{"report_id":"2fe13090-6d7f-4180-b90f-bd676735063d","version":0,"status":"done","tags":[],"date":"2026-08-11T11:06:57Z","url":{"schema":"http","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"104.21.92.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"title":"Rainbet online en Argentina - casino y apuestas","dom":{"size":64160,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63982), with no line terminators","md5":"046ac00b900a02904453963e2c6f53c6","sha1":"27da3a1c25778c079eba2df6373352bc2912dfe5","sha256":"a46dcb9e88d24beebf79170663cf1096399ab18c1283ada69af1b2ef650b2437","sha512":"ea89642a5a2240f6cbec0c110bf571b4f6da60b8cd066d6ded015c9f9b6265863adb4dc0a7507870c1fcf9bc9db1691c5a3f54cdfc9aa539435fbe7fc2712111","ssdeep":"1536:2j446RYynqouT3xT8zs4jR1mv0YChHEkkgO8:2yRYyswR8vZVlk","tlshash":"f7533ba224840903d763a3cacba4f3c7227d434ca47354146ab593db4fc6d75a9b93eb","dom_hash":"domhash83a1669fa94558b0bd6fcefbf7766304","first_seen":"2026-08-11T11:07:02.244959Z","last_seen":"2026-08-11T11:07:02.244959Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"104.21.92.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T11:06:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-10T08:03:00.460584Z","alert_count":0,"request_count":2,"received_data":19348,"sent_data":956,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":10194,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rainbetarg.com","ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-24","domain_rank":0,"first_seen":"2026-08-11T11:06:58.050348Z","last_seen":"2026-08-11T11:06:58.050348Z","alert_count":36,"request_count":36,"received_data":1106575,"sent_data":18445,"comment":"","tags":null,"fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/01fbWl2b16bW201a.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0ae273bf15ff13728194c136edb8270c","sha1":"e179328120ef0eaf6b50a411bdb9bde241c7632a","sha256":"26c8bae0961fa688a38c711ce6532cbb57d9de50a4dfa1768a2d575c32ec8afb","sha512":"42753cfaa2374261a73977f9057bc2e07d10ec847496f42d323671cc1aaf046e0ca8ecec4448a2085259212fcf092f14c27efa0189e52dbc0cd01ecfed20baf6","ssdeep":"1536:bHIv9lkly0hZpFlXwIe1EdTLTKSgJ6n6uaSD7AvlMctIgL:boF+wIndTgJ6iSvA9F","tlshash":"50d309e83992f6616ab702a710ef1807733d1a1b280c4950a615fdde75f801ab27bfdd","size":134389,"data":"","first_seen":"2026-08-11T11:07:02.276202Z","last_seen":"2026-08-11T11:07:02.276202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-08-11T11:22:34.535798Z","times_seen":1731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"509ff8069bc1ff19375ed2b1a47042ab","sha1":"d1ff8f4ab78730587f0fe8d8f4490da5e7bb2344","sha256":"6f14acb6d4260546d5f0070e9a15e3173198d5b65c50405c9f3f46905c676c19","sha512":"2986c5dcced2a86a25e4007c78fa5d8a463318b0a19d49d7327bc60cdb835ff909a0b36c6d75174b2d386273497cac707102567d5a87a55c1563a663cdee1854","ssdeep":"","tlshash":"c3f0dc79970880829a93038ce4472c6aecba36a00496a4682f784c4823c4be102cfb3c","size":444,"data":"","first_seen":"2026-08-11T11:07:02.277315Z","last_seen":"2026-08-11T11:07:02.277315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c738634f74a60229f3720a52876c4566","sha1":"a3c290cfb4b58dfca24b212f976b26fd6069250d","sha256":"52b5ba03f3a9a9985569df90cbc216b11100bbb7630cf6be8e59c7802f8f6ac7","sha512":"1e2144c4814adf1dc828e0be7353300d52e968cbb135521ade1393305919085e3018ba6666e2e79bb2c6b4b1f21fb613883b7dbab5d49b65b756699e851ba7ac","ssdeep":"","tlshash":"59e0231d5648d3c080d31164a44718b9bc7d24541cc775fc3ca61c052681ff1018eb7c","size":432,"data":"","first_seen":"2026-08-11T11:07:02.279345Z","last_seen":"2026-08-11T11:07:02.279345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea7c8a727a27ada1db68718b8a49845b","sha1":"91dd8f5c0159e306ea8166d835138d55c866b3e7","sha256":"1661fd1bcd59b4825118a1f8dd2bb162ade02bf7fb5059a06099702292700ca7","sha512":"439dfdce34248d9f204c5763babeea1849ba7d43877047d9a22172180ff9ef7fa1411938db2f6e17817aa7fc460e7e80b2d50284cf918ae5686c0a108bead9e7","ssdeep":"96:N1rqbryvnQsffYGUNLiaYo/kfDHA2Chjrnjwvw4AA:NCryvnvYGW3/lXjT4AA","tlshash":"bba1aff1588dca3397fdc7cb10e110c99f6db3054498eb5af6a67c041ad0ac72ba44d2","size":5000,"data":"","first_seen":"2026-08-11T11:07:02.280245Z","last_seen":"2026-08-11T11:07:02.280245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1720829d58ad8af4a6aeb95d4a316a8d","sha1":"a6513a5b73c36a4ff83651f33d87657761fd8897","sha256":"9a9528eaee8b2de1278029388d8c9e38a371e02a149cbf7aa527b00da3731436","sha512":"5e8951c9be345f47f5884ed544daf27ecef50b5ed5ace0f01e462e860e619a8d76f5dd24d039f540656ab3b890c3fb79ba919765ca922ec34806eb35d83e6773","ssdeep":"","tlshash":"d0614abe235925b3cb4543919e575893ac3c8e0c22d1a58cda1d8ca8bb82e1bc35e535","size":3360,"data":"","first_seen":"2026-08-11T11:07:02.281373Z","last_seen":"2026-08-11T11:07:02.281373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6adfd083b5159ba4860e262bdcb6d04b","sha1":"f32af9d35acd766151f0f1dacc944a3a66dce3ec","sha256":"118db9a1864ff8c2d0d75ef3c3d6727b67ad3428f770ec2e4e4fa33187199f83","sha512":"dcc33eb38f061edd1aea7c41e1ff4335c3f101ee90d0d2bd4fb9597041c0cefaae2843b2cc8ad5e513c108ae69a327cadb6cb3ff9db4a488e4f2a5c78e8009cc","ssdeep":"96:N1rpxz4Mmm8gYgI20YpMfEQ9A/oI/v7ufawZAR1HwPKIm6SZI3A9OGvKiwfJzT1:NZz4QT5Irf4PCF+R1HwPKImFZI3wBvKV","tlshash":"beb11a172be9e08b0bac47d44aadc8c3097d4f89d4d8a3e80536af6ef547557c2e8538","size":5360,"data":"","first_seen":"2026-08-11T11:07:02.282625Z","last_seen":"2026-08-11T11:07:02.282625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80cb207e243ae89896da6fa2d7fe6ee6","sha1":"b41c899d95b6ac4e13f258eff0ba800016e83cd7","sha256":"7dabda0cfb2c260392ba1b9a023563c77ccf695d3122bab6f310748ecd0f4aa5","sha512":"6a4f8722e192d7721a078cb2e649ed0fd4e58edd4671d18df2bf846ed4577bb3248ec6df760cee6290d5b6dcbb982e821f89d5139075d0047fb33e4e68083606","ssdeep":"","tlshash":"831163dc5d88880ac6670a157cb74c3bb83d1665189bf29d1c40eca0210abeb848f83c","size":892,"data":"","first_seen":"2026-08-11T11:07:02.283842Z","last_seen":"2026-08-11T11:07:02.283842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0ae1419220158004b5842ca471a1f564","sha1":"44aa6d65fe307c13ca04f7017822372f71bd3d01","sha256":"1338d6b70a7a84dfb4d0bb5d2ea674e00e213a2ee5a101e313444f3f0c5eab4d","sha512":"525bd27e7215c9b69b45af5019f30cfbd5d68acf87d83e8dc6681014777dd1b453bef1881040c6e0cdd54c08cd19b61d0198af19752613b0dc5abe2abe2c697c","ssdeep":"","tlshash":"80414137316631bd80bf96da8b8b59a473221007b305cd243e6d8b892fcd8a051f67e9","size":2328,"data":"","first_seen":"2026-08-11T11:07:02.284981Z","last_seen":"2026-08-11T11:07:02.284981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d27ac932e052c2da358b714f0382433d","sha1":"f9a933164c20a018897f16d9fef874ba57e69554","sha256":"6f26f96d47fda50c4b3fae93779b88d9b11a6e54bd4d5fff17d1ed38166ad5a3","sha512":"77b34f8e27ff3725a9ead9467469303b70e1db78df4a47db47ea591ba9f24535411a7b22eff35dc33c721ade94ec0e9c3a218b31f9a7b93750c55378bd860c8f","ssdeep":"","tlshash":"49f0e21a14962c37509b32e9e66b32043132804330028e81f99c47e08fa08579cbabec","size":477,"data":"","first_seen":"2026-08-11T11:07:02.286412Z","last_seen":"2026-08-11T11:07:02.286412Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/5c17DEv7aIFae4cb.