{"report_id":"467f078a-85ad-45ce-a56c-c573d5c4f7cd","version":6,"status":"done","tags":[],"date":"2026-02-06T22:38:32Z","url":{"schema":"https","addr":"claim.raimbow.xyz/","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"104.21.93.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.raimbow.xyz/","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"title":"Rainbow | Claim Token","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T04:12:33.851907Z","times_seen":17929621,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim.raimbow.xyz/","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"104.21.93.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T22:38:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"claim.raimbow.xyz","ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-06T22:27:28.199535Z","last_seen":"2026-02-06T22:27:28.199535Z","alert_count":0,"request_count":13,"received_data":7457460,"sent_data":6030,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.raimbow.xyz/","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e42c2c5da4aaf12c9bba824c44a697","sha1":"d406389931e0e1d09938ea6788fcc1261a555fb7","sha256":"9bbd684c8ab024bd9f04add92a2ea1efefbbb394f32fe1edca227973178ca5f9","sha512":"da50f2b9399731713f3a6d7c3f12e3d64b1953e663f2c8d748bf3b51e5cda6aaa775591fc83d7758c5b75c0fb4ab7d0d592d646141eff2cebc8f1c4175f80833","ssdeep":"","tlshash":"a6f0593970b1227606b7549acb0b9385fe1000776085e806bd0dc58b4fc1f9428a6bc7","size":543,"data":"","first_seen":"2026-02-04T16:58:09.258572Z","last_seen":"2026-04-17T13:19:39.085115Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/41b79dbc-2936-409f-bd46-59217c2c48ba","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-16T20:39:49.938915Z","times_seen":5114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/react.js","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d92cb96dd8496a341a06b062e8fbd351","sha1":"9e668b1c6b62c691f880743f464301ef53fdea9d","sha256":"d37d3bd7c8462673be9cfdfe4b93e8d27cb0982622f26661e45576ce20852bc2","sha512":"df7c6f4b874de30996ad34bce61f388eb22ead085c80c2209d7d93353cce29018def590c81b487d141efe9222f5cee32cc3299b3fdce954a7741479ba5264ef5","ssdeep":"768:txp7nc3K3yu3NZ7JM107jO19SE1DcIS6QcPBJ5Jqchw571/AcLVHbiW9Wri5c6+W:13hvO1IE1PZ/JB0cp/Uqzlz7y03u","tlshash":"4463b6c81906d0e88e5521eed473e909e9245e63ceacf167e67decc0752df62818723b","size":72237,"data":"","first_seen":"2026-02-06T22:27:31.921328Z","last_seen":"2026-02-06T22:38:35.019569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.raimbow.xyz/UFvPlymoCJQRWIcq6OuiAEro.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /UFvPlymoCJQRWIcq6OuiAEro.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HPG12fyoOxnuYFV560qOXXiZmAQO3SSP%2F0LruoGx50N34KNDzUfrmtpKDg10mBaVk%2FtVm1UgcSqwERnueSAyE9KwpJdRqXllHo4mh%2BsVIlP\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e418be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/hU2QG6d9scwuab7no8Kzy4G4-1.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /hU2QG6d9scwuab7no8Kzy4G4-1.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBkqMfJElo%2FthhHLogLGIxsomQs%2BAz9%2BNGX%2BcneQfmMsmRZo4VluS2tUkWuvsczwjqqxwwhFvWQ8biAIjXa9bq4ChLez%2BKHsJIqSzjznS%2Fr8\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e428be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/secureproxy?e=jscdn/getFile","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.raimbow.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim.raimbow.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"4dgbjz2diwbkfy57gydw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1qbpNCqHyK%2Bdxj%2FTfOU%2Fi51bG8ptq6vb5xwYForWEG4DGPtvbHW6FdGTozftntZnJwhz0x7fAIWPjg04iH9UkivLOKE1AT%2F1i13IEgC1r4Fng%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22d13e798be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4787965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2ff307f19f395458f9b55b1d6e320ea","sha1":"50ad23e4de4b5f6ebdc391fef843ed7578b83b48","sha256":"2c4269ae94341a2a51231a91efde69e1b1edcd5543a9ea6f88f288ff3bdb6ef2","sha512":"90ceb8e43d8c46c27f120d3b13f29c102d0d7866fb1a20d6858747a9322dcbbc9d0139ef7f640f7030dff2caa1de7e1031da59b2cf4788f08a1551a695606558","ssdeep":"24576:I7Ob/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RjUIjH:EUGkwdNZngkO5jj","tlshash":"322523e39fa7982ccf9c0e99705b2d0f2c821d421044eaf6eaa5d4872a9d77051e793d","first_seen":"2026-02-06T22:27:31.916932Z","last_seen":"2026-02-06T22:38:35.018915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T22:38:06.