{"report_id":"30915976-4cac-4a57-8fb8-38babb39b8ea","version":0,"status":"done","tags":[],"date":"2026-09-08T10:06:16Z","url":{"schema":"http","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"172.67.140.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"title":"Rainbet Casino – Spill i Norge","dom":{"size":184704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55246)","md5":"e01900b88d5bf88f609bedf01987c0b7","sha1":"64d0bd6794e8ebfe220591f4b3237bc4b21b070c","sha256":"b91d6a095ee4da67e0da95df62c573f0dcd7ce54faf399bc5169b572f635962f","sha512":"f78f79f08b3fbc870103d075a8736c0cf257d10f316d5474ca41ef411f9a9fc09d5cfecefa1b2d8005412ebcd11949b96b02121c1f1eb8fc39269a509713b9c3","ssdeep":"1536:lZ77jT0IdYY2TT8c/jfIZyR7qOYrGxONZUXzbW6DUj4LPSEWPd:lZ0IdYY2TTEyR7/HzbW6DUjWfgd","tlshash":"de04d6b26308d23b385bd6d9bb60bb4e7255830ada1315f4f5ad865c8fc2e915cb12cc","dom_hash":"domhash3bcbb7890034cd7820981d0d53c954dc","first_seen":"2026-09-08T10:03:54.365571Z","last_seen":"2026-09-08T10:06:19.229425Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"172.67.140.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T10:06:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbet-no.org","ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-16","domain_rank":0,"first_seen":"2026-09-08T10:03:51.09884Z","last_seen":"2026-09-08T10:03:51.09884Z","alert_count":16,"request_count":16,"received_data":2004737,"sent_data":9669,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbet-no.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T19:31:44.460668Z","times_seen":432054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76c598a78a9b196d1662675846e0817d","sha1":"e6c4518be80fc4d140bedcc03d2a7f7d382a4a44","sha256":"53fbfad4cf7e002199c8ee42187250a9c77b28821bec353718af19627bf46b41","sha512":"49e6f36c8ced2c54ba1caaed150ab07ee8b73f437a57bc50ba0ba0d394d6abb03055450eac8322a7fccced5c515a402eeb790aa5a262e36eadccd94b9c881563","ssdeep":"","tlshash":"4cf0d429c5a813e7148e15898935c92d21abc7176fc03175f10d53790f8f93f10b6296","size":505,"data":"","first_seen":"2026-09-08T10:03:54.390045Z","last_seen":"2026-09-08T10:06:19.258427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d9e44ac93eae795f02ace6847b09d36","sha1":"69372a067c72e156640dc5b2b6af923e740f7334","sha256":"822c0dfe919e2e5944ce6129f11056bc4e12061a51a957cc2390d8e83dff7476","sha512":"280d5a3919020e65d92eeccf7c683e7b2c5e0f1a7a3904ed0485944960ac4f09bd94299efcbe20c22b4b7f83a2219c03b8ade1a84657125c25f61591c6c8d040","ssdeep":"","tlshash":"45a022f38c33020a0f080ac022030808823c383a3ec0c3f3bc2e88002bc22a3023338a","size":79,"data":"","first_seen":"2026-07-24T11:49:52.376811Z","last_seen":"2026-09-08T10:06:19.259342Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96e55979fb85cde21d384ea33512fed2","sha1":"858d432a6614fbfbddf34f01c07abf2b8a9d5eb0","sha256":"809b4c70ec77ee74af3948454b3a89857a21beab6bfb492914f262d50e4cdede","sha512":"0afc2cd0da71a2fbcf38e86d28ea1e2d15b372b6e763573bb3e58078e4bbaeaf5e03d540423a7743af8e22692e29c641fc5e44c66f144291bc96ea416e11aa8f","ssdeep":"768:Q9tmJLYIV2B7ubvZ8GVmSMpeFK1EupjWgnO2xpCqXgOldiwd+57kCT6keD4Ca6g9:vLPSEWPC","tlshash":"8fd21ab5b604247a00fa5efff2cb7754ba2710837446e4a0e93d8c440e96d5316b2fae","size":28588,"data":"","first_seen":"2026-09-08T10:03:54.393214Z","last_seen":"2026-09-08T10:06:19.260491Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/c45f26c7f3/t1ri0y.js","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05920da70f157f034ed1fbb3328a537","sha1":"053447c98a11acf25fee8b7bb92153167495b76a","sha256":"5a96608e0660a40a72ab547213e5802f74b2d078f26b6e538033b1aa2879a834","sha512":"e6a322e47023a2b58bbdb2ce5eedfa78cb