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"722790d538c243b74d7689b42d0ef4f0","sha1":"697cda3a8c63589fd5f586d864b70c76834d1069","sha256":"e8b278ea69fac582308b8efa6a75705060c9431ce6d8e150c630782c2a7eafad","sha512":"9f2022816856ac4bc62cb4aa06519814313f4ef04541c4a7094c93aa3d0ca791ce11e510930002b09ff862e26c68865f0a800be99eeb9d1c5253a61c523b37a0","ssdeep":"","tlshash":"390120d06486a43277b78c65c427948bb03e3198a5dd8fc0f387d1a0242a2e1c213a13","size":745,"data":"","first_seen":"2026-08-11T11:07:02.262993Z","last_seen":"2026-08-11T11:07:02.262993Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74c71c9e7bf0178745fc4fa3ccdfed64","sha1":"ed9e783b2aabe2b5bedbba5a8fad7b702085deac","sha256":"47745adf5a0bc53ace8aa00fd4aad5c3edac9de8375cd616b12299fc34811fca","sha512":"ca27407a45058926f10399547dc33b75ee6ac952c8fccdac92fedc823c2e414bab0a8885709f10593533efc811c5aa07051cb972712be900b135737844d43cd3","ssdeep":"","tlshash":"f181cf4e29e32671a96770be1faf810438b211431509ce107c5cea948fa49b452fafec","size":3828,"data":"","first_seen":"2026-08-11T11:07:02.287476Z","last_seen":"2026-08-11T11:07:02.287476Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/resources/root.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d121050bbb9b9bfcdf60a8d2e683077","sha1":"ebf8c634926523bd4235b9e87dbebf3a5f408464","sha256":"154b3aa0fca385c5d0991d72ff71bcbc8be1e6698773fffbaee919b30177fd9a","sha512":"3fba12b6014acb0f9fb333349de15741024aaba09725e427d259f3907e6db2228f7a030730c34d1166f773ea6e771360ebc63ea4cea45f7aeb33cba67a5fc85e","ssdeep":"","tlshash":"2251d7f93185f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","size":2681,"data":"","first_seen":"2026-02-13T03:48:47.338373Z","last_seen":"2026-08-11T11:07:02.254633Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/7c5cyBjzXJbu9e5e.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","size":6524,"data":"","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-08-11T11:22:34.549484Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/7c5cCafI307R9e5e.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c1f5e4721f80bc17282cf4352009e7ac","sha1":"4e92aa40aa2f03922d0f5cdadb185350c57d8006","sha256":"32a0143d719206a93733f1e09e4d5b4a193f6cfb81680393e4592f9febec868f","sha512":"0731a23725585fce9ca0d844bcd9887fb30b5a27e2df533cfc7f3af6224b2fc5fb202ecd7edbe6ebd24808464c83c9c4acb669b7cc612f22a57b51ded460df9f","ssdeep":"","tlshash":"97c0228a29a0a13082150cf8413198029b29122c4278b9c0228e846022210c2451a932","size":189,"data":"","first_seen":"2026-08-11T11:07:02.258773Z","last_seen":"2026-08-11T11:07:02.258773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57472f406ae97306e8a05f064d84b381","sha1":"664643e48709411539191d018a539268c3f26fbb","sha256":"db780e98259257f75be2215377113e7cc059bd6dc575242d77068afb5fa7900a","sha512":"baa52eb601e63bd6c9687f7c20739d159ac45c1101da7bd4c6e4a0b04899a1f13b2066b50d225ab01f94f20fefb9f9f0cffb54935d129d3df6785b8dfdadfba7","ssdeep":"","tlshash":"2ec02b0ffd49aa370830f1325c5f3300133f0346c88000c003f1068004f38097167c9a","size":140,"data":"","first_seen":"2026-04-15T04:58:03.029048Z","last_seen":"2026-08-11T11:07:02.288426Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d4046e3382f43e9098963a2e277aa58","sha1":"c360cbf12e0c7484a13daef660157d056c56f479","sha256":"e06480297207729e00da68c00e0b8a445c33be45883c273d1070292000e77b12","sha512":"c5fb3b1eccc5bc828a81c0a20765259c80ea954be3875814f9f0e81fa21162c7daf10747ab57a7649427311de61b8c6029c233222e4167b4fd6fd4e617a351fa","ssdeep":"","tlshash":"6b71b97912111bb33ddda0a9dd246ec3cda9183485db887e384e5cf30628d4381bebb9","size":3556,"data":"","first_seen":"2026-08-11T11:07:02.289128Z","last_seen":"2026-08-11T11:07:02.289128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/50d5DZ6oRXze1a75.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"196107f8be9a1d7c1e99a4b171f4b5fa","sha1":"8531562de4a029407e882be31e9d9e89cca06f61","sha256":"8f8530939c29448e390ab0e5734c6d16a579e37ab03ad9ff44204016f5727fb0","sha512":"6d046463a9164aae83f05e88825f2650a72e6d30c840755eb5b63541a12e57c6f9e77ad7dda359ac1b44b980bb2f1c9ec25a0fc35e6bb664bb47cf4968006249","ssdeep":"","tlshash":"58f054c5d151fabd25720cc1971b03257b2918b88bd0845683bd0d32617c103c513fcc","size":480,"data":"","first_seen":"2026-08-11T11:07:02.271882Z","last_seen":"2026-08-11T11:07:02.271882Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/2b08CYC1upA26c5d.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ce0bd7ac476382d22dea861ee0e7978b","sha1":"cd5f360f3e71ae1f01fe95f5584df7a0ba30df0b","sha256":"fc99c3a0204ed65486ff092036b58d441d22d282525377ad491d35c9fcadcf65","sha512":"1a426743749654622994635d4ee5bf1be9070d1d4be2c53566bd85a71812d51a2182d3a3d99a10fcd3d664fc86fbb64eb6d6e2dd5907d057e2958c8e025e324f","ssdeep":"","tlshash":"65f050e9255b077e465144e4e3e6d90777ac25ff62bc05d1553359851ca2fc3015ef03","size":608,"data":"","first_seen":"2026-08-11T11:07:02.267169Z","last_seen":"2026-08-11T11:07:02.267169Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-08-11T12:56:05.646428Z","times_seen":16097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T13:56:33.357741Z","times_seen":418066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ddb74048e82dae0ae3bd04ab083790a","sha1":"35d87549beababe7ce260571f5d8011ecfbe9d3a","sha256":"258503fadc15e3bd704848b572dd2d005d184e4b11116597f069f02ea7d8d0e8","sha512":"78a8c77831cad81f96fe453498271bc69755754376d456588209f9393e0fe3d08a59226749e626113977da3a0e67e750489fc1ece42cc49f914c056e201df2a8","ssdeep":"","tlshash":"b6f00241d04ce37a68235cd6822f721abd5952f487254080a2fe2d33e87c147d81bf9e","size":629,"data":"","first_seen":"2026-08-11T11:07:02.270799Z","last_seen":"2026-08-11T11:07:02.270799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetarg.com/","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T11:06:28.996Z","timestamp":1786446388996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fsc6yTswppHilHHZl5F1T0GRK6WX1N%2FQ2LpszB6TTFuM5wUPPwGTsV73Bg0D7YkKAPNq8OW%2BDz7caPMY3Oycf3mKukrRMQiv%2B7b8z83Usmrj8kPGXHNlPG5am%2FeYxnuetA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56b8c7a5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64294,"size_decoded":20614,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64116), with no line terminators","md5":"51df55c1741e9b1ebdef5a550c0d8315","sha1":"c9da39cbe60ccf9a550f42863188cad4a7b51afb","sha256":"62e4705d876b26b11afd3dbb1b1eb22883d33efedee813d4a9ca2cb9c458c227","sha512":"ea011ce2f16bb7bc3a74eb33b28eb3ddac609db492924a6c48c70dd76bea14842cd03a4f0c5c19c174b4981f830fad11d3bea80e78ae656861e9b85589c416ab","ssdeep":"1536:U/446RYwBAAEaj0w32s4jR1mvLwCXHEnCgO8:UORYwfwR8vMlCk","tlshash":"74535db224840903d662a3ca87b4f3c7327d4348a47354145ab6d3da4fc6d75a9ba3eb","first_seen":"2026-08-11T11:07:02.246713Z","last_seen":"2026-08-11T11:07:02.246713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":29,"connect":14,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/pay-pix.Mt6Jr7Wa_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.744Z","timestamp":1786446389744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/pay-pix.Mt6Jr7Wa_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdwhI4ke6DwC9rEM%2BDkdaxrKzbqQh7hVrm37UxwCLSEclYFDpekdXHeBHymISM0hNOjppWFSm78Mo4rxMj0GyVAksO0oQjI9isxf%2B5RZqUxycC7iODvG%2FuyTVsvqc4U3Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e0539d7825660dbb34d89b3fbaca8e57\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":2098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fae52583b1d7f5aa840b947dc00b2c33","sha1":"1af407cd08b6049c01649668d53696f021933093","sha256":"f1de2ba26bf3ed69990bdaaea06c5cc2db5245d4f8d3b8891fe154fe7e05714d","sha512":"1bb0b0935fb71caa5390584a6a04c28c6d539bb38bd8ac1fcd59cbcb73a1b061bbbdd349d25bc728f4425312cb1fb31005e13f4cd3955265bea56bd6c3946ca7","ssdeep":"","tlshash":"675172ec532c539c288bb3bc6f6aa1e1132d72bb327996d4b59e4b3440432d6f883d01","first_seen":"2026-08-11T11:07:02.247931Z","last_seen":"2026-08-11T11:07:02.247931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/photo-rainbet-2026-01.CJ1PX-bc_2odCPX.webp","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.752Z","timestamp":1786446389752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/photo-rainbet-2026-01.CJ1PX-bc_2odCPX.webp HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3T%2B%2BRicao1e5jaLEvPcHRHSsY1i70yKFC4KC%2B4bKM7O7AjqlSV3tj%2FxkyL2ZrNka4pDSpUa5BPPECiOsqhiI%2B9bL%2Fy8tPLF%2Bg%2FGR6Qwk68uA85HxOJn5l%2F%2FJL94Iotbyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8206a1d00012d4e5a45bb4b18a3c8431\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a296c56feccc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 181072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181072,"size_decoded":181892,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 875x875, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed9d96ca24dfc48a0cbcb5ff3d66ffd5","sha1":"11e2e4affa170df371eddf224f8708c51657215b","sha256":"3e5162893319fc93971b6d5e3b23ed06a66ea93e925c3956a5d2ccf82910e121","sha512":"4b0de731ddaeb7d0fa6976fd437b9262d9ac989a6750a9f257fe12d0d28f3368d15789ec0a77c2603bae2b17e45915ba1c0f59267ad90d73454e49cc313717ef","ssdeep":"3072:sbGy2gwbt3hbPXAMCZOWnKq+yBQfBrFoSKBRZshVCqGkSn3ZnZikSmNYS:j3dPXAFt+sQfBrFeuR2ZBx","tlshash":"4c0423d9c0dc4ce8055a50238795bda8d81eeac236097ebd74c335d875b82b7c8d9a2f","first_seen":"2026-08-11T11:07:02.248866Z","last_seen":"2026-08-11T11:07:02.248866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/837cuRVVAWWY152c.css","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.538Z","timestamp":1786446389538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/837cuRVVAWWY152c.css HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zr%2BiRy1E%2BqosgzOTHo5o%2BojtP6eEy%2F4I6XRmWS%2BAzC9LnbUgjh%2FbqbsoriYUbk2yqcciAfALhzmtfRlILIAeM9AzaroUy5brjaaOHikeOq51CWFFcwkXbWt4uTaBvjy2Kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ce561830d891dd4753f5d8cc21355549\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56e9ca55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7359,"size_decoded":2689,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7172)","md5":"35b7597a795218696fd5d2e70a00481d","sha1":"8e30a7d8e075ba7caa26f62c6fd3fa3f7b3cfdb9","sha256":"78a292a9092f5bc2dfeedf4b49ecd5a305942db6c94b4112037153ff628ccbe8","sha512":"ae9b09c9929609c82924e6809cc79103317d6fc0235b4458e16f836aaf6074951551205d77df97f85be92aa6759195b359516759970301b770bae613bca20b81","ssdeep":"96:TPLjgC7jg528fzDAKSMCIxMCI6aIwUMQITIMCIWICaM2IFIoYVY2uzT:TP4CQ1fz7SMVMWMiMTMRQBuf","tlshash":"14e10cd9910060b98e57992316cd192ca838bfe58d235d2df123494d9ce6bf833b373a","first_seen":"2026-08-11T11:07:02.249977Z","last_seen":"2026-08-11T11:07:02.249977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/5d2bDc5k1_LY00aa.css","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.539Z","timestamp":1786446389539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/5d2bDc5k1_LY00aa.css HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pd3w9CUZIxJIsqzXktOejPqML8SytFPFe92KBS2q20twtyCVAcoQeXru5lubEzzUAnSBleDLMooxJP9BjuFfDTaqSZ8IycQ5Ol1i7ta%2FHTq05P9fbYvmJJljWXyjPnsDBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6bb4932c7ab1c3a3fd677460f0238999\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56e9ca75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113195,"size_decoded":14331,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d0ef8676ec69d0c841365449d099505e","sha1":"a1c9f84c4f9b410a81ce1c96f50dec1eb39edb67","sha256":"5ff8990c005b9cd57a62bffaa2fa6dfe5da10e058dc3d83e32b5b410a3dbdf9d","sha512":"5dbfda0560267c82ab5242e17cf94832fd386b3b7990d51537a2b2a0e236fef237a6016ebc4851f50d2ded5f81b8f1a7c469fa5ea372e384543c555b3af41c3e","ssdeep":"768:HkN27cPc+S+mmqyhLCJjBgDkhudfZOEi0YobKVUFdOIHYwGcCWY4WPYWcgRBIWN8:37cPc7/ahLCJjPA","tlshash":"73b3b5356a3434de707b40244ba5758e122c487dd1240678e79bbf1ecb9faa27f39e48","first_seen":"2026-08-11T11:07:02.251032Z","last_seen":"2026-08-11T11:07:02.251032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/5d2bDGbjJFIQ00aa.css","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.541Z","timestamp":1786446389541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/5d2bDGbjJFIQ00aa.css HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwcM10LLeCjk%2F9p%2BpT8PMMtNT6ITYMQFrwlAstiSGAieGdWqmPVZlvWmTZ7cb0HsCWBWRi0xPpQfjEarTGH22ccjPhz3e9XgEB6cTasm6xlwgfmCtuI2XTLbaPFi5tSiIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e0dcafbafdad71d3401616096d068a0b\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56e9ca85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43919,"size_decoded":9562,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (43918)","md5":"825fa4fa54b73f4ab62e2226e60bf669","sha1":"0d21e57a853770b797e1c3f64f334fe4a87aebf7","sha256":"08c34474919920c4a7538fe76ca3edb4f6f9659e9c0c5ca6fe2f70289defefd3","sha512":"9e9590c1e26f05466b6b4826295b98a4fd6a06523dae24af28ac3afa2bdbd0c4258798f5d3eddf56a994222966d354a3e99fe74a33a53ccbe1bae4e5220f9d36","ssdeep":"384:GTruc1UcXNuc1UcXIYKTLXTLCvVnbnMle6Fle6Wscw004G/TYiZpbdE28n21/cnY:Hr3rnYKTLXTLCvV6W6wyjHcnY","tlshash":"8f13e8ddb72031491067d5b98ee2bd582326a4b8bf435ad8ce57c7a46b8a1c53f12f0c","first_seen":"2026-08-11T11:07:02.252157Z","last_seen":"2026-08-11T11:07:02.252157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/resources/root.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.542Z","timestamp":1786446389542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /resources/root.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cqq9OyukdcHKACvfqmYXYxsW8KE0tg5KdxCcN6Qg4JG7poo5%2BaINuHgOGUAR2KzMtEoniv%2BryBzbCxwtz%2BCtL%2F3aECR2G06ymhnjVkOk4H%2BqptkgOuja%2FjQ%2Fz2hI1Vfyiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\netag: W/\"a80-19fa90adfd0\"\r\nlast-modified: Tue, 28 Jul 2026 14:04:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncf-ray: a296c56e9ca95694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":2440,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2680)","md5":"1d121050bbb9b9bfcdf60a8d2e683077","sha1":"ebf8c634926523bd4235b9e87dbebf3a5f408464","sha256":"154b3aa0fca385c5d0991d72ff71bcbc8be1e6698773fffbaee919b30177fd9a","sha512":"3fba12b6014acb0f9fb333349de15741024aaba09725e427d259f3907e6db2228f7a030730c34d1166f773ea6e771360ebc63ea4cea45f7aeb33cba67a5fc85e","ssdeep":"","tlshash":"2251d7f93185f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","first_seen":"2026-02-13T03:48:47.338373Z","last_seen":"2026-08-11T11:07:02.254633Z","times_seen":38,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/45bfde9d3516720e.woff2","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.738Z","timestamp":1786446389738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/45bfde9d3516720e.woff2 HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://rainbetarg.com/manifest8a9b46f2/5d2bDGbjJFIQ00aa.