{"report_id":"55a35faa-b311-4292-a186-68ef22b850a8","version":0,"status":"done","tags":[],"date":"2026-09-08T10:07:26Z","url":{"schema":"http","addr":"rainbetmx.info/","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbetmx.info/","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"title":"Código Promocional Rainbet (2026): Bono y Giros Gratis","dom":{"size":77762,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18705)","md5":"2d7582e74b534d6a90518ed12a4bf5a4","sha1":"4bf94a342897d6b6e4a5912b05b5b5657facbe46","sha256":"aa5b7cd3e6fe7f92ff60b1c25331605413f12d8384fcca37f64b0c2d804567c1","sha512":"30c35c26e3670d4479075610122bcf71d173e2c33326d0fc0ed1759061f489534fb2265938451dce8dd2d07fba7f72252a137b4e12f7e02603a7a70964866c05","ssdeep":"1536:qBBcbtiN95uC1aBbnY0wG5Ks2Iu5nRrY7XruzQ9s1w1dXKLfqSYIZOtLD9+MKdli:qQNclF8kSt4By","tlshash":"7c735d26c1c5533b917322c8f747fb6f91ec7449f316c46ad2ae53e083c9e996863a18","dom_hash":"domhash7ee03ab3e0e2edf1cb0b0a9e2fa7681d","first_seen":"2026-09-08T10:00:35.964774Z","last_seen":"2026-09-08T10:07:28.339847Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetmx.info/","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T10:07:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetmx.info","ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-08T10:00:30.827557Z","last_seen":"2026-09-08T10:00:30.827557Z","alert_count":106,"request_count":53,"received_data":1652402,"sent_data":26497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetmx.info/assets/53cf92435b.js?v3c6c8=79f905515a28","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0439828741f85bfd40ee20d031576ba6","sha1":"67676e6ee0b74fb6024b4a943f2f1b836b853798","sha256":"79f905515a282563194e171e00ddf88efe9d03499df203287bf218e60da2d17e","sha512":"73432a52f395e173e324218dd1620269e1b44aba5fb8a9443f777f90905c7e2b3e06270f777c874291964da1ba4de6697ce2ab0cfa40abc735bc3a0a9e1d6773","ssdeep":"192:lNZ+3JR/KhiEnc8aDOnFFhJpI6f26fqDovzBKTLxeq0xSeqU+Q9NQ8X+vB:MXsfI6f26wovpR7vX+J","tlshash":"6932946e51f319374467e06e535ba20e333a1043718dedac7b9c5a401fca6a8d6d3ac9","size":11411,"data":"","first_seen":"2026-09-08T10:00:36.060621Z","last_seen":"2026-09-08T10:07:28.395254Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-004.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.232Z","timestamp":1788862017232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-004.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eimuNbAy62dDGu9ad3Kbzu1pa8wDxSvd9kBitCwhpXivwNrE53yAlImooxGdIeqfCo3J%2B5MM%2FUUlNRMuIjsRxr5VVDwCaxBx7Qmva4ik6I8fhJkXM6j9Mm6CaGtAbzCUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"db0133e979a28acf0da444e442fe7586\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be2c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21734,"size_decoded":22543,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"cbd23f4bd6a41f206af3529dc1aa7711","sha1":"ef3a758c2b353ed17852625f6be180e84649ca41","sha256":"a785d4b2db53e9f16e519a8305a1db4785378db3fde1fed86d01a05eb4569ec7","sha512":"1c3c6c20af402b6427fe9f8dcf575290e615b933794882392b3370f5cb0ae6e83e16d28c4872f26d4f0f2c97abf54a5f592a3d1d104b0dcf4f7f68fe66461c5c","ssdeep":"384:BsN2YNg3CyL0WbLqdHqgPjZS6BXGKxRjLMGS9zhWBUprwnNbJiX6v:I2YNg3CyAWXkqgLZS6BXjYNwVQ6v","tlshash":"82a2e1d9c9d6d0674d55c93e0e7aa1d2305ab3cb38c4e2a83d3e3d0a6418b12366de4a","first_seen":"2026-09-08T10:00:36.018105Z","last_seen":"2026-09-08T10:07:28.343702Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-042.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.048Z","timestamp":1788862017048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-042.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dzrwTcMJ7D1enpMlhiPjfQlp8t%2FTIGJro2ovwSb%2BSVMU6hczhiMhPKBbyrHlEn3s%2FJl4%2FO479uBa4cGAH9nwaRXEcNM%2BCXjirqpnLP5u8Ve6J73tJOr2fXBdEzRpULJwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"081c16064f17f101dc3fc7ecb3c724b4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b68dd32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17292\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17292,"size_decoded":18107,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bb027d14aa0f222b9436c6e60adbf481","sha1":"c6cb96ec4699d90553f20c5fa4a194ded6f9aadf","sha256":"ba6f29c56cdf9b1769546251547167ed57b8de37a421073dbcf64764ff1de0fa","sha512":"1aed8fe5a6a2dd65c4322fe8bee2820b6566d29e640a4769e9ee3994ce9e95f6efa4728ae217d6a633071d868559516636e25f62928867cdecdbea75dc77bc6a","ssdeep":"384:SdcoY5BZDKAjdReuFA23cIBaWJ0cuALYgMD0viwvMG5G4H7:6Y5BZrjPFA2MIMWauLYgp5G4H7","tlshash":"f672e1f945ee649e673e3c9210aee843c7f6c0992ba036950ca451e7f5cce65d0318eb","first_seen":"2026-09-08T10:00:36.007023Z","last_seen":"2026-09-08T10:07:28.347015Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-019.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.064Z","timestamp":1788862017064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-019.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NbG47TvinvMpDkB%2FTYGXCJzwNvTlT%2Fhpcdf9XJ%2FwygBohibF9x%2F5PYnfoMrd5tpg3RZgTt9DbHpxvxJeQy5KxI0oGPIHynOgGmiyPqUvKhpT4iiIHCgAGrdfK0%2BA4NjPJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"eaa983b7bf5259c18e0bbc0e9b2bd670\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6ade02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24018,"size_decoded":24833,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f12f18912f7510978a46f6b4b088aaaf","sha1":"d5893fb87b26dde1f349d508423ff75a34d58861","sha256":"a3ce81076afb20433a9a3b5b07e0f64f7710b28b804d8cc6c928377e23afa774","sha512":"60e8d79025a6b168ee5ea755e5f7c863ef3626d1fd67a15795b0d9dd6567eb3a9a4f14de76af5683eafbfc57f7e2f7d109d03d05d8bbb7b8e6309d025b4dd9a3","ssdeep":"384:i2xvexTPlbuLlSRCLIIouIB80eww+SoiGywYLojsTvtBSO765ouWxw4hR4nfc32J:cxbql8n89wHSoiRBojsTl765gxzPW03G","tlshash":"3eb2e1abbbf1107aba894dc0d0f6c556086074d19230a740bfbe697b3876ad075c586f","first_seen":"2026-09-08T10:00:36.000449Z","last_seen":"2026-09-08T10:07:28.350275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-056.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.065Z","timestamp":1788862017065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-056.