8c78a72b27a03f3908e28e6a63e8c67fbf5c8a215171b9ad9d1f7553bacd752a33e7b3a5beda9cfb353576a05ede14","ssdeep":"96:5eW6aqIiva7j0sH8y1TB/7a+43DAx8QfqzlCKmbPag8Ew3EyBt:5eW6aqK7ANy1TB/u+uAx5icKA98Ew3EE","tlshash":"b8a12ce1f142b4b62bb9acd191742221f2361fb1b8068080e97d1c925e291cb65bff3c","size":4729,"data":"","first_seen":"2026-09-08T10:00:08.721985Z","last_seen":"2026-09-08T10:06:19.255509Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbet-no.org/media/imgi-33-banner-rewards-picsart-aiimageenhancer-696a4c48ef5c9121327646-698da59959142714866051-6a285c9d5923a356048629.png","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.260Z","timestamp":1788861947260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/imgi-33-banner-rewards-picsart-aiimageenhancer-696a4c48ef5c9121327646-698da59959142714866051-6a285c9d5923a356048629.png HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 09 Jun 2026 18:34:05 GMT\r\nx-rgw-object-type: Normal\r\netag: \"155df8726fc43b7b7d9a00f044f65904\"\r\nx-amz-request-id: tx0000046ed87448ce276a6-006a9fdd67-1aff15efd-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eORTStjKF5AyS%2FOjSU4Y4uyWpzNBz2%2Bv6eW7LkYhJwmwFfQGR2Bo%2Bk7GERa7oBTOz9GySo%2BmqNDvd7pKjuvHKkmbAmgdT%2Fwe9tBUyAzLHn%2F89jE0cTY03o2xtBn3MUrQsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2302682b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1175770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1175770,"size_decoded":1176738,"mime_type":"image/png","magic":"PNG image data, 1550 x 632, 8-bit/color RGBA, non-interlaced","md5":"31f4cca4389d99fefe8782aefbf1fe33","sha1":"b5961c3717f6f67dd7ab985ea68c242bc926b084","sha256":"c83af1ea78c06976a0a4a071d245c23f38bbb03a5209d01df7ac1c67578573dc","sha512":"85c8f89d18c32745b035e66bb4c48f3b9ed7a973ba1ec12aaaf0707a6c249c636512a345e7cc9093bac0c772a83857a0826a912b65ccfcf1c39edda7e634902b","ssdeep":"24576:yKwp+MDdqHsQnG+xxmyybJRM9IuhnbiJQREvGx:y115qnG+xx4bJy9rnbiiR0o","tlshash":"d725335cf519bedfb993042709bf8677e46a3483259599df422f2b0111ee083c18bb5e","first_seen":"2026-07-24T11:49:52.330102Z","last_seen":"2026-09-08T10:06:19.231663Z","times_seen":10,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T10:05:46.670Z","timestamp":1788861946670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25; Expires=Thu, 10-Sep-26 10:05:46 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\ncache-control: no-cache, private\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEQz7X1UqqACYnsX%2Bow%2FJm6Aozuyf6kLncKMn4aMunLt6LD6LXsWlq8JjAWPLGGxwFMyKO4h0O8kiZ%2F5cAKmgK5XLYo%2Btaq4GYfusFsain%2FZTjl3yTme5%2BGxiCk31t1X5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d22feeffe569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"http-cookie","value":"1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25","quoted":false,"path":"/","raw_expires":"Thu, 10-Sep-26 10:05:46 GMT","max_age":172800,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25; Expires=Thu, 10-Sep-26 10:05:46 GMT; Max-Age=172800; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185793,"size_decoded":39770,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55246)","md5":"ea88aa834dc44d7a7a914b7d48ee3883","sha1":"0ca66d3953338a5f09c66145573588f48696a33a","sha256":"72b4db8d5d8be9d34c6db691020919bcb33a1316b6fcef53c90586e1a15a5d93","sha512":"dd6cecef54d53c69882c7ea9265b75d8fc6196d0a0d237ed1b112aeb75dcd32575445133d1c7d0b282a02ecdb9208005d3b759e17d35f9b74a35f181799dc6a4","ssdeep":"1536:tZ77jT0IdYY2TT8c/jfIZyR7qOYrG/mN6KtGgDEj0DsLPSEWPL:tZ0IdYY2TTEyR7piGgDEj0DyfgL","tlshash":"a904d6b26708d23b3c5bd6d9bb60bb4e7259830ada1315f4f5ad865c8fc2e5118b12cc","first_seen":"2026-09-08T10:06:19.232693Z","last_seen":"2026-09-08T10:06:19.232693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":8,"connect":26,"send":0,"wait":321,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/crown-2-68de6c7d309a1292359331.