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTeM2sCxAeYSaouodPFxC8KE6TiFgD5qduD9iFGShMnOS0X%2FUuOMRN6D5MsvqNN4pS3M5ib2p%2BXwcqszUVaJCeW1Wteg4jR0eA6ifhGDjt5Q5xajgT67oF8TDBoOZuYkBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0b0ea652bc912ec977d52482e719c42d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a296c56fdcc25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 348088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348088,"size_decoded":348895,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 348088, version 773.256","md5":"79a46502cda65b51e0c553c81e760112","sha1":"6662185ac0ea5c490c0f371bbaf79a2bed81af2c","sha256":"6b019a061b423a7b074ed8ca11e7795c9475aefd375c84e0841384718d52c613","sha512":"ff49ae738829abc122f7708dd178bb8577992c3335fd3fc71054ad84da2a731bace7cc45df6c729d7e6dbde8cc8f5eaf06fe68fabf8ac9c8f521d85658f0c77a","ssdeep":"6144:pVNYs7DLmquzbfi320EOLq9ao/sJWZMO9uRNiWk8ElwEaY87:pVBLmquze2BZQc+O9uRxjEljb87","tlshash":"147423c4bbf446546f67718df63f7a39a4626c2ed7c2f8a0561d90e1532b0ca1423ed8","first_seen":"2024-04-15T15:03:16Z","last_seen":"2026-08-11T11:22:34.545016Z","times_seen":364,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/mercadopago.BK20nVmQ_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:38.347Z","timestamp":1786446398347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/mercadopago.BK20nVmQ_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVvlGK0BJhYYxhArYOy0RxKx3gvsNycCeZd503%2FjzVXgWbvDdsL0gwB9ZC2P0ni7RWDIl7WLMmmJVRGmR2lBGAJgEYZAFEZtyAqqJ%2BCxTbTLAgWEF5lnGug9K6bOwoDscQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"054079ed1572fc9ba282c14c05f69549\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:38 GMT\r\ncf-ray: a296c5a5affb5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6943,"size_decoded":3890,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d23035ad42e42695a6bc871f151169e","sha1":"e18b02094b13d30c80a7456d4a4758f59cc0a908","sha256":"6ccb395837b5a221496db0f07d1b7b7a8f57d16ad0346bae04444c46a34de42b","sha512":"3b51c7c323a1e4bbb144e2f2600fd47c610aa87b0e01ccebf5ef9c5615f0f2564e8d3bc6bde345666ec3d49e4814be94972552c85d83e7062133662905d36650","ssdeep":"192:B53NVdMOLcoUoeOYtNVPWFlZdM6A6RMggioZX:B5zekcoZe/PWTZm6j6gMl","tlshash":"41e1fff9126c539ce997f34d4b3ad9a0570ee0b9756ad1c44d8fc7b8a04ba89fe07810","first_seen":"2026-08-11T11:07:02.255694Z","last_seen":"2026-08-11T11:22:34.537311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/pay-pix.Mt6Jr7Wa_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:38.546Z","timestamp":1786446398546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/pay-pix.Mt6Jr7Wa_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdwhI4ke6DwC9rEM%2BDkdaxrKzbqQh7hVrm37UxwCLSEclYFDpekdXHeBHymISM0hNOjppWFSm78Mo4rxMj0GyVAksO0oQjI9isxf%2B5RZqUxycC7iODvG%2FuyTVsvqc4U3Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"e0539d7825660dbb34d89b3fbaca8e57\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:38 GMT\r\ncf-ray: a296c5a6e8255694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2758,"size_decoded":2105,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fae52583b1d7f5aa840b947dc00b2c33","sha1":"1af407cd08b6049c01649668d53696f021933093","sha256":"f1de2ba26bf3ed69990bdaaea06c5cc2db5245d4f8d3b8891fe154fe7e05714d","sha512":"1bb0b0935fb71caa5390584a6a04c28c6d539bb38bd8ac1fcd59cbcb73a1b061bbbdd349d25bc728f4425312cb1fb31005e13f4cd3955265bea56bd6c3946ca7","ssdeep":"","tlshash":"675172ec532c539c288bb3bc6f6aa1e1132d72bb327996d4b59e4b3440432d6f883d01","first_seen":"2026-08-11T11:07:02.247931Z","last_seen":"2026-08-11T11:07:02.247931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/bitcoin.DoxzZv0S_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:38.748Z","timestamp":1786446398748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/bitcoin.DoxzZv0S_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHCc%2FVHE3FXU9byjfMIE48XpZeOLiUmQEuKhqFzL1D0njgqLZ%2FlxBwKqZqsYQBV%2BuM%2BDB22KV9jdxFEH%2BMYG2PohiHaM33l1m9FHrNqjPdATN%2Fzusq9Or5XNpEfdTh2ceQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3ae39c41cb341abedf7f1216594a32c2\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:38 GMT\r\ncf-ray: a296c5a8283e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1142,"size_decoded":1416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43925932e07b862eff43b85bb2cace1d","sha1":"772f365a574406443ef79e529574e37163a46c63","sha256":"eaf2d0a19638b3d1f57461f1540bd3a19be74aff4ecf5d00d81b6a111e850a64","sha512":"91ffca8adabf3910ca9454d221789542192d72456aea5e397eaa90ddb1f10d40534e5de740feed280da910f7bf50da4bd13f60a12e2cc35bd4ef076fa925cf87","ssdeep":"","tlshash":"50215b3d8360d3ed92a6f2fdaf645091904da0c9d1f7c34a92d58a1086d39caf9bd48b","first_seen":"2026-08-11T11:07:02.256649Z","last_seen":"2026-08-11T11:22:34.543417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/mercadopago.BK20nVmQ_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.742Z","timestamp":1786446389742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/mercadopago.BK20nVmQ_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVvlGK0BJhYYxhArYOy0RxKx3gvsNycCeZd503%2FjzVXgWbvDdsL0gwB9ZC2P0ni7RWDIl7WLMmmJVRGmR2lBGAJgEYZAFEZtyAqqJ%2BCxTbTLAgWEF5lnGug9K6bOwoDscQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"054079ed1572fc9ba282c14c05f69549\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6943,"size_decoded":3883,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d23035ad42e42695a6bc871f151169e","sha1":"e18b02094b13d30c80a7456d4a4758f59cc0a908","sha256":"6ccb395837b5a221496db0f07d1b7b7a8f57d16ad0346bae04444c46a34de42b","sha512":"3b51c7c323a1e4bbb144e2f2600fd47c610aa87b0e01ccebf5ef9c5615f0f2564e8d3bc6bde345666ec3d49e4814be94972552c85d83e7062133662905d36650","ssdeep":"192:B53NVdMOLcoUoeOYtNVPWFlZdM6A6RMggioZX:B5zekcoZe/PWTZm6j6gMl","tlshash":"41e1fff9126c539ce997f34d4b3ad9a0570ee0b9756ad1c44d8fc7b8a04ba89fe07810","first_seen":"2026-08-11T11:07:02.255694Z","last_seen":"2026-08-11T11:22:34.537311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/mastercard.yH7O8N-Y_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.750Z","timestamp":1786446389750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/mastercard.yH7O8N-Y_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bjrp3Wrmv7Gjyc4V%2FdfObsABswCJuIkguOUBoLJ%2B4K7E3aUIwyLvW%2FwXnjiOHC52DToz4vEXu26BXwG%2FBwFXBcTWiNLumF7U7ub7dQpb5ngfi76vVHr9v%2F1nTf6dgQhiPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c28927d01da89900dacbd979523b2ff0\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecca5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":1247,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d888bf5bac559dc1db05f740366adb05","sha1":"091c35db840f860194ab7cd2dde3bd878c007917","sha256":"221fc2e6114d4cddc35aba53f3c0009b2500bebf82b66e8c3c22f54394b13120","sha512":"75df067fd5211848a18343837fbbe4bcad17d5dfe052901c6bb35f2feddd6e585ad87e20002585016af92c6af7008e17818a35f23c3f4fe799da2fbfeed509b4","ssdeep":"","tlshash":"5d119ee537688a2c89a64775ab3c55c1521f22dc385684ac6a7a321420812bfd54dad2","first_seen":"2026-08-11T11:07:02.257747Z","last_seen":"2026-08-11T11:07:02.257747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/7c5cCafI307R9e5e.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.761Z","timestamp":1786446389761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/7c5cCafI307R9e5e.