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btmtSoGNTcU6nVdjsEhgnm8EJxAF6qP8W3nCK0bs5juryjdf0skb62QR%2FqQcbLOsTW9I2CtLjMsONqw0c5%2BFirXX38Qig6s5eBj8HLZkQDZeTUC6Y1d7byCHz%2B6ScxgN5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2769c56fda36084eea891611f14cbfc7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6ade12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25290,"size_decoded":26101,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"87a38391b031f8faaf904ef52a84a001","sha1":"126335d6610e36428fd6358c3dde6fd1de2f89e6","sha256":"c10d25866fa5673d7516747b1b9b73f303643e9e8ae740c94193c1fbe8736ca6","sha512":"1fc9b86980a2b29a0621ff658936301d7cd8faea6067655dab803c3715a472dd80edc74073f5ce95779fa2302bc4a937745d63fe66b2949218467a4ec135aded","ssdeep":"768:l8WUJXce0dOG+OHl3ndXE58/iQNRZkfbq5IBYJ+2V+g:WWUJm8GBF5E5OzLZyO5wYJPR","tlshash":"c0b2e17a4c6e3b73a8ca1e73446981eb66a213878d725c7622ecc43134754af284bf65","first_seen":"2026-09-08T10:00:35.971103Z","last_seen":"2026-09-08T10:07:28.352584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-055.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.070Z","timestamp":1788862017070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-055.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbMfWbiZj4QoT%2BqjyAdA3cYUfAYhhSeLOX0%2F6eDByPJx%2FyoTGFpVmY9hGo9LBJZlhL3HeTSdeHy484B9BOTjyCxTLitPK8ugoB9wfmoc2eMmPdjQUb4tiQ2KDu8h4lEoQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e2283c70901df2b2a58bb3b997948ed1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6bde62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23174,"size_decoded":23985,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5fac2591ad4aad0aab54e92976e4293c","sha1":"31b541eee92fe4d0084c94d356d4b55485690e33","sha256":"40bcff6b283acdf996b2e1c04b429b5157086ee5a52d148fff70497a0fc442e0","sha512":"43a6f425100c816bfd4d9cf0a3905b1c3e3fdd87c8bde9655d032a9ea4d208a387ac3a73ac4ada5347b673a03446ecf65d78b8a23549027f708f55e5f1fdbd15","ssdeep":"384:21T1ykGeKgOVF367E6X30DODJ/t8LQQmMDATBbpcMud/T9zWSzM:WMkJKtj6XXauiQjVbpcMwbM","tlshash":"67a2f1f8f16824b2d8553681c59d3e723c6b7b166fb1e0b83a21f6b8212ff3945481b5","first_seen":"2026-09-08T10:00:36.083929Z","last_seen":"2026-09-08T10:07:28.354993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-027.svg","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.090Z","timestamp":1788862017090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-027.svg HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1Qq0Ok7obhtHQhwNLoT84zcMPUXVUFBwAQk%2BTbXu0dM%2FqfW6RUl3uldSqfd1yxbA1qfMTG2GTQA0QiaZERX4t0prhAaJAMwZgrE%2B7HQSV0ZL4%2FeMcRhQ0pY7AWB6AIjfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"704b21f755a24045e54c719d6159008a\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b6ddf52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7670,"size_decoded":4122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"586c270f8d1e2bcbcd1bd3b0423e1d74","sha1":"6fe30f6c34339da53cd633138d7a211f1e5a68d5","sha256":"44b34f141ee9bd18a50cbf5ba089343e43f074b2abc03718d85b757c2ab09d54","sha512":"aa421d0fa679ef5d0c61aa7a74a956df188663fb1181d236239d7522cf02ac6b0a502e7bf9f08fd54fd886b3a8001ac45816fdb990070d7debc11356c759e786","ssdeep":"192:tqUbeXT/clnP/C0wIWwtgXpZUg6zOJD+3DLd+PrJyCZnmW:twXLchUwt+wgjJD+3DLd+Pr4Cx","tlshash":"87f1a6ce3bb09ef48d75c7d2ff5320587a1bc07b59848e20e1595f0d2a9085cde95d8a","first_seen":"2026-09-08T10:00:36.042589Z","last_seen":"2026-09-08T10:07:28.357786Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-029.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.246Z","timestamp":1788862017246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-029.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGmIbJwpojFL3ZIO7Z1qoGeZULsb6y6VB%2F7YNRb6e8Ufj2VaSfLjOcjSm9rPF7pQMzSfR0%2Fx4f3ZTLsqpxDmrIZxKwaY69oYQSbOPdfsJnz3naW%2BcTRzQXi71IYb0KIBKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d23ba714d0fb5bfcfd63f7b3c21e7e20\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce3e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25832,"size_decoded":26643,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"929c1524f5fc23381ccb3cf97e805f45","sha1":"a9d1fceb58c38356e61ca9a1dc83bd71957c59d8","sha256":"aa0d77736e5176ba1dd97483017eb9b6893e58ea484c9b3a21ac8c1fd3d87d4e","sha512":"1424bad19c9163cb36338f991f680c53170a581782d1269097271d17eb92518c0d1e66f8708e82608fa8ae6c88eb9dc27a30f95d013d1aa8a182bf84124e2569","ssdeep":"384:7XfLwn7jhS2KLiFc2B9bqim4zfUYpUMjUEtoz4jazzyEn/AKonE2xdJz08Y9If:LM7Y2KLj2BBl1zUTakQ+zjuVxdZK8","tlshash":"c9c2e1921fb1ff14ddd5fe9aa6c268e089810e5a044e3bc1bf9052d096b9f20acd5c5a","first_seen":"2026-09-08T10:00:36.03078Z","last_seen":"2026-09-08T10:07:28.360028Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-041.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.248Z","timestamp":1788862017248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-041.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drXd6fJNriGZaP%2BGf1BuYh0Z6ZmxDB6xHwa96fTH9bxfZMv6nXn7GXgLc4SsU6XWJBt59ULLx8GLmbx7zPtz6wQ8%2F3IT8EwePkUePeRGxWupz7nWsniyqmSoSkQAEa0UfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2de80158ff85975d245177d4cd4761cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce422efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27386,"size_decoded":28195,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0e1c7be83535642cdb15be5f863ef57b","sha1":"1f6c7a5931514d6dd8459d88b0f9baf8b15ae6f9","sha256":"990d7cd924e13dbc5b1bb199a732a165fb47457ffe003baab59695fc524a92dc","sha512":"e349b0e2369c68952a6a12aec00ed2e16934ecc77cf0ccf93b303ff2c1f68b226fe36d1b65fd085f263571d55ba5977eb9dbb843842ef95f236f6f07b7b1c904","ssdeep":"768:nM0+mikbo750MmGEMvGThFYGp0XoN8i5/:phzbo75zlEM+ThFbd","tlshash":"ccc2e1866478146193e8cb7a4f358f31c1ee897e61409b5eaee0e06ddd4f989d819333","first_seen":"2026-09-08T10:00:36.050448Z","last_seen":"2026-09-08T10:07:28.362032Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-006.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.251Z","timestamp":1788862017251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-006.