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.291Z","timestamp":1788861947291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/crown-2-68de6c7d309a1292359331.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"24947b00df668102f6842ec4a28d71db\"\r\npriority: u=4,i\r\nlast-modified: Thu, 02 Oct 2025 12:13:49 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000fe771d60027a74e6-006a9fdd67-1b007895e-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2WXY7bPjb5nYKd6pjTGCJXIwicdAWwRq22SoavAgSlydKbhyzIoB%2FcV7N1GecxrtOfzm1o96%2BlrROU5xhDzUYVqaGSizI0ubIdRFh50mT9ibMWKAHksIcJ7%2BE2ItrBj9g%3D%3D\"}]}\r\ncf-ray: a37d2302982d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1395,"size_decoded":1693,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24947b00df668102f6842ec4a28d71db","sha1":"3ff58cf77c5feb34a3519938d1450c80496c7cf7","sha256":"b9531baeed19b3eafd9ba5ef418d7802f1eb090e788bd1f49cc36205ceca7b02","sha512":"a39de810dc7698137e598d55259cbbc7115d78e294de548e677a4680792e8b18e8a09c5eaf263f0157eed898eeca0252e1f6dba89c9e369bd60b0f13ee45d79a","ssdeep":"","tlshash":"6e2163ee6695e9c1ea43bbebc70050f6542ee4a344a047b4d2637c15348444cde12cde","first_seen":"2026-06-08T04:25:58.662769Z","last_seen":"2026-09-08T10:06:19.233959Z","times_seen":25,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/favicon-696225a8642b8405622472.png","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.392Z","timestamp":1788861947392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/favicon-696225a8642b8405622472.png HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Sat, 10 Jan 2026 10:10:48 GMT\r\nx-rgw-object-type: Normal\r\netag: \"b8fdc6441020a448dee02b5dbb940357\"\r\nx-amz-request-id: tx00000ec5aecced97a2569-006a9fdd67-1aff15db3-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 147\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPAmR73xThUFNTiS6gXsIXhXF62DWrOgEi72qTOEUAaSKsIwNvkeukkwGYJFsEe%2FAHQ%2FwK8KPkodl%2FgOFxk1AN%2BwZnvNp56w0tD0vuPErK2gRwKxbngbP7oOejG5qSLzZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23033832569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":4524,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"b8fdc6441020a448dee02b5dbb940357","sha1":"a756723e81935f136174011857c9f484c474e763","sha256":"3f4c2b8112e33e92ce2541e8d7e21c76021cb25162039d9e776151123a8c73be","sha512":"af8ebcafca09d20ae1b9422f41c62a835ae2b0e55e3587af275ec6cffa107ddd057abdfb1a57fae75894304cf18f63a6f6c023f457592368b89d93b18bbe4c65","ssdeep":"","tlshash":"66713c8b4d9354582172eb3bd48e26506fb55f98899f8f70be6a5c3bb0302bfc10956c","first_seen":"2026-07-07T07:25:34.836575Z","last_seen":"2026-09-08T10:06:19.234617Z","times_seen":18,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/big-bass-amazon-xtreme-679caccbea2c4405667195_365x312.webp","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.489Z","timestamp":1788861947489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/big-bass-amazon-xtreme-679caccbea2c4405667195_365x312.webp HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\nlast-modified: Tue, 14 Oct 2025 10:13:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"62d6a26a680456d97cfefe76b72775c9\"\r\nx-amz-request-id: tx000001ac7f31c0f33f736-006a9fdd67-1aff15dd1-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWfbsHtykeMGYvEtsjL5fQs190pK%2BAWl9E8jDYb8xtqa4gsAG1QZ5IV3jMdEBs%2FvTlVKjGmNOe2nz%2BtYeWqOXOC21B7oFXu%2BbXz2c2lTZ1aR7cXd4aAn89Cvnb%2FRY6%2FLKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2303c83f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34274,"size_decoded":35241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 