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nt2Q10v0gNc1pZo1FSEU%2FQ2B5uzjOcBj83r7kD5f1oynXptevkrLXHa5JSmYbTooUqeYZtwV1CB5pXKtkIcv%2FmlVqdW57CMB3VhmYUJ08wWsmpPuehHt1tWDE1bJGnFauQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5ac5ea4a53184df361308c376efef28e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56ffcce5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":969,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"c1f5e4721f80bc17282cf4352009e7ac","sha1":"4e92aa40aa2f03922d0f5cdadb185350c57d8006","sha256":"32a0143d719206a93733f1e09e4d5b4a193f6cfb81680393e4592f9febec868f","sha512":"0731a23725585fce9ca0d844bcd9887fb30b5a27e2df533cfc7f3af6224b2fc5fb202ecd7edbe6ebd24808464c83c9c4acb669b7cc612f22a57b51ded460df9f","ssdeep":"","tlshash":"97c0228a29a0a13082150cf8413198029b29122c4278b9c0228e846022210c2451a932","first_seen":"2026-08-11T11:07:02.258773Z","last_seen":"2026-08-11T11:07:02.258773Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/favicon.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.885Z","timestamp":1786446389885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiEMwAfmoIYCRtVItJebEz6Ixsn1EXc7kqV0D6%2FaGZJDeIFsE2BlfnqsjILWLFZEFzfYlXDoGmDMHhLJgvMICu6L%2BE7VlTYtBSWWRwODYwyjcz2SZy830%2BBe92HQF8M67A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"581535726d5f860b4ea6f587f03eabe6\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c570ccd85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51066,"size_decoded":19099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"878a21955b5cea13ee9d16e3b69594a6","sha1":"9bbdb82cfc613b252eca9277497f5731b967cc89","sha256":"d7b6bfc4f3ae047322c03eede671e173cd5b472f31789417be73447d292499bb","sha512":"2d99f2b8b75a192602d01eb5e1699aafa62d14bf27348d17836836dae02976c62067b59f8cc9915ecf46945476d02b907c60477f918867c2ddc548ea6319f2d5","ssdeep":"768:YPbLOZnUSGTIOg4PPB8TdFBll1eMEDCrd1PbmihWqx/Lr0N2jW+vcB:+InaIOgQGT74Wd1PbmihPx/Y2jWCi","tlshash":"e23332a1a675f2a41c43c3a4ce7a91d22b1fb4fd9b0e52d931b2d37471467cee442e28","first_seen":"2026-08-11T11:07:02.259721Z","last_seen":"2026-08-11T11:07:02.259721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/pay-interac.B7cx1mKe_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:39.346Z","timestamp":1786446399346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/pay-interac.B7cx1mKe_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByP9gzHruR9WLHt1ezCdi3igMQ5wAfuQqkynodcDhW7b0Kx1fNQbCSH1%2FxwBCTnRfPcHIIkhDnKWatI9bLME1cikEI%2FeovlwEAL4AutRnTkoeZykxvCbYM7TbY6Qo2Cjdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bb61e2d69c45bd3b7a527456a39f7a5d\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:39 GMT\r\ncf-ray: a296c5abe88c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3378,"size_decoded":2454,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d19fd7c703a74f0ab223bf7ece5985a6","sha1":"19a48c3c399d6c1b7ef02794243bfd06683d02d4","sha256":"9169098388273e628b2707e8a2f9e26a49e1f068ab3c8aaa3b581afd4611a3d9","sha512":"b254c4de18855605d499415e3301e92e70ba22148b0049851d1865a48db77ef5b0c568dc566d099cc6aff7fe8a9c26b8637827f3d82e29ad3495ab3fdf94d7c9","ssdeep":"","tlshash":"4d6122c96364a7dca8cfd94def7bd890430ea095b1a695c49b8f83a8c10f588f947458","first_seen":"2026-08-11T11:07:02.260612Z","last_seen":"2026-08-11T11:07:02.260612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/pay-interac.B7cx1mKe_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.747Z","timestamp":1786446389747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/pay-interac.B7cx1mKe_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByP9gzHruR9WLHt1ezCdi3igMQ5wAfuQqkynodcDhW7b0Kx1fNQbCSH1%2FxwBCTnRfPcHIIkhDnKWatI9bLME1cikEI%2FeovlwEAL4AutRnTkoeZykxvCbYM7TbY6Qo2Cjdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bb61e2d69c45bd3b7a527456a39f7a5d\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3378,"size_decoded":2447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d19fd7c703a74f0ab223bf7ece5985a6","sha1":"19a48c3c399d6c1b7ef02794243bfd06683d02d4","sha256":"9169098388273e628b2707e8a2f9e26a49e1f068ab3c8aaa3b581afd4611a3d9","sha512":"b254c4de18855605d499415e3301e92e70ba22148b0049851d1865a48db77ef5b0c568dc566d099cc6aff7fe8a9c26b8637827f3d82e29ad3495ab3fdf94d7c9","ssdeep":"","tlshash":"4d6122c96364a7dca8cfd94def7bd890430ea095b1a695c49b8f83a8c10f588f947458","first_seen":"2026-08-11T11:07:02.260612Z","last_seen":"2026-08-11T11:07:02.260612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/apple-pay.BL8T_KrH_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.749Z","timestamp":1786446389749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/apple-pay.BL8T_KrH_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb%2FoHPmFZ2oWcLeC0mObtMOFp1vIgaQ%2B280GkHKfA58vr8hyK%2F0hpRo%2FYTZ2ZS8E%2FtzwTlTcRjRAH2BhIAYkznS1FT9RPOL6VpTavU7P2702pu%2BWHCZH7hjaDEPrYWTvaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"43fc32998196c5dcd62c060dc5f9906d\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":1763,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0015102f4d768df8d7974863a7bf41f","sha1":"726dbfc5aa34dc8ad08946b22cd3f0841b58da8d","sha256":"f81dfb1b6c4a2c209abf4344f3266c683df8cbee81f8d320c0231eeb06ffdd9f","sha512":"dc7e459cce2f873c0309e207ab71ad4d3dede2b0b404cce05b3e400c793380cd87a80f92e0e6ab9f0f86a88466b910ce87374e73f1b996f3a8cb71bb367f3466","ssdeep":"","tlshash":"6b3175f85bb0908ce6b74e7def7b38c61b0fb4ad1f2100189494bb4e64c98c4ad09918","first_seen":"2026-08-11T11:07:02.261735Z","last_seen":"2026-08-11T11:07:02.261735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/5c17DEv7aIFae4cb.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.760Z","timestamp":1786446389760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/5c17DEv7aIFae4cb.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19C9ssPRMiNTkncuRffTxMVkEPUvqAu8AzYDF1L1acZv65%2B8A%2FtPJoEfDW0Fb%2FHj%2FS8YLu%2Fq7Qf%2FECwivU4KrAG1tTd3vJiw6hsv%2FYBxnyzOJRtcDUWrIK6Txq5Zxjm3FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"0c3cdfea0a95379305285cff1bfbc515\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56ffccd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":1305,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (745), with no line terminators","md5":"722790d538c243b74d7689b42d0ef4f0","sha1":"697cda3a8c63589fd5f586d864b70c76834d1069","sha256":"e8b278ea69fac582308b8efa6a75705060c9431ce6d8e150c630782c2a7eafad","sha512":"9f2022816856ac4bc62cb4aa06519814313f4ef04541c4a7094c93aa3d0ca791ce11e510930002b09ff862e26c68865f0a800be99eeb9d1c5253a61c523b37a0","ssdeep":"","tlshash":"390120d06486a43277b78c65c427948bb03e3198a5dd8fc0f387d1a0242a2e1c213a13","first_seen":"2026-08-11T11:07:02.262993Z","last_seen":"2026-08-11T11:07:02.262993Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/7c5cyBjzXJbu9e5e.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.765Z","timestamp":1786446389765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/7c5cyBjzXJbu9e5e.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIZzCOYz%2FSd4%2BtCKMuKFpzdbUL70HMxvLMIRZG1uVMs5b%2B1b9iM1sAoj1PYx6cE5C0kDKn2tU2Gkl%2BlcNmXREk7yg%2FxP1eV2byH0ftq9pF8NLF2Nurd9Ih6gUQskKSfikg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bb29858d851bec00a3ccd2bedb2aed12\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c5700cd05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":3447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6524), with no line terminators","md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-08-11T11:22:34.549484Z","times_seen":270,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/resources/l","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.888Z","timestamp":1786446389888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"POST /resources/l HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rainbetarg.com/\r\nContent-Length: 249\r\nOrigin: https://rainbetarg.