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5IvAdEJh8%2FfMMn2MK9WD2oNRYaY%2BFwVwubwBdHdjPhMhpz5tzbQLsABs1o0%2FH%2Fu3WEUDncLt6hmXwJCs69wE2g8WbvyVAHXPTiqibcUCXgU9lnR8CzY2fsk%2BZeotB0zrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b00f7174c0a8fb620198015abfee533a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21664,"size_decoded":22481,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"3a9d6e0f263c77526f1608c99cac840a","sha1":"976ad642c31c85d26da37d25ea133e747951bdb1","sha256":"ae490a800328ba09c1e0271e820d43062df1710ac4a4ac1dd4f49f784e7095ac","sha512":"e853c83564ce81fd6c0ed5948de7b7ef07bdc3e88e24e1aecdff3f0291a7dc1454fda5b1e6e65455b3aef38b674c449e8569804a55a29b9b89b5ecccb93ba992","ssdeep":"384:UcwAurSaUwDF9j+J3ZtIB5RsKV3ilKWRB6eYxLbr3BI6fDdJGCsJWL:EA7aFF9jfB5ZVyllaNxflIcdJNsi","tlshash":"9ca2e1b38fbd399a4330d5170452fb4b19ae5dce6ac5cb42a01b20f4c628a77d4ab691","first_seen":"2026-09-08T10:00:35.989708Z","last_seen":"2026-09-08T10:07:28.363741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-015.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.056Z","timestamp":1788862017056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-015.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XL5M6VSMetYKYdIA0dK0EMXxUixJnDfzo1gASTsKvbH0jazP3cO5gMbxw%2FCBrhE7KsBvRwDkasmniTT6QyrS7lzYnrFYPAMTroPMdq9TP%2F1NCL3B7dvK2WK9oJhG4ETbDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"97e9a9e198bcce0e78c6245f306bf5fb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69dd82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17154,"size_decoded":17963,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"d27f9cf9e50ee4b412adeb04b86a10aa","sha1":"e856899d7f70a1c3ba9faa83fc33cf3e3c3178db","sha256":"daf303dc6b564c8227f512d1a2e83699c2f9b93f18f3dbd1b59efabb42573032","sha512":"7d406878a436e545cdc75328f8250ca7921d3dbd4daa233c3e37e3afa3dc57e180afec455ea0e3cf165356778903b509610ea600966a3a55c493716abf36493c","ssdeep":"384:v8lz9ciZWmmXnWY2zZar/to7xPJ1ME1ZJGH7KYA:8zrmmZzYRo71JuEok","tlshash":"f872d0a1e1e27778a96fd1e08c2977c13c230d6f10423d4a329bd881556fa71b7a0ae6","first_seen":"2026-09-08T10:00:36.02567Z","last_seen":"2026-09-08T10:07:28.365318Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-016.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.058Z","timestamp":1788862017058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-016.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlrXNKgWEquH4UbdgxS0ihy%2BlUSY%2BlZ31YLeR9B6CJbybAvDYz%2BgvwaCHx9UKgyD7nRYhLtTqoIO%2B86v%2BLzkN9%2BCkBl9HZC7DArSVqxE8FRKL3cJrwZVhFsC5I2FsVut0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"510b3c455875abb761d8dde375683753\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69ddb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23060,"size_decoded":23877,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"173d38eab9d9e9a852692c10e65713bb","sha1":"3f4b98e7ce44f9d0fdb58b559df5c76023d17146","sha256":"3c2722131641593ffac71d218e2c10086ce3ffd4b55e4bb15a85e757bbc13df1","sha512":"e52692a8c31d98f4de48f67b10d91081e5f1b0b9199fc4e0cf23f31d6e4b7959d2f336c5039492a3a188fde186d277faed76994e0ab2754775741dd47d46b383","ssdeep":"384:KBE41BKEN9Z6DqWjqhdzUBZ12mIZ4IPS4rZ2C43slZKseyYdSWtTjKZ4kXjg3b9J:CPnKENWLkdzsZ12mz4rp48HeyYdScC4z","tlshash":"11a2f2b876540baa301bc2641a1df16998d1f38b704e1d6aed8f8ff45b10c5cce574b1","first_seen":"2026-09-08T10:00:36.027857Z","last_seen":"2026-09-08T10:07:28.366183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-013.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.250Z","timestamp":1788862017250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-013.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9d9qj%2FKY6IWlu%2FKUzLiUNU6FItzlr1zgtPOiRXfxodnLQO4DjmVJf7eQU%2FSbxPQvcp0nKj5T5Jcq6RfSs15DnsKYbLr0d5QqK72aAKDbofj9sAPVlNRUPHhB4GHPDMxtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c00b11f7c36331ad2eeb1de0963aec2a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de452efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18164,"size_decoded":18975,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0bdb50e8fa3309d96dc74a2bfa8194fb","sha1":"e27a66bdbd212c25a182cffc3fd2cd3e2a65ef51","sha256":"9166153ea04daefb7c38db8dfacc6e2419cb4d3db641d61f0fd943e81a78aba7","sha512":"135e6c2c4fd622bded41626e148d2110bcbbff56c875803a4933324824535eb0309a9901033eefa384b16b82b2cad43530a6921ee5d1a383382f008a73fe1ca0","ssdeep":"384:ub8hTGPg+QuvMFnSwxShNgI4AzOVgfWG89ZuIVOlzb:I8EqB0wxShfnOVC8Ydb","tlshash":"2182e1008bd6009467773a56cb87b62c5139039f751afcbc8c97436d792c6ea50aef2c","first_seen":"2026-09-08T10:00:36.065527Z","last_seen":"2026-09-08T10:07:28.367891Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-001.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.252Z","timestamp":1788862017252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-001.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YveUYOn23PnC5aFs3p4c8qmooDoLtMsDrTSvtebekkvYKmoQ8x0Zp5TNbklNqlNTFBYpWRFpakjrQ0X9B2mjplzYge631bnOf7LMXl6oQUaFEu7cM%2FG01tMFIuTW7OHYOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"768f9f7cd00e9a1e15dbd9511ad95449\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19834,"size_decoded":20641,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"37ec9f26f85b4a863b427a6ab597dfb9","sha1":"44671a6918fd1bd6dcf3d9e9283b9b0b5614ce4b","sha256":"0242436452df9a3c267adf989901f64fef4c07f8d5b66258557f8335329dce42","sha512":"c31fd837f162abff40ba619327bf2ea6389eba3a846e7b8756b2587ad3d42f4088e359c077887c8195b4bc5333e785aea0eefda5c552f7d3238de433b9440b13","ssdeep":"384:O/UBcuZ3lS4dUqsioc5MAJwOee/pvmWoxMhJ/CYlrzvXTiq/UogqudF9n78:pl9UqsnczaOeeBeWlhJ/hl3btUogqs/I","tlshash":"2192d1e4de73619e6822faa653118260f5f325e4b3f9461bb747d785873cd0023065a3","first_seen":"2026-09-08T10:00:36.021841Z","last_seen":"2026-09-08T10:07:28.369459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-043.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.254Z","timestamp":1788862017254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-043.