365x312, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"62d6a26a680456d97cfefe76b72775c9","sha1":"85105c92534e4bb11e39696d50e4e0f62e626751","sha256":"63c3eacc8d00e60eb3094595d9cc7f18e8d9e10092baa56644b05b6369540d26","sha512":"2fe3e74647105ddefa9c38dc8119028befd2315df33e39506f305a0cb967baae1269c5632f7102a09d5830c0c5fa0c7a037d984cbb57e2ec8d40671e45751a43","ssdeep":"768:b2ceQL01KMptLXWWN3l5tEDCCc8FclXdK3f:t6F/33EDj9aK3f","tlshash":"43f2f21be4b66cc5b542dcb4fc014d7926a5bfc522acf890a4d741f42959fe08de1a0f","first_seen":"2026-06-30T18:14:04.544795Z","last_seen":"2026-09-08T10:06:19.235252Z","times_seen":12,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.267Z","timestamp":1788861947267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 10 Sep 2026 10:05:47 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bV6fX3I7azLm4PXCx33popGoI5MTbZV7UG4q%2BnL9Gh59rcxluG5TaJtPYKKdame%2BUXB%2BuKGrvOi9qcfq1BC7nDtUf%2FQxFC61U3tvl3GwYrc3JtPHRi4vifoPzchdJlC5XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\nserver: cloudflare\r\ncf-ray: a37d2302682c569d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-08T19:31:44.460668Z","times_seen":432054,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/c45f26c7f3/e.js","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.467Z","timestamp":1788861947467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"POST /c45f26c7f3/e.js HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nx-umami-website-id: 8fac9367-3d39-47ac-aaeb-706e1e6b6d33\r\nx-umami-hostname: rainbet-no.org\r\nReferer: https://rainbet-no.org/\r\nContent-Length: 234\r\nOrigin: https://rainbet-no.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":234,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"8fac9367-3d39-47ac-aaeb-706e1e6b6d33\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Rainbet Casino – Spill i Norge\",\"hostname\":\"rainbet-no.org\",\"url\":\"https://rainbet-no.org/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: application/json\r\nset-cookie: http-cookie=1788861948.538.2876.807108|f6cb22b3d346aafd75a1054921948d25; Expires=Thu, 10-Sep-26 10:05:47 GMT; Max-Age=172800; Path=/; Secure; HttpOnly\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-middleware-rewrite: /api/send\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcs7vUvsr9pdHN0z7%2BSqQG%2FeO6GvtMDV8KXgnUsP4TtCXF8tJm0I0C%2FMBVI3KoT7XFRQKgfNURYmpAPYFC0QrY4uU7noUNXeWriOSyrg2IrtOUrBbih2f04u1ZE3See7FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d2303a839569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"http-cookie","value":"1788861948.538.2876.807108|f6cb22b3d346aafd75a1054921948d25","quoted":false,"path":"/","raw_expires":"Thu, 10-Sep-26 10:05:47 GMT","max_age":172800,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"http-cookie=1788861948.538.2876.807108|f6cb22b3d346aafd75a1054921948d25; Expires=Thu, 10-Sep-26 10:05:47 GMT; Max-Age=172800; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":439,"size_decoded":2262,"mime_type":"application/json","magic":"JSON text data","md5":"93d2173986c1822dbfed5c89bf44f6c0","sha1":"cbec7b09e98f7919adf04bdf39fc816e33b4a595","sha256":"208f696572f95112625cd360e69a32c48540a492558f861cb94f36fe9ddf6244","sha512":"d23536a3dee39cac318e54bdcc95a19005bbf5d4a26602ea10eeb574e7c538de539e1e1707a35420cd2db6fa634d13929fa229fc4a7d2eda7c146d249f67cbc7","ssdeep":"","tlshash":"f8f0231284d93f48e139b5410cc44930ced8c15ac8a00120d5ba2620eb16efbb2100ac","first_seen":"2026-09-08T10:06:19.237371Z","last_seen":"2026-09-08T10:06:19.237371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/sweetbonanza1000-67c983b931a97103278247.