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":249,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"f16ba146-7b91-4352-98e6-dc678859c9cd\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet online en Argentina - casino y apuestas\",\"hostname\":\"rainbetarg.com\",\"url\":\"https://rainbetarg.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmfPCl2lEmioDgXBUdWzcrugqn%2FlyriE3wDn2yquzTTehdPEa0up1N9bnDYFmrSaLfzMzi8uD2VV1%2BdNPqWs80DVM0uOaAvDaZ9dJfWLOlXzz81oFVYFAoYIMyUkV4s2dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 11 Aug 2026 11:06:30 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncf-ray: a296c570ccd95694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1435,"mime_type":"application/json","magic":"JSON text data","md5":"75c7ac3eb22582a9ca6018454a4b701a","sha1":"d3b1b65111b531f649592ff43c1a9d8bb81af746","sha256":"b08fb016690b02d796510a25c3ddf783bf62494f4ae704c177a50f1bb868b0b7","sha512":"40952aa57d140d69677bb37e9f81ae8040a92f79c84d999eab181ed7b7f6286d29f91cb060abf22ce252f677e14cd40301c0ab8badef8b2d258c74b37991c920","ssdeep":"","tlshash":"d5e08a1b45c50bf7705976810c98141471bdd1e2714811fbc0dda170fc7dc571007133","first_seen":"2026-08-11T11:07:02.264649Z","last_seen":"2026-08-11T11:07:02.264649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.545Z","timestamp":1786446389545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 13 Aug 2026 11:06:29 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqgxv0E7JfN67ZbeJZoTPx2d7rxewW00uA6rYwQsEw8nlo4cwfziM7%2FGlV%2Fwsd9zxgbZFDVRygzu6ZM%2FTT5Z0c3Z4Uv9M%2BcOhm2Dp5hDLYBG%2F7DkyK8DAXXCUbThOaXwIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\nserver: cloudflare\r\ncf-ray: a296c56eacaa5694-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1244,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T13:56:33.357741Z","times_seen":418066,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/bitcoin.DoxzZv0S_ZjKmtC.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.751Z","timestamp":1786446389751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/bitcoin.DoxzZv0S_ZjKmtC.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OHCc%2FVHE3FXU9byjfMIE48XpZeOLiUmQEuKhqFzL1D0njgqLZ%2FlxBwKqZqsYQBV%2BuM%2BDB22KV9jdxFEH%2BMYG2PohiHaM33l1m9FHrNqjPdATN%2Fzusq9Or5XNpEfdTh2ceQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3ae39c41cb341abedf7f1216594a32c2\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56feccb5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1142,"size_decoded":1409,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43925932e07b862eff43b85bb2cace1d","sha1":"772f365a574406443ef79e529574e37163a46c63","sha256":"eaf2d0a19638b3d1f57461f1540bd3a19be74aff4ecf5d00d81b6a111e850a64","sha512":"91ffca8adabf3910ca9454d221789542192d72456aea5e397eaa90ddb1f10d40534e5de740feed280da910f7bf50da4bd13f60a12e2cc35bd4ef076fa925cf87","ssdeep":"","tlshash":"50215b3d8360d3ed92a6f2fdaf645091904da0c9d1f7c34a92d58a1086d39caf9bd48b","first_seen":"2026-08-11T11:07:02.256649Z","last_seen":"2026-08-11T11:22:34.543417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/visa-alt.VP3XiHNL_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.745Z","timestamp":1786446389745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/visa-alt.VP3XiHNL_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR%2FOGlXBTpVfS3oV8qqCF%2BvGsAZZArsI8Lty0xuC81c77aU5HglNh4ODkXQaxILLPAH7nMFDjnTbYPTlWccx2rkZuxZChO2oTgZd4BwmP7vQp0wSCIujnG4IV82%2B1v%2FX4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"2c8a059da2610b177a8c90c3388ae0bc\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":1281,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8153322965b66498d81493cb670d4bc","sha1":"0a4746de231f61c7e92495f87946b4159f3c656c","sha256":"47eb1c663eda4b6354386e112a4da1b15a48d3c493460381108cf6aea6bf718b","sha512":"ff69ac25a6f8ca2cb3dabd2104550ef19bee3583395a052d147f212d2bd1c9609d69b884006dae519143ea3c00727efba51b729df71349031ed006122b3f72e8","ssdeep":"","tlshash":"3a0141d083404b8cc9064d7d2f241cea598f70bf6641023cd32c145190b9aeff81d516","first_seen":"2026-08-11T11:07:02.266451Z","last_seen":"2026-08-11T11:07:02.266451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/2b08CYC1upA26c5d.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.763Z","timestamp":1786446389763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/2b08CYC1upA26c5d.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCfgqz21lz8RxKHKGamR53ALXINoBNBDm3Ledsl3WFQqLIF33KM5XU8a0O7gAXK%2Bsho8oufLVR0o9HF%2FaDgCH8wfG4tcrpbjwVwSqHI9q4A%2BPbPnhufVqzeJ87M9BCHzQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"df3ca84eb6d0680e459c17f1e5febc52\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c5700ccf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":1185,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (608), with no line terminators","md5":"ce0bd7ac476382d22dea861ee0e7978b","sha1":"cd5f360f3e71ae1f01fe95f5584df7a0ba30df0b","sha256":"fc99c3a0204ed65486ff092036b58d441d22d282525377ad491d35c9fcadcf65","sha512":"1a426743749654622994635d4ee5bf1be9070d1d4be2c53566bd85a71812d51a2182d3a3d99a10fcd3d664fc86fbb64eb6d6e2dd5907d057e2958c8e025e324f","ssdeep":"","tlshash":"65f050e9255b077e465144e4e3e6d90777ac25ff62bc05d1553359851ca2fc3015ef03","first_seen":"2026-08-11T11:07:02.267169Z","last_seen":"2026-08-11T11:07:02.267169Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/apple-pay.BL8T_KrH_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:39.146Z","timestamp":1786446399146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/apple-pay.BL8T_KrH_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zb%2FoHPmFZ2oWcLeC0mObtMOFp1vIgaQ%2B280GkHKfA58vr8hyK%2F0hpRo%2FYTZ2ZS8E%2FtzwTlTcRjRAH2BhIAYkznS1FT9RPOL6VpTavU7P2702pu%2BWHCZH7hjaDEPrYWTvaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"43fc32998196c5dcd62c060dc5f9906d\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:39 GMT\r\ncf-ray: a296c5aaa8595694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":1770,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0015102f4d768df8d7974863a7bf41f","sha1":"726dbfc5aa34dc8ad08946b22cd3f0841b58da8d","sha256":"f81dfb1b6c4a2c209abf4344f3266c683df8cbee81f8d320c0231eeb06ffdd9f","sha512":"dc7e459cce2f873c0309e207ab71ad4d3dede2b0b404cce05b3e400c793380cd87a80f92e0e6ab9f0f86a88466b910ce87374e73f1b996f3a8cb71bb367f3466","ssdeep":"","tlshash":"6b3175f85bb0908ce6b74e7def7b38c61b0fb4ad1f2100189494bb4e64c98c4ad09918","first_seen":"2026-08-11T11:07:02.261735Z","last_seen":"2026-08-11T11:07:02.261735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/google-pay.BoP4MI6G_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:39.562Z","timestamp":1786446399562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/google-pay.BoP4MI6G_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOATLViS%2Bmx2nIr2aZ3N83xZV8plCAuPwQLL6Wc3OuPJ4RxRuPCyDkFiLOLpyWH7ZkmJHCZsBhTvnSbUvZkT2Kp9e2UN7zpGnEAZ%2FD3aBp8nNiS4WMcTIBvulMjmM%2Bphyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b8d3efa5086723b884abac2399901717\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:39 GMT\r\ncf-ray: a296c5ad48945694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":1697,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ab94102735868ee12f70c4fc388b65f","sha1":"fe67dbb20cb8d581d01a8927509d889c7fea3051","sha256":"d41fcda93c741a92b55a035afdaec5bc498fc7b3eac042cda3fc3a46908ad23d","sha512":"ffa561a5e3b23f9463ff245cce3f8bfdd5d758a4c89492f23866dbf015fc044e8f9bf7074f3461c8611c999481f7e6beaae91d00ecf005bd339021f127df05b9","ssdeep":"","tlshash":"cb3196e22734759ce4a28eb0de6c19dc3a3eb0fa670d12c4ab1d6904b3113d2e402e10","first_seen":"2026-08-11T11:07:02.268243Z","last_seen":"2026-08-11T11:07:02.268243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.543Z","timestamp":1786446389543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /embla-carousel/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 58\r\nlocation: /embla-carousel@8.6.0/embla-carousel.umd.