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yr1w9gjJanrenb415ow307iyvMfszah3bHDqdqpr%2Fr7l22QlU0CR5AxL89PkXWLAB09YvrkdLcy%2FTLuDw8e8jElpFHlG2DVe9z%2BG8DbPSfoQxenpaGFY0q3jrFCKGZ%2FyaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e2b7bf4d7f3d19101b7938eb5a578eb3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de492efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18924,"size_decoded":19737,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f74ee98870aeec60a1f33d9e079786de","sha1":"bff5b304562755cd876dda22aae7980dafdf7da3","sha256":"fe3da3d9f01f5a6e865aaadbbe479fb06751fefdc9b49a96884841978e532d69","sha512":"9c741d1ec519b152819edab6e4386eccf897baefb8e8aee409de78bad69357e477bc23ebd381ff81c1f0448623a787cad9330e62155d235efac558703eb3f397","ssdeep":"384:bUb2O6/r552x6ipxW7+69Lz6j51Z2jTleRQQfkSFBiVloWYZm1JAzSdVvb:wbN6z5i6ifW7n9Lz6j51Zmlehb4lN2ed","tlshash":"9f82d11eb040fb91a9731c4db6d459188ba5c84f0582fddde5ead36e37358e0bd4312a","first_seen":"2026-09-08T10:00:36.09954Z","last_seen":"2026-09-08T10:07:28.370343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-031.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.255Z","timestamp":1788862017255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-031.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYuoXEn%2FPaU1y%2BLzFzuyj6PXc7PJ%2BOMyqPEyyFS2XUbGTDsrxKTk3rH03euU5i84Dxew61MIDejxRbTTgQYnA337VYafE0RnbI5ku5DuEAEfOrHdnFR7nz5g0KABb4ZlAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7277aadef1ded43b3216d282d424b199\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de4a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17552,"size_decoded":18363,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b667a2755c60086ec85b62b425940f3f","sha1":"1d76baee9d57f7cb15694e9de3ac7b9b666267fa","sha256":"db56ba058dd55849eb802c661a6eff88581548c54b61b2fbd5f1f74dc92e2f34","sha512":"1048dc1fbdfc7a3a5c3b316072e5bd448863cf9d19302bcfba7fd6e40a87a172e5cfd3ec0f9d2bcf85b3d41089ce6dcd84775bef3e9e380d38c54d7e95fc2c07","ssdeep":"384:cNPQSCwXZ61S2qhOuYdwHpBY7QVme40qDX/RSzlsROP4J3Jv:cNPQoXg1SnO/wJBY4mekX/IUSql","tlshash":"c872c028c8e240dd2ed6bda13217f58801fcf8aa5141d249fdbfc11de4b8e45ba8e765","first_seen":"2026-09-08T10:00:36.032567Z","last_seen":"2026-09-08T10:07:28.371249Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/4af5334c/c","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.273Z","timestamp":1788862017273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /4af5334c/c HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wpj6x9j36aQXb%2FBndRyTts2be0IcYem%2B2uYPVhpj%2FOeZ9%2F4P1JylswfMZ8ZvMnZ2CRiDhmVkp2ihzIl32amsufj7cnF1dQkUZ22INfOTsnqnvHBFkr6yDti2qzyv6rhzcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=utf-8\r\nvary: accept-encoding\r\ncache-control: no-store\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b7fe502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1361,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f45cd285bba5d015555d0a911afe529f","sha1":"88ada9da1bca1c99a4e98b960e9aec2d99bd9c60","sha256":"3acedde26619b9683a8f4e1103d0a2615c398ed3c36ddb42067decc678656ded","sha512":"632c712c31fc25ea9ad3d6b27ad0f696b34398e1c6e887e6dc8fc1ecc538ba6c995e657adb519d3928ae0b32b8536d2d2022ec97735ceb6f947908ecc3ce674d","ssdeep":"","tlshash":"9d11753b0b18ed76815bf284888fdc8d019c377b2bce9a81f9800b1085dc72fa4610b9","first_seen":"2026-09-08T10:07:28.372083Z","last_seen":"2026-09-08T10:07:28.372083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/528e303da/e","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:07:01.685Z","timestamp":1788862021685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"POST /528e303da/e HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rainbetmx.info/\r\nContent-Length: 124\r\nOrigin: https://rainbetmx.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":124,"data":"{\"type\":\"pixel_event\",\"client_id\":\"8293e277-c969-4aa6-acbb-72963f99211d\",\"data\":{\"marks\":[[1,\"all_visit\"],[2,\"all_visit\"]]}}"}},"response":{"raw":"HTTP/3 202 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5diDgXoDspcna%2FaaTQuoqmONwB3zepPZjpZlMfqJUQO%2B%2F4jGUHguiQTmpRmqvdgC0OnS8ILLZnqVsj5TujAZwZ%2BLhiDVLN4K9KPRUBz2rCCzFCZrx786mTsCBg9eeYbZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-robots-tag: noindex, nofollow\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Tue, 08 Sep 2026 10:07:01 GMT\r\ncf-ray: a37d24d389b22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":720,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3d12ef41d32581d15f3d53b8db7761f","sha1":"90b735e367768cf115ab611b6903ff5776277f6a","sha256":"00fb09d3e65721293abf007ded14249c8321c02ed08c80260cf49347d44a5001","sha512":"e007a4df76219c82d53fb2dc47ac1bb3efd383e3f418a2871342b20a8e6536baa49f58d8e99b78697fb002d5a1e6ebc3ae02940ebf60d651a0809f8c9adf04c7","ssdeep":"","tlshash":"4b8000202e0c0eb80b80288202200baabee02eb8303a38c8c80c003028c3ac0e02a000","first_seen":"2026-09-08T10:00:36.112448Z","last_seen":"2026-09-08T10:07:28.374243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T10:06:56.649Z","timestamp":1788862016649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifv64ZGzdIDUXsMv6%2FK1MDqTpCJ1CQ0pJVTMm418bEvou5aoGXdSxwO2oj2%2F2FB%2FFBe60o8RERFO%2Bly%2FZS7PKeID%2BY%2B60xMV7DDm1YTf26vz6c5sBz7YbhONc6yjfc9LRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Tue, 08 Sep 2026 10:06:56 GMT\r\ncf-ray: a37d24b47d792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77709,"size_decoded":20733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18705)","md5":"5028220482a71bfe9f97d42f54d958d5","sha1":"dc0edae261425fd999a14bee4aaa1a8f92765454","sha256":"88d77ba3d09d81fd7ec2659ba8394969dcb35d255e45c822503b40fbcf968bf7","sha512":"884d0a68cadafbc7fc224f27efa9acfe325679dad0bcd52575653a8eff4c6d5c03e0028745f6a434d8a18151dd1ae5ae31fd3405d77d42e2875b33755aca9c59","ssdeep":"1536:WBBnbtiN95uC1aBbnY0wG5Ks2Iu5nRrY7XruzQ9s1w1dXKLfqSYIZOtLD9+MKdli:WrNclF8kSt4By","tlshash":"72735d26c1c5533b916322c8f747fb6f91ec7449f316c46ad2ae53e083c9e996863a18","first_seen":"2026-09-08T10:00:35.991984Z","last_seen":"2026-09-08T10:07:28.375488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":49,"connect":14,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-051.