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.476Z","timestamp":1788861947476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/sweetbonanza1000-67c983b931a97103278247.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"dc8286283c578f33ef67ccbf7256ac75\"\r\npriority: u=6,i\r\nlast-modified: Thu, 06 Mar 2025 11:15:05 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000008af0937445015596-006a9fdd67-1aff9f13d-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egXHbhmGweXk%2F%2F4VHtD3cUey8mFPCR4cNwjWI5gsq0SR%2BSBksPwDJ1V8fTMhgT77gNTrkGa5lT5js2YsYKovgJZfRNAAVTfl9uJcvYoEh04FIURXbzHxG7chaRkSTvZGTA%3D%3D\"}]}\r\ncf-ray: a37d2303b83a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89526,"size_decoded":67454,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc8286283c578f33ef67ccbf7256ac75","sha1":"cb1cfd99b57035459aa04bd2189668b938e7393e","sha256":"fd019425bf90f917f0d40ba62f91fc820632594850d37cdb90beb46b9e1be8c7","sha512":"2e245773e17c51013174422e45c40b05cbda17df16c126878622989505ab074b73eae4adadcb0ff01cea25da08ddcf32abf9c44d0329580a838e65928d1d6f73","ssdeep":"1536:nFFlgIHBBxhtnbqR6JlVdBZiFESiQRAHOXE1BF0HOhQvWLxh6/52DnO4U3IAKHT:FFPLqR6jPmFESWHsEDF8CGWL6yDWIfT","tlshash":"8e9302e2b7b0034c9c618a07f7d294765e2df6a3521db825b4dc328a956b280cf751fd","first_seen":"2024-08-31T08:30:37.774001Z","last_seen":"2026-09-08T10:06:19.238474Z","times_seen":74,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/big-bass-splash-500x500-without-d-and-w-css-67c9843e48c01266568251.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.484Z","timestamp":1788861947484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/big-bass-splash-500x500-without-d-and-w-css-67c9843e48c01266568251.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"2cf72347dff6c0bd444433ea662a87e2\"\r\npriority: u=6,i\r\nlast-modified: Thu, 06 Mar 2025 11:17:18 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000007e6ce073c2560774-006a9fdd67-1afd9fc03-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 147\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIdxEW9nUG3QSq9%2BOVzPzK1md7YqAv75g%2FM4d%2BDsfTArwU88PQysWJSfHH%2F4yxLK9qWKXpcSO9ZogubNNvj6o7S1lc7gRqgb8w5g87gAbxAzIxw5g0bLsR8qNvOFiqAzNQ%3D%3D\"}]}\r\ncf-ray: a37d2303c83c569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":202375,"size_decoded":151927,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cf72347dff6c0bd444433ea662a87e2","sha1":"418db32cb618d3df11394fc91826bbe8cee6de1a","sha256":"7ce4cbdf8b43d1f1ffa19369427b58a984c93a88afbee7ea0ef7a21aba000a0e","sha512":"57b5293baf54b78ab0fd3912d0cad7001e88812c9317df7430104fe3d62f3a7ff7cf9ea7836bc177304b3272ea2b2c22892bf7af5efdf9cbce8fe40aa85fd7fb","ssdeep":"6144:zog+mnhqWu0U1WZicVi1S/Mybo31qv+J9nSz:zz+4hBW1WZiJ1TxUZz","tlshash":"0d1412741c814e2e07e616a473dbde5b5faa599fb680585de2c43cc3849899f0fba0cc","first_seen":"2024-05-03T22:08:28Z","last_seen":"2026-09-08T10:06:23.222143Z","times_seen":123,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/assets/fonts/exo/Exo-Regular-dRuUrx5.woff2","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.251Z","timestamp":1788861947251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /assets/fonts/exo/Exo-Regular-dRuUrx5.woff2 HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-no.