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a296c56ebd551525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T13:57:26.030821Z","times_seen":17837644,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/badge.xV0TJ0cK_1ul1Ek.webp","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.552Z","timestamp":1786446389552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/badge.xV0TJ0cK_1ul1Ek.webp HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ywf3TuCQMnDnhLB8OBt0osQSiRtDAyLSe3w%2BnTIXPkmwk7gqcIiTfTa3BuPkjYzMAUnnnynfmzIZJGN0Oul9FiiTPtEe4zeseKT36MgFxzsJPe%2BfWgeN9qfa4POjtqX6nQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"44c2f8efa3590a6db11e158c12b0fbd8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a296c56ebcac5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6778,"size_decoded":7580,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 508x508, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"312f07a94e8279700b64a0d4ca67e2c5","sha1":"5fcc50ec6cbb602a411a350bfa59553628c94846","sha256":"79a1a6b9ab96595fdcf58955a53c0a5973425af874771e15f89dcb2f56ce9921","sha512":"f00fb064271a3670d321925f3eaab748c744c59855fb4ff627a74db1a36ad7d40aa1386f1125983d2fd953dbf927d4b0a128ea870164365197a645e5db1ec5d6","ssdeep":"192:7WsF9vg+ZQVUJVBcHv6tt2/UiJgtdEUaXwY6GHTGmtC:KX49B6v6G/U8grEUagY6D","tlshash":"0ce19eeb121b2171dce3edb01598b0274ff74fea52c2a6950fe11b7143a9670bc1821c","first_seen":"2026-08-11T11:07:02.269733Z","last_seen":"2026-08-11T11:07:02.269733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/9af2C3v3Q3Eyafa2.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.675Z","timestamp":1786446389675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/9af2C3v3Q3Eyafa2.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zM38US%2BUTlQ36DKGGELBXp7c6fIQEScd7cppjSAtzDhIAWBnejk%2FdD6yqzfMtK2N7AOeQHWyyA45qG5zu6trcAQGhPDYpAJ7h89sPvMCfS7%2FY0U4S0%2FwV0gl5CubEy7ubQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"35754aa683de578f3dbc564f5942b302\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56f7cbb5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":1192,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (629), with no line terminators","md5":"2ddb74048e82dae0ae3bd04ab083790a","sha1":"35d87549beababe7ce260571f5d8011ecfbe9d3a","sha256":"258503fadc15e3bd704848b572dd2d005d184e4b11116597f069f02ea7d8d0e8","sha512":"78a8c77831cad81f96fe453498271bc69755754376d456588209f9393e0fe3d08a59226749e626113977da3a0e67e750489fc1ece42cc49f914c056e201df2a8","ssdeep":"","tlshash":"b6f00241d04ce37a68235cd6822f721abd5952f487254080a2fe2d33e87c147d81bf9e","first_seen":"2026-08-11T11:07:02.270799Z","last_seen":"2026-08-11T11:07:02.270799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/50d5DZ6oRXze1a75.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.679Z","timestamp":1786446389679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/50d5DZ6oRXze1a75.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2002jcMU97mKLtekc7vFYB2VaoD3bpWvsxD2I7HR0CqBpvqV1h5kbf9t3FSuerJwQOnQ4T5nU6Tmun5rYalWtip1niCoqjPZOR2dlQYmMCwVId6bY2IeoxGIL0CTupukw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bdbb6e1f21901f56c4502268bcc9fcb4\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56f7cbe5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480,"size_decoded":1147,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (480), with no line terminators","md5":"196107f8be9a1d7c1e99a4b171f4b5fa","sha1":"8531562de4a029407e882be31e9d9e89cca06f61","sha256":"8f8530939c29448e390ab0e5734c6d16a579e37ab03ad9ff44204016f5727fb0","sha512":"6d046463a9164aae83f05e88825f2650a72e6d30c840755eb5b63541a12e57c6f9e77ad7dda359ac1b44b980bb2f1c9ec25a0fc35e6bb664bb47cf4968006249","ssdeep":"","tlshash":"58f054c5d151fabd25720cc1971b03257b2918b88bd0845683bd0d32617c103c513fcc","first_seen":"2026-08-11T11:07:02.271882Z","last_seen":"2026-08-11T11:07:02.271882Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/google-pay.BoP4MI6G_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.748Z","timestamp":1786446389748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/google-pay.BoP4MI6G_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOATLViS%2Bmx2nIr2aZ3N83xZV8plCAuPwQLL6Wc3OuPJ4RxRuPCyDkFiLOLpyWH7ZkmJHCZsBhTvnSbUvZkT2Kp9e2UN7zpGnEAZ%2FD3aBp8nNiS4WMcTIBvulMjmM%2Bphyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b8d3efa5086723b884abac2399901717\"\r\ncontent-encoding: br\r\npriority: u=4,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56fecc95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1733,"size_decoded":1690,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ab94102735868ee12f70c4fc388b65f","sha1":"fe67dbb20cb8d581d01a8927509d889c7fea3051","sha256":"d41fcda93c741a92b55a035afdaec5bc498fc7b3eac042cda3fc3a46908ad23d","sha512":"ffa561a5e3b23f9463ff245cce3f8bfdd5d758a4c89492f23866dbf015fc044e8f9bf7074f3461c8611c999481f7e6beaae91d00ecf005bd339021f127df05b9","ssdeep":"","tlshash":"cb3196e22734759ce4a28eb0de6c19dc3a3eb0fa670d12c4ab1d6904b3113d2e402e10","first_seen":"2026-08-11T11:07:02.268243Z","last_seen":"2026-08-11T11:07:02.268243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/apple-touch-icon.png","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.883Z","timestamp":1786446389883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDoeD4r75fWU4dUkhgKpYn8RMNRujtXDfCU7ZfBVPTo1phklk%2FGQPf7UHaWvUzAFNj4p4%2FZ75nbom3jzDe4gOfU%2BdQ2FqTGemiPN4RY7sxmpcIiJ6MFQ%2Bj%2FVTn3zKDqt4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4ee7e5f2925b339be29b263dc3542340\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a296c570ccd75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8856,"size_decoded":9666,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"473ed835e15349f8f5150ebf0bc79aae","sha1":"49048cfb2a9bddc3e2cbdb518232fdf6edf21755","sha256":"7c7cbfbc6f3390a01e415942bb3fc5b5b91c095c1eb3521b9fb94baa820f016c","sha512":"f258a190a923130d8c0a97ead7219897be7dbc597e5a56807bb549be6eee2bf03ad2d575b49a244f88cf8bd519a104b1eb6494db9560b8545c6c309b0fe3f7d1","ssdeep":"192:RUUUUUUuegN6oUQqbjZN79/r6F1shoX78SnvZ7Y7CaEiiYYFUUUUUUUU:RUUUUUUueNnjZBVaNXAXlf8UUUUUUUU","tlshash":"8c028ec8971acc3a54102a2e5fdca6e7cb7730dc52cda9956968503ab12b0d733d2ea1","first_seen":"2026-08-11T11:07:02.272918Z","last_seen":"2026-08-11T11:07:02.272918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/mastercard.yH7O8N-Y_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:38.149Z","timestamp":1786446398149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/mastercard.yH7O8N-Y_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bjrp3Wrmv7Gjyc4V%2FdfObsABswCJuIkguOUBoLJ%2B4K7E3aUIwyLvW%2FwXnjiOHC52DToz4vEXu26BXwG%2FBwFXBcTWiNLumF7U7ub7dQpb5ngfi76vVHr9v%2F1nTf6dgQhiPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c28927d01da89900dacbd979523b2ff0\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:38 