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.032Z","timestamp":1788862017032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-051.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzCDY%2FZimBJ4X4ZNtjebe02VNC%2BeTYFhk5plzFnOd3XpEjBG1zEYlb6b5AM3GtRtSInURBHi%2BI%2B30CMmtTs7kSOOk2%2BqWyoEddQvjxx3OucsTcggcwSZHThF0jFzkMSK3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ac8cc007f4840a28b78307cb68088165\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3061,"size_decoded":1654,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3060)","md5":"548992a8c98718dc4b80439f6bd637cb","sha1":"c4be7f15109f7e6fca15f0dbb2512f541410a28e","sha256":"6c3e98a48ff023330446874c04f2ad0060310f1c56a272ffe18ad159b4b1e826","sha512":"d8f75acd62f33d790ccf2b18b6ab3823beebfdb0bb2a46fad97a4313145512922b2c6afbf3e1d324b0c10660890acf6981d855fabb944a39a900c74071564939","ssdeep":"","tlshash":"58512768fab5d2b3b42f843f4398ef1c300566dd26c55b463f96f8887182a9393e1d12","first_seen":"2026-07-25T00:53:35.830685Z","last_seen":"2026-09-08T10:07:28.376156Z","times_seen":14,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-067.jpg","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.045Z","timestamp":1788862017045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-067.jpg HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2riTBOnIlXIlor%2FfevsK6M361rO%2FErfzT%2FdkBtxCUl32cp2QdZ1Yr4tj%2BnrwdsSPiExKsqUKU%2FGZFNQXN%2BGF6DKELssJaN6NRDkVvwBmsdhZxXzUt5s3X9yV6rwd8VyEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7c5033ed5465cfada777d1f1df532f3d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b68dca2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 192117\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192117,"size_decoded":192936,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1795x400, components 3","md5":"5fc335abbeb6afbd794bcfae93bbea35","sha1":"552280ae79448d4bc2a7aa7490816255121f0a96","sha256":"927c4498718ff0eda24f3723aeb8fa1ff5cbab78c7beeae61f0d4363806c0d35","sha512":"c4f879d3eab3a6ebd15d1d7b4e0f8847247ecf7d320d45251f7b5d7fbe5591397c736b237dabd5df30841eac1e6b3ca173c72faf0b3f4cbb8c89e0b79155d143","ssdeep":"3072:ywXdLqYQjkJIa0hoyRMNncvz1NmjSoYtXGqFxMjTJCs5zGZN6GDLf2tZut18Zlty:39qYFqJRKcvnmjSjtWUM8MMN6GDLOzuz","tlshash":"a9141233e0865f4291e604016696eb883fe3a1ab0edaa9f7bf5e5f11421053b761df4c","first_seen":"2026-09-08T10:00:35.994007Z","last_seen":"2026-09-08T10:07:28.37681Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-012.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.049Z","timestamp":1788862017049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-012.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWWY7e62MCAIWmRv4ElQp4etfjVZF2WcARAH0NygHmu95JQUM1q7xQtFgxKvIKpvnLfFVnxueHYc2wryNBZphReq6PCxB8l8KYuYo2l8ce5BoNiJJQXRHNi761jnGN7TnA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3082be296a490121eeff091bd06793e5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b68dd42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27880\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27880,"size_decoded":28685,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9a69073efdda6496b06e224a4aa92aa3","sha1":"b49888359a782e771f9cd73099f6c5168aaca241","sha256":"fd05358b50f516cb300eb33921f7ba5fe099ebfa1c1bb066f6862d9535794662","sha512":"9f892fff64322f0ffaac2c64c86efab99766c79e6dec81c587a0852cc7b951cce11ae0f1571a52180753fd9c618db703e170a665932f96727fb5d62f0872db89","ssdeep":"768:MbJRhCVtq06CRfKgmNd6BQ2VA1Cvb3sKBPpgS:0JRhCVF6CRuL6BjOQ7cS","tlshash":"68c2f10de6aa16b1957072f8c1e774b8a8f0289f717c2c2c4fc5e9e5523f6ad8106b70","first_seen":"2026-09-08T10:00:36.040444Z","last_seen":"2026-09-08T10:07:28.377799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-037.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.051Z","timestamp":1788862017051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-037.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxVr7fyUnjYK5QJlSwkyLu9Os2GAr10l7rFWqTvWPkmR0Py2mk50fLqiY2exKAGw9pMDisIO1RudqBq9f35T%2FisZ6UtIuBVrf6VyeTc94amC6hD%2FDod%2Bb%2BMPidiX5F1kMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e3f0d1fdc0e4f7f1a0f56711435ce06e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69dd52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19882,"size_decoded":20695,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"82fedd2b9e05d0b548bd27bfd57656c7","sha1":"c508ecc46bc13d21847ba26c142e4c090b38e7dd","sha256":"961d7e5e4854032ef309a31ced709dd2f90a58c50c67c5260a2a88886eb02b23","sha512":"2549ed51efcb611591c33f0a494c008bbb9b42df55ebb8c5c2b735b193ba3fcb485109a64aa9be981af5ceca0088eb3c12452a7bc0109005cb2f4a85d98df46c","ssdeep":"384:9ELU8Btr9XWp4yjp50aMeGbzeXVcLqOw/gmtBICSul2eG:9EL/79XWbT0ZeGXluJ46Dl2J","tlshash":"5492e0d8293718503f8427d9f2658e42bf246e51aa793a0c10dbc5970ad1ffc7e4376a","first_seen":"2026-09-08T10:00:36.079448Z","last_seen":"2026-09-08T10:07:28.378383Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-003.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.055Z","timestamp":1788862017055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-003.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0iTtCzuVAQC2JR7k6kpSydC5N12OHFOfKgE6IjLYMKnsF22N8jj4Sd7mBTHcSMiPigT7MSQkJ3wOPvxJy9N8LEbNm652hUbuUUAgpw6CEYa5tnxEvQomE2PQw1filT19g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5ed8c221d72f91d629e9ff1816f26216\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69dd72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29956,"size_decoded":30761,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a93e5ed4b749fcaf0c9935abc224a73f","sha1":"b741cc39c7fa922564f93eac1a4a8280b5bdd53c","sha256":"b5faba6e589a60c6e5f43e8cec8a2cad847b58b859133e31d3d15a576447a956","sha512":"e6578db85928368b5c02605fff2e16d6e7308ae46fc52944f4dfda379ff32bb698a27a32837b52c28aa4afeadde2f5ff810f660557eb770b4fbd09f2d79d75ac","ssdeep":"768:Nk/MFzDznlFGyxdXYjR5SF7h20xZbiCuTuwCwjgqAgA2kuk:Npl4yxdm7420xxiCuVCu5jkl","tlshash":"add2f19072100275889b2cd482b31a6adcf35faa6430f75d4ba0e7511cfe7ba8127bdc","first_seen":"2026-09-08T10:00:35.968416Z","last_seen":"2026-09-08T10:07:28.378963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-025.