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Sep 2026 10:15:34 GMT\r\netag: \"6a9e8ec6-2fe8\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 148\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2jMT5oxOYFunKDBQzd4nMQVEwW30QdIDmX274OQvole6JLhaMFscLQC24cKR%2Ff9M3CMTjUCb2Yo4Pi%2FshvnMzYwie2OtOwLoCQaB42yxjX4PMzG2guTLHAH7M%2BksmlL6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23025827569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12264,"size_decoded":13535,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12264, version 1.0","md5":"02937a1785441f2ea3a18fb652872c02","sha1":"7c7e177a3d0d02036fbb17ba638d4e8ddea24d3d","sha256":"54be207d1f76e357721a5a6f203e5a2e62cdc6857b6ac2fb529ff675cfc337cc","sha512":"1a0b4f3ad34a2dfeda5070bf64cd234579517722d68d249bd99b4c785f7d0315dc11957288651c64ca83db5d7908fb82690799f9bc705181961b462224179911","ssdeep":"192:591I3+HJCIKim6la215/mwEdNR4Z2U3DZ4cEkDHg0Y9OnOnFPFlkcznDwTP+2x5z:/rEtol5/mwWs2U394c89OnmLn++2IBRe","tlshash":"8442c0525088b45bbd8613e77c0ae3e8a7914f94e09769d897cab634c08ea57d83790c","first_seen":"2025-06-21T22:25:39.97851Z","last_seen":"2026-09-08T10:06:19.239611Z","times_seen":512,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/zeusvshadesgodsofwar-67fe6a617d5ff178482989.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.478Z","timestamp":1788861947478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/zeusvshadesgodsofwar-67fe6a617d5ff178482989.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"60a32360e23e3255f1c651b6c18cdfbc\"\r\npriority: u=6,i\r\nlast-modified: Tue, 15 Apr 2025 14:17:05 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000000529c967e024755c-006a9fdd67-1aff9f1f6-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jXvPblzut4Etb8kJrZEHjhXJqQNpQ%2FzS9b2LA%2FLIc6HsdKJM%2BKByty1p%2BFd9oY3oi5H59KJF%2FpcWWEWVtRrw5RinfQkq70XvQ6540Idz7qU%2B6TWKKi%2F%2F75bhIFEtV3pjQ%3D%3D\"}]}\r\ncf-ray: a37d2303b83b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84422,"size_decoded":63389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60a32360e23e3255f1c651b6c18cdfbc","sha1":"ce331b64cfdd3208a95fd4b295daac570f14bd83","sha256":"d17874cf91d8202f11852029d4018b574096a73713eb2f23c4f4441d2ae2df7c","sha512":"7d41fcd997ffd60c1797bfe6f7db247750e6b34de559ceb1c08defd0255411019a9ae9f3b1a0973abe07719257c2e9114c123d7e65f4e5959242423f4e2d2962","ssdeep":"1536:PMJJHhYjsf8zwrCOTC5GgOv4c9n8xkzk7EfUsiorg:yJesEUrgsgi4gn8xQAsq","tlshash":"e983f270907b3e7a1676b00999e53c081c2cb59b68c0d44ffbcb205e79ba7581f9c8d4","first_seen":"2024-08-31T08:30:37.899296Z","last_seen":"2026-09-08T10:06:19.240625Z","times_seen":15,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/sugarrush1000-67c984114dc83300539688.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.486Z","timestamp":1788861947486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/sugarrush1000-67c984114dc83300539688.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"4f4f2814a34dc780dd7926890a361c79\"\r\npriority: u=6,i\r\nlast-modified: Thu, 06 Mar 2025 11:16:33 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx0000074f2376dc0630fff-006a9fdd67-1affd2be5-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voHxYmTWpHhphn96%2BMA6hHH%2FhJyJL%2FBb39kvc4MI1JzzEa7wconJU1BgKZxZ3Ev6lv5bzLoW3Kf%2F0rE9M3KOw43A%2FGCUdiOg0xYE3f8HvPQ7vXO6RLI%2FgQuotaZJyGUUtw%3D%3D\"}]}\r\ncf-ray: a37d2303c83d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67906,"size_decoded":51792,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f4f2814a34dc780dd7926890a361c79","sha1":"d0e7e340539ebe1ea2c14084caa32a24e5c62deb","sha256":"9907bdbc883683729c0d19b6880fa03108a3e2f998b39bdbb6dc951abcd31c7a","sha512":"9cfca3a6e1405cfdbcf077eb34d0ade30b01711500b2389e679227fde0e44aa8d1e5d61fb32200a9eba4ebb7c81c58f279c380d7b0cecff70b42400de36f0df2","ssdeep":"1536:mHi5CpncPDWDTotIhozRo4xjLWlbBc8r3Vdo2//yVhxKnZ/8VE0ITYFLT:oqftXzRo4xjEba8r3KFKlyE0ITYlT","tlshash":"996302349d3da46067b09b1a0970ae07574d2fc2684ee5d7b1fa50c3aea23cc7bcb521","first_seen":"2024-05-03T22:08:27Z","last_seen":"2026-09-08T10:06:19.241228Z","times_seen":116,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/gates-of-olympus-67c983e6757f0345106444.