GMT\r\ncf-ray: a296c5a47fdd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":1254,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d888bf5bac559dc1db05f740366adb05","sha1":"091c35db840f860194ab7cd2dde3bd878c007917","sha256":"221fc2e6114d4cddc35aba53f3c0009b2500bebf82b66e8c3c22f54394b13120","sha512":"75df067fd5211848a18343837fbbe4bcad17d5dfe052901c6bb35f2feddd6e585ad87e20002585016af92c6af7008e17818a35f23c3f4fe799da2fbfeed509b4","ssdeep":"","tlshash":"5d119ee537688a2c89a64775ab3c55c1521f22dc385684ac6a7a321420812bfd54dad2","first_seen":"2026-08-11T11:07:02.257747Z","last_seen":"2026-08-11T11:07:02.257747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/visa-alt.VP3XiHNL_Z1P2oVP.svg","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:38.948Z","timestamp":1786446398948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/visa-alt.VP3XiHNL_Z1P2oVP.svg HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR%2FOGlXBTpVfS3oV8qqCF%2BvGsAZZArsI8Lty0xuC81c77aU5HglNh4ODkXQaxILLPAH7nMFDjnTbYPTlWccx2rkZuxZChO2oTgZd4BwmP7vQp0wSCIujnG4IV82%2B1v%2FX4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"2c8a059da2610b177a8c90c3388ae0bc\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:38 GMT\r\ncf-ray: a296c5a968525694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":1288,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8153322965b66498d81493cb670d4bc","sha1":"0a4746de231f61c7e92495f87946b4159f3c656c","sha256":"47eb1c663eda4b6354386e112a4da1b15a48d3c493460381108cf6aea6bf718b","sha512":"ff69ac25a6f8ca2cb3dabd2104550ef19bee3583395a052d147f212d2bd1c9609d69b884006dae519143ea3c00727efba51b729df71349031ed006122b3f72e8","ssdeep":"","tlshash":"3a0141d083404b8cc9064d7d2f241cea598f70bf6641023cd32c145190b9aeff81d516","first_seen":"2026-08-11T11:07:02.266451Z","last_seen":"2026-08-11T11:07:02.266451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.535Z","timestamp":1786446389535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Noto+Sans:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 11 Aug 2026 11:06:29 GMT\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9510,"size_decoded":1504,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4058cc3961136b5d0727eeb45ef25a88","sha1":"1374d05dd6ec645bf53087743c71dac8b91a6487","sha256":"473c107a12d3da9dc4ee44038b2c61a56d913ac3b5c406857f70e9271d7a4af5","sha512":"b6833ea6f24cdadf79fcbc035187c8e1260fc286f436af23531c436ccbf4cce2f45508a82cacf479ac1c1cdd7cdb790b35c853676a87bd50bd5b39eaaf7c8211","ssdeep":"192:Mq8qg9x3xI/7WUqrBfWx3aIA79SqRbVox3cIO7HC:7Mr+CS/","tlshash":"a612caa8805bc484ba434cd637df7d36ad1f61212454d27c9bfd59989cabc39433178e","first_seen":"2025-09-26T11:59:27.868254Z","last_seen":"2026-08-11T11:07:02.273956Z","times_seen":189,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/Rainbet-main-uac.eVDzgO7a_Z24kz6Q.webp","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.554Z","timestamp":1786446389554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/Rainbet-main-uac.eVDzgO7a_Z24kz6Q.webp HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSO2voxwV2MSQmYtFJDpZuh7LGp5V4GRDLlkH%2Bqm8hhVmwqlAH6vUEAdiara7SMZwY9pXGVZAB8KZuPkgL%2F0K%2BiXChxBg5y%2BqBI3PSfhPrysXPpj9NBHGFgh2wUODRHCDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"cca4a7722384f1eb2c366f90a95e8183\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\naccept-ranges: bytes\r\ncf-ray: a296c56ebcab5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 65104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65104,"size_decoded":65913,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x804, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6d526ebe663b5b818a3ade69ef5c321","sha1":"ae44486b62045cda73702ced6988af33383b497f","sha256":"3b8e1afbf6903269e25bcc274f3a35f04c518bda32faa13154719b7ad1a409bb","sha512":"9ad5d18848bc74683ed28825cb784df45f0c5dc689206e88ab19f6f8dbd858b5cf6832055f6d9842435417641746539c0451c1431d8c2479819860b35d1ce916","ssdeep":"1536:xk1gs+Rd58xGOyv+6HlgDs+eaFGk3OWDNlFaWs:Fzh8QOyv+6FgsXaFGkPds","tlshash":"d753028c6770bae1875e30f079cea50b21bcda0dea40c54d7eff54d48c41ae0a99293a","first_seen":"2026-08-11T11:07:02.274494Z","last_seen":"2026-08-11T11:07:02.274494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.582Z","timestamp":1786446389582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a296c56eede11525-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 178959\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 11 Aug 2027 11:06:29 GMT\r\nlast-modified: Wed, 05 Aug 2026 09:41:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\nfly-request-id: 01KX2GRC4T9H18FE8STX2SK4E3-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17946,"size_decoded":8035,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-08-11T11:22:34.535798Z","times_seen":1731,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetarg.com/manifest8a9b46f2/01fbWl2b16bW201a.js","fqdn":"rainbetarg.com","domain":"rainbetarg.com","tld":"com"},"ip":{"addr":"172.67.185.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetarg.com/","date":"2026-08-11T11:06:29.676Z","timestamp":1786446389676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetarg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:39:28 GMT","end":"Thu, 05 Nov 2026 10:39:25 GMT"},"fingerprint":{"sha1":"44:30:86:91:08:DB:1F:41:2E:C3:88:A3:C9:C5:C2:1A:9C:41:F1:25","sha256":"75:9E:3F:84:4E:08:83:D0:20:9A:3D:C2:D2:D8:F3:F8:51:F6:99:EC:21:8D:EA:90:58:21:11:A0:67:4F:BF:FC"}}},"request":{"raw":"GET /manifest8a9b46f2/01fbWl2b16bW201a.js HTTP/1.1\r\nHost: rainbetarg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetarg.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcHaldYgks857i5y0phPpcMp5npkebn1Gh3gP9xFMEl9xjB%2BUDI9fkmRwyOVjkmvzHROc2AQY%2Bbr3nTVaCVT8b1GI%2FmRmIV8eVKQj7%2FO3h9AXqno20tbZwwhadFXISQJRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"029b419dbf6fac87ce97aae63101bf25\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Tue, 11 Aug 2026 11:06:29 GMT\r\ncf-ray: a296c56f7cbc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134389,"size_decoded":45152,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0ae273bf15ff13728194c136edb8270c","sha1":"e179328120ef0eaf6b50a411bdb9bde241c7632a","sha256":"26c8bae0961fa688a38c711ce6532cbb57d9de50a4dfa1768a2d575c32ec8afb","sha512":"42753cfaa2374261a73977f9057bc2e07d10ec847496f42d323671cc1aaf046e0ca8ecec4448a2085259212fcf092f14c27efa0189e52dbc0cd01ecfed20baf6","ssdeep":"1536:bHIv9lkly0hZpFlXwIe1EdTLTKSgJ6n6uaSD7AvlMctIgL:boF+wIndTgJ6iSvA9F","tlshash":"50d309e83992f6616ab702a710ef1807733d1a1b280c4950a615fdde75f801ab27bfdd","first_seen":"2026-08-11T11:07:02.276202Z","last_seen":"2026-08-11T11:07:02.276202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"rainbetarg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}