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.067Z","timestamp":1788862017067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-025.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRTGcDjAmZedYksT4sen3NpulkgSal7gqFopYYsMxaXqJplaD6FNJrkipJUtDPSYtyJuJ%2B94inLU%2B868OV3RhBcUraWv1JmcsJ7VgklttNYiUd8ITL2TBToeLs9I4retFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3d3b58b1873c2daaac920cf27f7995c6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6ade22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14962,"size_decoded":15771,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c1e43266ea24287178f853fe33688377","sha1":"8edf75560b85ab5befe7eb6ce9902ffcf59fed95","sha256":"5deca422e8e7bcc414d8ac77aa97baca4d39b907ce4e2ffd19c537e7ad433d33","sha512":"2e4213f4fa8783364dd39e5b469f48c6891ec818b899b1e0880bbd031952e86dbe64cb906812b38a5713f0b366b4d6c8e90bb56f89a0701cdd337d7af2491cb8","ssdeep":"384:zxTZfVPKlAQ66vQ8DmktYl2KkHNIS9ncd1d1Za:zxKlH66vtmkIkH3901vZa","tlshash":"5062d0f852bf5ddac799102e03d13fc5c58630f98a22c721c20250bdba4a60c1de65cb","first_seen":"2026-09-08T10:00:35.973727Z","last_seen":"2026-09-08T10:07:28.379537Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-066.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.234Z","timestamp":1788862017234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-066.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdIVSXerJznbU1N7q40CLYnDsEbicMHfG7AXqHQbvQ6PC271MXFSDprIirWvi1ZLVxFGtNdF464JU9CEg%2BSGLSCBu%2Bj9zwXHE3pUmGr0DEztfVnPrWjdUUJ0QnoQSq8bMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1166cca09bd52de8d550fe3a004633db\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be2e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27864,"size_decoded":28673,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"9592f1c39715b18e99c493ccbf7ec1c1","sha1":"d7b3a97940df38cf4044ec80c65efe43f19dc44c","sha256":"83b40402cc268e27bbdd657da76addf487c60132282228a990643320e80ccd0e","sha512":"7d412b0d76a43d27fa2bce47fae2c0e3637189d8777c086ebe33285fb9ca557900a17776492cfd099b78e2e70489e4aa4e332bc44bdbdcbd659ffb7cfadef011","ssdeep":"768:++IeqBlI2BE1e/fP1YIOdeutNyf1fgI81oFKRe1Ic:++I5tE1eP8dutIIkET","tlshash":"90c2e1e298eb875423ac0637f3ac5b4735c6d2f16aa9b0df4c736232144d142d7af199","first_seen":"2026-09-08T10:00:36.106113Z","last_seen":"2026-09-08T10:07:28.380503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-049.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.036Z","timestamp":1788862017036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-049.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8JuZrKOfm8BsaY1ugOs%2FGqkHULL72hn6aVu06Nbe93Qg291768lfc6wMOhuba98KUnqno6epoHGJD925UrQ2NR8w8FT0YPN1Ds%2BDYwcyQpJsnLy1phxsT82kQLavyNGUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1c50881d3730d8ba50d1b6d300b38030\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":1414,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1590)","md5":"372fe3ce5fc41a34ccd4bb4d2509c1c8","sha1":"36681fb6d393b5ada9551672f62eff060877004d","sha256":"c10aa10c342ddc426b34a20b204a6a987da6db8c04131fd0f035ecb0cc12a05d","sha512":"2f125abc75460cbcadbd811369653f92e3a93401fda5cbbc1816b6b5ad439d75bea5b40502ae207c788f81dde94a3f0c0c2126f21a75f8ca34d85ef5eb8287fa","ssdeep":"","tlshash":"6a314e34942b9509d6f7cc5630ce3f13681d503147b69223a92d1ea89fea97f1be072c","first_seen":"2026-09-08T10:00:36.036293Z","last_seen":"2026-09-08T10:07:28.381573Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-064.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.053Z","timestamp":1788862017053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-064.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frfh6cxcEUpvU1pB24WqL3oFqp4znTUZB%2B7ZwqJBsfZTwDCxMJL%2FGpEbkjaUUDypBQcqGp8UR6xspgCzhOnMNR0bF7rtReOMF6071QtYozhdsAX6Ym%2BQo1%2FE2Qqg2IVj8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"48585a6f06895887198c916a84ca342e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69dd62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18994,"size_decoded":19807,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ff316598db3faa44a2777eaeba922760","sha1":"2fea19f23ee67901818d765e06e534bb66ad9612","sha256":"d977edf2d5ae5c7adc0ead5b061fc2f1c24cfb7609c5f556cede87ed3445c727","sha512":"a6740651210c451c515c0101ffb4d39ca123b49d177578171ab00886eb6d81043c4a539d6eecfe813ae2c084bbff40f1988815ed7950f4d37819e1aadc69d3e3","ssdeep":"384:VXny6wB9akm/sk5P1Xhmk1nBYM7kxxxRgkpfmXvXCzra+KdMNfAsEI:VXnyH9aLsA1Xok8Modzmm4d8fV","tlshash":"6182d1abc4744602514326275311efae13936e72a3ab61750031e7c437edae7d32dd5e","first_seen":"2026-09-08T10:00:35.998345Z","last_seen":"2026-09-08T10:07:28.382166Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-034.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.236Z","timestamp":1788862017236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-034.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RB6rLTsDQ0aL7ZUq%2BsR%2BQZDJkuocRgDeOEmNw5cZp3CXzXa8JcaItkcaPhS9SI%2BXKa7EJ6H6rcS9oiamZnqZUFy85q5PR%2F20b%2Fw0qSqgge%2Bnp%2FlYa298SPvb8coiYg6psQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a04a55763f3e8907e38b3d1ba6eeec54\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be302efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22134,"size_decoded":22953,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e237088e20e69e9dd5d84e86aca91010","sha1":"ff76f51832cb8426d67cc730aed3dc5e880aa789","sha256":"39eb006ef3760280b8159da3035bc723a241ad1ce8caad589e993a8827989034","sha512":"b0840d8adbeec1b2143577915dbb23f270346a574d57e7cc0706811c39e1e3835540dfbf1c1c8a5d79476dbe3d5c70b46a2b55ea1a3f2aef62bbc79b92ef3e15","ssdeep":"384:skLlVLwBx/34uS1W56i34Aod9lqlOhTcRs8YwxstGWl8Ap1GEyCyuRh5MHmk3xcZ:skLlyH/3/56rNHqMho+bEst7p8jCSPx+","tlshash":"fda2e111cd980930ddec6fbfa5bc421f50019b3a20aafb2c9d71bd5f9d05ab8a5a3194","first_seen":"2026-09-08T10:00:36.086944Z","last_seen":"2026-09-08T10:07:28.382741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-044.