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnc0u7V4BWPwUF5D6KYF9ntkGx2rLXDFoeUn8QQ9XAKIPZD0jDVfXiwml7pG2hxunTX5NljSgfBoL0E272hAia%2FAXABIExUHf6pkBM9ddA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c9e22cc8f30712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":33,"dns":20,"connect":1,"send":0,"wait":267,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/react.js","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /react.js HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\netag: W/\"6986080f-11a2d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 666\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSN6%2BbVLzINSFDD1oaisQwKeai4kt5JTUEYjH9%2B1jZexO%2FbL11NyIggwdpkm6OF%2B52BkKoaaJGEU%2FAxTEO0zuVehtut4whNjjSQkoXBfLO6e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c9e22cf8e3a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d92cb96dd8496a341a06b062e8fbd351","sha1":"9e668b1c6b62c691f880743f464301ef53fdea9d","sha256":"d37d3bd7c8462673be9cfdfe4b93e8d27cb0982622f26661e45576ce20852bc2","sha512":"df7c6f4b874de30996ad34bce61f388eb22ead085c80c2209d7d93353cce29018def590c81b487d141efe9222f5cee32cc3299b3fdce954a7741479ba5264ef5","ssdeep":"768:txp7nc3K3yu3NZ7JM107jO19SE1DcIS6QcPBJ5Jqchw571/AcLVHbiW9Wri5c6+W:13hvO1IE1PZ/JB0cp/Uqzlz7y03u","tlshash":"4463b6c81906d0e88e5521eed473e909e9245e63ceacf167e67decc0752df62818723b","first_seen":"2026-02-06T22:27:31.921328Z","last_seen":"2026-02-06T22:38:35.019569Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/Hml6PtJwt03gwFtTRYmbpo7EarY-1.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /Hml6PtJwt03gwFtTRYmbpo7EarY-1.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 26919\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\netag: \"6986080f-6927\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 666\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aalbNB4M5RMplc9kZ%2Ffn86k9EcSC%2FkXPlY6Pav5AEWipiU164UUqVzWbgStMLtkn%2BxbAap1A%2FqJCU%2BaTJdBCXTe5yeALvxughtHl0snmFV4%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e3c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"49ccaf9316affbfd5774848d0ee49159","sha1":"72e32fb788b408f82fdc158c9ba34a44b201c32a","sha256":"a8877fc1150e1641e255c304cbccb491f622324076a51119a9ffc15f42a35e2e","sha512":"4d9b3ad6ce40d23862a9c66adfbd26509f8335e9b3d651e2c97fa7356415a9da51765d5f4c43cb59d031f366085eea7b84aa4aa93eaeebe1fe9e421ec7dd1ada","ssdeep":"384:fP5JiKbBw9CQGqtwecRYJYUGVDcGBs5RTuoe7vxXbPeKw0mxIplPXmpL9w+iiC7F:7nuZth/bcrQsXhw0mxIp4pq+lU","tlshash":"5fc2d111df23cd4ac8453766937f820b9724c500d2a2ae6e7e4eab98ac3817dd4686cd","first_seen":"2026-01-24T00:02:45.191112Z","last_seen":"2026-04-07T02:50:41.083003Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/pDjFf9GLicAOWUbXOXHD8MaxUw-1.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /pDjFf9GLicAOWUbXOXHD8MaxUw-1.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=loWOwOb%2Fu930EM7iJQ3xGK%2F5D%2FyEpMKTft30kX%2FJhAszcu1m2kcjgz3WPN7Df6YULlJHE1yypZMkn6EmQxc%2FXtZJel%2F30BLCUd%2BZX4TLvaf7\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e3f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/Pn7vfzLLQ2Ylyc0MS2jmR64xKlc.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /Pn7vfzLLQ2Ylyc0MS2jmR64xKlc.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzZhqQJylYxCRKNSD%2F7r39uCGrOPVkygXa8D7Jhr94Lqa8fXI7x%2BLlJVRVhdjumzR3eC5cPr8GQO4FSpxWqkoeYjSyINpOdUACyJYrM%2FDell\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e438be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/oFjLtCxBt9OTckVaAY2EMUHYw.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /oFjLtCxBt9OTckVaAY2EMUHYw.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adzv1%2FbNJHWnfE5JrjbPai1db35iYFaHgZcyZbQuzPcgWSwfKaI4WrnQOfBIXlY5u02eZ8%2FI316b%2FoAG3iQ7QyZAtPE8WAWxDelkUDhMGmQI\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e448be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/bgm16Z9pe9YGDU72vUuHTzyYYk.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /bgm16Z9pe9YGDU72vUuHTzyYYk.