event","fqdn":"ph.countjump.cyou","domain":"countjump.cyou","tld":"cyou"},"ip":{"addr":"172.67.163.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.685Z","timestamp":1788161388685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"countjump.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 15:44:47 GMT","end":"Thu, 26 Nov 2026 16:44:30 GMT"},"fingerprint":{"sha1":"46:7A:C8:AC:C4:AB:47:AA:60:32:D7:C0:B0:DE:CC:6F:F0:B9:DF:E5","sha256":"B7:51:78:54:04:79:63:E2:10:98:F3:0F:78:B9:7A:25:FE:34:01:DC:59:85:EA:7E:87:04:83:4F:03:13:D6:C6"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: ph.countjump.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://rainbetphilippines.net/\r\nContent-Length: 95\r\nOrigin: https://rainbetphilippines.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://rainbetphilippines.net/\",\"d\":\"ph-all\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GNDTTygPc29vQEEqn9wh\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCrsNyOIM9qb4mp%2F2veDzojV9EJ6z%2B9V%2BbSnuKqMdra5ItsoVQbnrWawqUd3rYIJ7DGZ%2Bn3yLf%2FglHIQh81PHXetLhJHjzcTjjftLHFYj6LMZYJ1iB08AkUYbCZHbA3%2Fl%2BpElw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: a33a53874f39b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":892,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-01T06:06:32.554653Z","times_seen":454737,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"ph.countjump.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetphilippines.net/static/images/b759404a572ec33406910aa29e7decbd4d88a8da.webp","fqdn":"rainbetphilippines.net","domain":"rainbetphilippines.net","tld":"net"},"ip":{"addr":"104.21.52.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.642Z","timestamp":1788161384642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetphilippines.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 05:25:58 GMT","end":"Wed, 25 Nov 2026 06:24:31 GMT"},"fingerprint":{"sha1":"2A:C6:05:6D:A7:4D:65:D0:B9:BB:73:AE:30:95:8A:A2:6C:75:87:EE","sha256":"AF:FD:4F:A8:7B:54:8F:76:48:BC:89:24:E0:54:E4:8D:D8:60:DB:24:64:8B:FC:58:AA:FD:41:CE:28:BC:A7:25"}}},"request":{"raw":"GET /static/images/b759404a572ec33406910aa29e7decbd4d88a8da.webp HTTP/1.1\r\nHost: rainbetphilippines.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:29:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 28 Jun 2026 14:47:02 GMT\r\npriority: u=5,i\r\netag: \"6a4133e6-236\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FCo89NGEz35sUx9nOKHamKcFuVHOZQWoOcSKy%2BcYrD8ZZtNaCPo1mbdrbfqaMqBV5ZzZTlKYr9bUajUJ%2B6z%2FKN%2F2xTW6f7%2B2aBx7KUdgXC8S%2B739iA8Dp%2FF7XK%2Bd7g27zPhkSRvm%2Fpx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: a33a536e0d75568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566,"size_decoded":1340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb7aec4bd5a2b5ffb4e969f7d2582b5b","sha1":"fbe791ee19073ecd360f6722cf2ae1828237a09a","sha256":"fe3d52deeabd99d34ea2a7e800a4340eb05d5b6f4c437a79d64b15a30b9aedca","sha512":"7d304f7c4598d058d7ffaa854e4873710c5eda7052e9d3e8aecd1697c9cdae04f75a6cdaff588db30e33e93fba42487bdae7965dd54a64894e1c583c2d37f314","ssdeep":"","tlshash":"54f0209240b0e399e6249d947fad5312aa09d682faf43d2890d235cdc555242aadea8c","first_seen":"2026-08-31T07:30:28.760684Z","last_seen":"2026-08-31T07:30:46.938592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"rainbetphilippines.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papi.maxcloudlink.com/getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=rainbetphilippines.net","fqdn":"papi.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"104.26.10.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:48.736Z","timestamp":1788161388736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 07:59:02 GMT","end":"Fri, 27 Nov 2026 08:58:41 GMT"},"fingerprint":{"sha1":"CF:B3:19:E6:7A:5B:A1:E7:ED:18:98:66:EA:4A:B3:46:15:44:EF:25","sha256":"1C:5D:AB:1E:68:97:54:3D:86:71:86:47:AF:E8:E5:69:23:0A:FD:C7:9F:36:C7:A2:DA:CF:6C:70:96:1A:4A:A3"}}},"request":{"raw":"GET /getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=rainbetphilippines.net HTTP/1.1\r\nHost: papi.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbetphilippines.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 07:29:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=gs8oh4726epcvcej6mt71dnbmi; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JB2FGHFfcP6GgnB9V%2F6hmK9CK5F%2BX3Mcmo0Wdqr8j1J2NMJbMDPwXJTqd7Jj4fcBE%2BEa4MEhE0NBMqw%2BMwQYczAU0Hbs6mnySsTPp5%2B36bpNQG3Xm%2BY9Zy4zFmkuXTV3gnhxJ%2BgmMA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a33a5387bc234c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"gs8oh4726epcvcej6mt71dnbmi","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=gs8oh4726epcvcej6mt71dnbmi; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":32,"size_decoded":928,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d39eea13edaede3ed267123a74c00ba","sha1":"8ba879f9d7e646a65cded6aecdced259033c1545","sha256":"de6d1e5eef0eca8a7c575fed0e19523fbf1ecff9a1f71f6ff8e488b09db38318","sha512":"586fdff4e4fcfd55b5739a9c2b9df5fb1f0b55b5975a4b9ce4a2a2652f7f920a3dbbfd4901a956814c1edf862d5a26ae97f011f6c692db033bda61912a5bc56a","ssdeep":"","tlshash":"2e800030283c00a38a02000a220e028002a83cc83e002f28ac0caa28030f0a0220003a","first_seen":"2026-08-31T07:30:28.762566Z","last_seen":"2026-08-31T07:30:46.930109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":0,"dns":10,"connect":3,"send":0,"wait":394,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetphilippines.net/","date":"2026-08-31T07:29:44.616Z","timestamp":1788161384616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetphilippines.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 07:29:44 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xocu66%2FOLuE75R3fGrT3EizSs6R0mtmFB51GuG1S2jS7x2e7bba3S7eoL4k5LjgE%2FnSft%2FT1qNr3MxiFpyoPAqHptk8yLMhhxCMFYSfa6W7Pgtqlw%2BA%2B%2BJDmjtiaAVvGd9pn0uqb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a33a536ded490b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89220,"size_decoded":16245,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-09-01T05:22:11.871965Z","times_seen":13970,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}