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.240Z","timestamp":1788862017240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-044.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1u5MNwX6J%2Flq%2Baix7C5Pa%2F5IkL1oy5VrQazYRV%2Fku%2BLKjHNctgv7GGTNeInZPnA9rsuhajszTqg6kjDHhawO3fCn609BuQBjYqTCPSPTqBSiILr3PrK5kP1H9OQRG83Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a984a8bfb9d7428a3099cea78b9c391f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17614,"size_decoded":18429,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"77034bbd9c66a0663d043baaaeff6c42","sha1":"99be921c6d696e57e829971d6e701399b81c63d8","sha256":"e0e42b66ffba8910da37fd99dfedf8b7b5e4b95ee3823814dc8b879ef49371cb","sha512":"fd4241bfc5cc5e11b89c863d68239b629777ba1ff0f0790b83f72ad8369b68527f0e0978be8f05811bf35a90df67b33ef5311cedf96e5004e3a093c56ca3c821","ssdeep":"384:Sb+fKh3p8BeycHgS1iu8SN72eqWMqDfJCQXNyezcl+CWtQtKF:K+4GdcAS1V8K7EWxfJCAhzcl+CWt9","tlshash":"a682e1c3e32519b20ef5aa3c573039739a6a7252b64f927daf0a003d53a654a61df06c","first_seen":"2026-09-08T10:00:36.003166Z","last_seen":"2026-09-08T10:07:28.383806Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-058.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.241Z","timestamp":1788862017241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-058.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMMMgH9l%2FF9UdJRSraQPNNwpjsshYDiZgTeFVr50RVYgPL1GBaHzJBrrqkEMjxMZ7EpFAc7jzNPwvqOXZNEpTpLkLzyB%2B3nER9Fo5JGEIO2ftD%2F98QvlIyO4wKXq0Nh9tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c4724fcb6bd143374923cf75458fdfda\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce352efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24060,"size_decoded":24871,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"6c643bde232384c3fe93bd9c9d3ba11e","sha1":"ed6f6655464f98fe3d70d480b602c15e7fdf38f0","sha256":"a2375c90b576b1fa0a34af113a8b1cfa4403998c9b646001110ce6c48262f04f","sha512":"632813f6d131860c5b0eff5847af88d8ce729c3daec72ba48c2e28d554bac8f63a061bd8b75adb5e5e120f359e492a120864b21bd7d9c9bcfbae63770c57da61","ssdeep":"384:tPbG57ZOnjt4LxWiUVC9sXsPJ53IaqKJgE88J5Ap1L/l8gc4TkoyX3fQZu:picnjUx3Uw9pRi1M988J5Ap1LVc2kp3R","tlshash":"3eb2e172e70e4affe613554c3d28ce3d7a0016532a1a856d78223ffa619bdddd241185","first_seen":"2026-09-08T10:00:35.986871Z","last_seen":"2026-09-08T10:07:28.384405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-017.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.244Z","timestamp":1788862017244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-017.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEaD3TLn7wNgS%2F%2BxemFOe8TOVOHaE091YiW%2Fksq3qvJb%2BrUSq3P03N7y%2B8amqWt1ep97gQFCyYCZ5o3QE%2FBxv0qsKryf1U9mqrt5xckxgYdhiAUWA69q%2FYtHMxa4rew4ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"bdf058e82200c6a82ad8ed5318f10d9f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce3d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20574\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20574,"size_decoded":21393,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b415b04bd884964c2486cfeeb913210b","sha1":"308ea800cc2fdb1d6ed177e273b595fb54ff7c4c","sha256":"2c12c11d04b300cffe13cc4634f034491ffbf0c632cd744a70397acd120a8070","sha512":"5b51a4ca04a232ca64cb5b026125bad78839cb6b59ee513e7b4061029bddc449ff1c4bf82084798d55f7f9bf0862924882988f16e7658b87c01b8a60925314b3","ssdeep":"384:j4dfqhcS/mRqABnnn4EvhinJYdFP+ubNw4rJ+ALDgwNNoosueXvxKwg+To+n:jyqX/t0n1hiy3WCnlLDgwbkzKt+n","tlshash":"f492c07b88b2182877b781a9f125ebf5f0e751b3af10848c917ecbc606951d2d733858","first_seen":"2026-09-08T10:00:36.11045Z","last_seen":"2026-09-08T10:07:28.38496Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-032.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.249Z","timestamp":1788862017249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-032.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MrfKk0Rjbp3S1iDJIMY9to%2F5CvOQCUfnyhb1RDY0RXivdsZ04JqME0DbnjfTwKeufzKpVtrKSVjaJp8JQukCKWk3pEgCcONf3MYEkMqAjQsRyu9roaTj5QE%2BRQWa9FxfPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0c835a2118c10485800924294c653b61\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce442efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20476,"size_decoded":21285,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"97f00140105f38d063ee226ab7b79e1d","sha1":"df3d8159dff25f84d0a2521aef39afbf4c980c78","sha256":"ba314ecb61cc1f35f7ecd8df603cbfebe292d4c407a97e9c1a9ddd473d058914","sha512":"6b339c11708abcd857c56d4ba94678dbba67f0c7ae0c3a7acfc7f693a1e1c0ed6f4ad42c86ce8f36b5302fe0334927cfceec97bfb6f0b438274efc6b75f81ed2","ssdeep":"384:9kLzwDKu9EiEvsXkKJEx2HV45bX8FSPNqE4t7kAHHYQnFJOMAtL8QUa8L:9sQKBBa/ExMV45bEwIEyHYQ+V6ZZL","tlshash":"4592e03512750d6e61baf08a6efcb6bdff7070491eda99801342782e1024fc7ae524b8","first_seen":"2026-09-08T10:00:36.091892Z","last_seen":"2026-09-08T10:07:28.386022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-024.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.256Z","timestamp":1788862017256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-024.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBCxspa5lT6Xam7b379jiU2WAwrJSyVxXnKCKyxVEP9rtps6Ep7AU9WkrW7hnFIz3y34wQIPHUTf7kTyERTcyYHGJ2MWGANL9OTrPQSS7jnlWprBbgertArmTtzX4dxizw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8f5764974587c8bfb1cfa58e7437ba9a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de4b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15848,"size_decoded":16653,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"d701f6bd5dff113fa7104e121eec9e0f","sha1":"6502d76b7e8fe34575e71c2d8a545495806b7857","sha256":"c606b0f88abc41a5e301b0ea0ef4f42020c9472b6009b215f91252b6fe5f00cf","sha512":"c00c54b4832a04a8594f082a597d22f2c78f3cabb904ca28451b88d7a278ead4e0a2f5939cfa47e41262735f118f2e1db60ccb8eef3049da5b95bb096cb4ac89","ssdeep":"384:TfKEsWteEXypt6xVAHcOTj1846G9y/yGoZrCFbOY+X++liUs:rRsWVXKCOHL1TJg/yGoVCIYD+89","tlshash":"be62d0b617439a10aff36114d93081f55e2c12c8fa8cb6060d6cc767095beaa59ef2cf","first_seen":"2026-09-08T10:00:36.034447Z","last_seen":"2026-09-08T10:07:28.386648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-047.