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1979\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\netag: \"6986080f-7bb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 666\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=To%2BspLhddWqZFHP8egVUdDkgiqILd6JgO95Z2FJ8zA7xKBLeyth3UjvwmfZRZwO7oICB8ncT%2FkL8aBynT7wzQeaetXxIPVfEVmyjYJCieMKe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9c9e22d11e768be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"252358188e125eccd4ac586c69d55d9f","sha1":"6c1240a418c33f18fc0f4d888ff6a67ad7eb20dd","sha256":"15c260a67a7b2923652ec01996e06f14aeaac341c84ea9391dcb9bb7e792c052","sha512":"e6eef3d8857162a954c68af7f4298103368aae69a0d3f8efce2b0d650d972967235771b49244f71c83a1173bd2139f7f6f4f602c9158f19d0f059ac230ab90d6","ssdeep":"","tlshash":"5b41e8971be13661ca89b3f08ad91f92a4b2c6001988f787b80d8c7f1f452d25ea719c","first_seen":"2026-01-24T00:02:45.172811Z","last_seen":"2026-08-16T05:25:44.289881Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/vK8ECGL27BFN7tScchchrKWCgPA.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /vK8ECGL27BFN7tScchchrKWCgPA.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2Bz1RKsaYvwXZA93HRo1F8j1pkLlr2qVGviU2nc%2FaaKSFFqBdDYoLwUYAwEMGLc%2B%2FVfziZhfFH7YzBRKYK6cQyNdwMpCu9MD4d%2FKp5dmKnNl\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e3d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/WdqwfLzM7511b0vTKJhyOovVw8.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /WdqwfLzM7511b0vTKJhyOovVw8.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 666\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGfLnQCbKoZaTVwdz2orn4ty4ojj%2Fhy83Evn4CWj3lzF06KHkXRtOJi8VVmFxsA3hVJV2jvtKjJy%2FtLnv4OTPD%2BCoobJWYHEeWmWpDpaGJ1r\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e3e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258192,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62976)","md5":"31c9312ee33836d105cc97ccfadc1903","sha1":"c7f85c8ba1c79f32d0151f6cb75fdcb83da72dff","sha256":"28b125edf89ca7daaecf47b60417b9347fdd5715cfe72b053d6f38bfe23d6fcc","sha512":"de6c02e3fe3619ec52a06cda69c0dc5ef952d7248bc1f3f1bca105015eab831457c0de4b1c2cea8aae206f2e4f0e51b8ea86bd1c176fe601861dfe01257691ba","ssdeep":"1536:JLYzVJVMaj5eHCe+FVieckV4VMaL9VsaTVhVk9VCwjp++oILIf2Jw+xYaoabpZ/s:MCWXoILIf2J/NrAfA+","tlshash":"504421536259f264aceb6a3eea1de41c7d341041ff33c3db619d461f81c9ae82a4276c","first_seen":"2026-02-06T22:27:31.909248Z","last_seen":"2026-02-06T22:38:35.017831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.raimbow.xyz/jiid6nfu78vtDFgJz0L0Ga87uFg-1.png","fqdn":"claim.raimbow.xyz","domain":"raimbow.xyz","tld":"xyz"},"ip":{"addr":"172.67.209.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.raimbow.xyz/","date":"2026-02-06T22:38:07.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raimbow.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 14:55:39 GMT","end":"Wed, 06 May 2026 15:55:32 GMT"},"fingerprint":{"sha1":"9F:C4:1C:11:C1:8F:32:41:58:12:2A:89:A5:DC:67:ED:5C:47:AF:C1","sha256":"8A:58:A3:18:7F:6A:65:34:94:26:C9:D2:E2:D5:6A:5A:08:8C:B2:75:AB:1C:5F:23:8B:49:FE:58:5F:EC:A4:C1"}}},"request":{"raw":"GET /jiid6nfu78vtDFgJz0L0Ga87uFg-1.png HTTP/1.1\r\nHost: claim.raimbow.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.raimbow.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Feb 2026 22:38:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 490866\r\ncast-mode: default\r\nlast-modified: Fri, 06 Feb 2026 15:26:07 GMT\r\netag: \"6986080f-77d72\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 666\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9cubCpur9uQZFd5etcmrZ4EtyeETSG9K%2FwRz6eGIqSWvIOqiOA80%2FANsz0yenPxzpvQoKUF3gDsMq1IY%2FUWmEiwWjgAlZ69dEbYAi9Ci2CL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c9e22cf8e408be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1627 x 2175, 8-bit colormap, non-interlaced","md5":"a7f8fad70879f75dbf40b95b0c124cdc","sha1":"5666240e8270d3140f1bbc55096fbed0f4064ad6","sha256":"b1001e3cb9fa7310f050f59c9bbef407423413b1ffce3d429500d0aa2384ac80","sha512":"25e4be118111bb89256bb268c8073e06b28814ee1606a0f375429a090df923d1813bfd1fadcb0524b59833463b159512fc37fb64d798652d665e80336f0894b4","ssdeep":"12288:8PHvL4Va9YPmVHQI1nS55RBDbrszAHekS6M5zNMa4WB:kz2SL87RBDkz3kSjF4M","tlshash":"40a423a7c16ccbb1fd351b934fb2a276e05b42d0ef37a4885342d3856a5b43b89432d9","first_seen":"2026-02-06T22:27:31.919048Z","last_seen":"2026-02-06T22:38:35.021367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}