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.487Z","timestamp":1788861947487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/gates-of-olympus-67c983e6757f0345106444.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"438cb7f54ae4f2d377a450fb6c5dc6a6\"\r\npriority: u=6,i\r\nlast-modified: Thu, 06 Mar 2025 11:15:50 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx000006c8c005984a79df4-006a9fdd67-1aff15f0c-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B79mbygj2pHo0QeEOhNBQsUqlZ3kvjr8ZqUmismxnLtXiH9nQFTxQEHMC4sAdPiyN2Oe74%2B6IAv5SdyFQXdK73PIZVuJpfC8sidyLhBileY6X0ywZSI5tXQwgqWkzfk%2BKg%3D%3D\"}]}\r\ncf-ray: a37d2303c83e569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103699,"size_decoded":51249,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"438cb7f54ae4f2d377a450fb6c5dc6a6","sha1":"ca7ee565f1d874a4c123b220e7123c1202ba3122","sha256":"f0192bdc0c903101d92d63fafb8424a4b29043d2285764960460da0e4f4be8f9","sha512":"c96e3cf5a7a4f8d5c1956fb8210d45fbe13c07a6af175855773a89678f575932b03cf1db7a71275c19ef8c4446d1fb06669f6947de41d566a73576141b5f9b50","ssdeep":"1536:Euj/PtE8GV4zo65LtaSD0WXCHG7P1rzc2DlBuy1uzQVQU:E6tE+aSDfXCHIrzXBBuy1uz+F","tlshash":"f9a38d7a93473b1e5b4206e6294df30c1c281bcfee3a58d7aec46096cfc8e445b67468","first_seen":"2024-08-20T00:53:37.775346Z","last_seen":"2026-09-08T10:06:23.188713Z","times_seen":62,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/assets/fonts/exo/Exo-Bold-KTP6gCR.woff2","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.254Z","timestamp":1788861947254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /assets/fonts/exo/Exo-Bold-KTP6gCR.woff2 HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbet-no.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 07 Sep 2026 10:15:34 GMT\r\netag: \"6a9e8ec6-2fb4\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 148\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ywjk3VHaNAA0%2Bw%2B%2Fum7ZrokA0imi%2BHsD35a6JpWMBrYFHoRNfjQ5LNp2%2B2%2BjPkcnFD%2BKcnxYuQ3mvjjF%2BQ5n2IQym%2Bd3R%2B8CCv1iQ8tC6Nt9LNwC7B%2BaMq8tTaxZCeHXig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a37d23025828569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12212,"size_decoded":13499,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12212, version 1.0","md5":"a3a53af2eb3f1e1280e1f1d2a8ed91cf","sha1":"0627e8bacc7b5e874a46cfb03b928d52ba183ec0","sha256":"2551840e57fde2f6a58f300f364a798be1ca8bd49753777adca5f74f41102777","sha512":"43dc7bdf69ee3b2686da5383636d7be13a94466ca99a535c24d27c4f5e29fc331651fbcaaa8826f6031a22e11590ae3937096ee487bbd5f3a9c16f9539bf05da","ssdeep":"192:pDpBD4PPvItyxEhy9Xk7uFXWtuWSNzRoDbl3qvbzoW9r7bGJUjBVqq+4Kf664YTD:FpSXR+hy2ipWuxZUp32XJnGQVqtxiQTD","tlshash":"4642bfde33b91e5ce5c0703d1de92332e228b7add06e0942d9d52583f7c286a96b946c","first_seen":"2025-06-21T16:29:17.315005Z","last_seen":"2026-09-08T19:25:44.153736Z","times_seen":116,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/c45f26c7f3/t1ri0y.js","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.256Z","timestamp":1788861947256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /c45f26c7f3/t1ri0y.js HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors 'self';\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\nx-middleware-rewrite: /script.js\r\naccept-ranges: bytes\r\nlast-modified: Wed, 02 Sep 2026 02:27:45 GMT\r\netag: W/\"1279-1a05ff19d65\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:;\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), accelerometer=(), gyroscope=(), magnetometer=(), fullscreen=(self)\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nage: 148\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnQfRgn%2B%2FdydvuDHjIhMhGT9eUHtRDuH3uOTgrnvAgXFbyzrn7SV%2BqZ0isAaEw9U8RYQalW9tdN5iiAnZxuwhwPTz5mpvlbVu8OyAJVXMNOLbRzBqVj4ZbM1dIuVuN318A%3D%3D\"}]}\r\ncf-ray: a37d23025829569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":3986,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4728)","md5":"a05920da70f157f034ed1fbb3328a537","sha1":"053447c98a11acf25fee8b7bb92153167495b76a","sha256":"5a96608e0660a40a72ab547213e5802f74b2d078f26b6e538033b1aa2879a834","sha512":"e6a322e47023a2b58bbdb2ce5eedfa78cb8c78a72b27a03f3908e28e6a63e8c67fbf5c8a215171b9ad9d1f7553bacd752a33e7b3a5beda9cfb353576a05ede14","ssdeep":"96:5eW6aqIiva7j0sH8y1TB/7a+43DAx8QfqzlCKmbPag8Ew3EyBt:5eW6aqK7ANy1TB/u+uAx5icKA98Ew3EE","tlshash":"b8a12ce1f142b4b62bb9acd191742221f2361fb1b8068080e97d1c925e291cb65bff3c","first_seen":"2026-09-08T10:00:08.721985Z","last_seen":"2026-09-08T10:06:19.255509Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbet-no.org/media/rainbet-logo-6962273adc7f8263754423.svg","fqdn":"rainbet-no.org","domain":"rainbet-no.org","tld":"org"},"ip":{"addr":"104.21.87.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbet-no.org/","date":"2026-09-08T10:05:47.258Z","timestamp":1788861947258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbet-no.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 17:55:27 GMT","end":"Tue, 20 Oct 2026 17:55:26 GMT"},"fingerprint":{"sha1":"9B:88:BF:45:1C:A6:13:6A:63:94:66:42:19:C6:F9:8D:FA:B1:BE:38","sha256":"D9:77:7A:AE:61:24:03:D9:23:E7:7C:F4:86:ED:3B:DE:70:E0:40:04:D6:75:A5:B7:B7:8F:45:19:02:61:DF:B4"}}},"request":{"raw":"GET /media/rainbet-logo-6962273adc7f8263754423.svg HTTP/1.1\r\nHost: rainbet-no.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbet-no.org/\r\nCookie: http-cookie=1788861947.91.2876.213354|f6cb22b3d346aafd75a1054921948d25\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 10:05:47 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"3722843dd62574a69a7ff815395927c7\"\r\npriority: u=3,i\r\nlast-modified: Sat, 10 Jan 2026 10:17:30 GMT\r\nx-rgw-object-type: Normal\r\nserver: cloudflare\r\nx-amz-request-id: tx00000aa50e42320229701-006a9fdd67-1aff9f255-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=31536000\r\nage: 148\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN7g7KmZbjkCjGia2ErfvcTAIgQIHZLHzgNrU1ac5DEE0XNIcrfYfSca5aDHbipzV9VbcH1R4QfNP92MtrSI9gHM8kEJM7KE1VpVbxjF4i9fdOB9709%2Fsd7GfALQgsy%2Bmg%3D%3D\"}]}\r\ncf-ray: a37d2302582a569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7480,"size_decoded":4150,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3722843dd62574a69a7ff815395927c7","sha1":"d06d8164e20bb17d11abb216033705d78b856bd3","sha256":"829f5f41f66e7796f118dcb9c41c30423ecac34846a6e8d81c7273e54a3ce4cf","sha512":"3dbe860be6787fd0b0e1082d5b125dd433b40f5b7ebc7b9133259dbc3c1b482a3e28b5eb825ec029ed4fa6094c16618759adca11194f8eb99968acb0e2d1c030","ssdeep":"192:tYUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:tGXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"79f194ce3bb09ef88d75cbd2ff1320697a17c07b59848e20e1595f0d2a9081cde95d8a","first_seen":"2025-12-01T11:28:00.242862Z","last_seen":"2026-09-08T10:11:32.569679Z","times_seen":87,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbet-no.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}