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.042Z","timestamp":1788862017042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-047.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsGHuwmAJhhyHBsUuoSb4D7RpdF%2Bm7gfaS96WHypAQSPPXLLvJVSBO994m6ysTGIgfvVVxcX%2BHwjRNTkMctboNhYKI5euwP9cN9PA2kaeNU%2FEmidI4DadFTkJ4Zy9koo2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b1dfbb8bcde0632a9f1211e076131421\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b68dc82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15273,"size_decoded":2685,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15272)","md5":"45bff2578b7484ea1306524e97570e75","sha1":"6a0acdf910feb6534974c6fe81f7d7a95673bb1c","sha256":"4b61b4edde84821bea317e7fbd32aa856e3c5168db9f8a00924f1dbda63b07e4","sha512":"d41989e1e27ccc9c8a7aca6d40c47f5069fe2f64acff4d5dbea9d7a91dd57cc86ada92a471cea6c5c707e6faccd67480a102699248a76876f5d974fdfe99a528","ssdeep":"96:wYle0phHtz44CjtlaNycj89wwPXtgSRjA4zMi0p3/e3N:xdkbcj8SwPOSRjA4wi0te3N","tlshash":"43625967e1f393ff180d7252f0120644ffe021cae9a58ee41a1e18e54a6d961b3f96c7","first_seen":"2026-09-08T10:00:36.038384Z","last_seen":"2026-09-08T10:07:28.387449Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-028.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.046Z","timestamp":1788862017046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-028.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tojLGX%2Faykoi0k6LA8kHHPHX%2BgaCYqxnQcoXeBgf2PU5XO63Q9a5Qxb%2Bt4vCtCbS%2BoLESdxFGHvrcjNDG%2BT0M8gTdDi3rzk5FgLVKNXnaw116h2SOyk%2FcuoGLF7GHc8IPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"567949f00f7791f473686a1dfa92aef9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b68dd22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22116,"size_decoded":22933,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a6704e8ba85c99817903912f73dbdf2e","sha1":"4faec886844605d0b22b698094d9473b14dcff01","sha256":"85017489ec290a54009743f098b69c3c860bb8607173d0e8532dc80f9cd6e6af","sha512":"b20538eb86715c1b7851487bc2e5bfa101a2f3faf9f0a98ca0e65f8c66c732668482f53a3fcb1d86a18248c70b4e21896d63d04074ed88895a11dc2875829697","ssdeep":"384:tGSuvE8p4p1If/PUidVwaHpBXPKZUBtppe32FuEZaQ46TYpTV56DFDto:tG/vTp4podwaJVKZMtpU3gujQ46TYpTx","tlshash":"05a2d1532b74ccfc4c3d2937644e7b35da25a960be2dc0ae69e712ce013a9c924971dd","first_seen":"2026-09-08T10:00:35.996411Z","last_seen":"2026-09-08T10:07:28.388299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-008.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.068Z","timestamp":1788862017068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-008.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ze8WFRb88y9u%2Bx%2FBRgaW9E3%2BJYwMpi%2F%2Fvd7YEgTSsa%2FtXBJ9dsc6ICLCEhLMsUx02S2wZ%2BS2jY2%2BRZW4WNOcOScP2Jq4YKBQTrDrhoUii28nmob2cefIdcXaeo6VBoA95w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2098e5ace0a53d0c86dd40b5d10bd85f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6ade52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24110,"size_decoded":24931,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5dc46f594070ccf9583677aad7566e7d","sha1":"2642182f0e773f24082de846a9110c486b3f30e6","sha256":"12cabb175d9abebf5c680e4a8fd3ffdd35dd567388a72a83354d3b5f17d8006a","sha512":"c622861ead45124599fb975fe3fb0443f7607e936784e5326306feec84ab231120bfa7c03314fae67be48d4071437fde501460637b1abf314a58f16f395ce513","ssdeep":"384:Pc/pJpL+okTxjzN0a2v+khqOchMRNOrCoK0m8XWM2xJVhwVfrLw+eZwWXhCct0BU:Pc/7paokTxjB0a2vDhch2OmoKEXWM2Hn","tlshash":"c6b2f18ae1840817c1a71b86df1294fc0167d6af0c71ed9ffb86acdd195c7a894c0bda","first_seen":"2026-09-08T10:00:36.058057Z","last_seen":"2026-09-08T10:07:28.388901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-072.woff2","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.225Z","timestamp":1788862017225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-072.woff2 HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://rainbetmx.info/assets/vt1-049.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnbMeI%2BAsfrM6cX0LdFmfj3Cbzz%2BYHcD5a2X1LddMROBmlZqz5QZgwSyUMSTxpSgBwwSrx3RFa2luYwSl8QLzkJ0dW%2BaDl1wBWD0El04t6GEObix%2BQHl9NyvY%2BCVgm%2BJMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1988d20bc239ee79fe424e34bc23c5d3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ae252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35508,"size_decoded":36329,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35508, version 1.0","md5":"c154477b9affa3a0a47f894c8b80c03c","sha1":"b6711decba0d571b538ca01de8a6e70ae4d219af","sha256":"6438d7b8ea9c7c3992d5e2fd2afdb1ff948570a3ef0bedae76247b51632960ba","sha512":"4573c7b0c16c726dcccb6319d6e7fb0d163fb90e1fcfd4228f7c471d52dc4076a5a59b6516c5ab613eadd6cd269b327b3f2cb4f14c2b336c28d31b3809283df0","ssdeep":"768:/plpZnTpd3+CSeY9oJ/P17/4T1HHAG9i6XG2g4voyj2i2619EHGh:Rl/Z9d7/8v/mGCL6fEHGh","tlshash":"b8f2f2c17e122f303604f5f6c0b653f67372e495ea5b8bc098a65576cb06f15dcd904a","first_seen":"2025-09-07T12:48:15.206931Z","last_seen":"2026-09-08T18:26:58.428502Z","times_seen":14965,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-033.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.237Z","timestamp":1788862017237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-033.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkG0FOjFZErZWsjzHcv1aX6f%2Fecqz73vo6Ko5uHQl0qI%2FzrxyyXsSHX%2FoXvzhxjjseHe8Ad0cpjFoCyG%2FgO8%2F6dN4zHbNfodIJj4iec5VuvQ17Mn3mfr7aS%2BCW8G%2BDcpUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7e46c1bc39f01480459fccd567cdab63\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19818\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19818,"size_decoded":20637,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fac32bdb22ebffacf45a1d4095bb47cc","sha1":"473b682177210d130f21d86cfeb68fb0cdd28e7e","sha256":"e58bc856fb140eecd91c5056c78e8d83cc4a66cf92258bf757dc58a96c15f430","sha512":"04179adeeed45ec62b1737396df21f3044919e0e1f2a0ee5b4602c859c013dd965d98c9dbf2e78fe137183b0ff50747b87b6b66ba48b10a75f6dbe1898c4db93","ssdeep":"384:lNABsZZ/JrpBriSe2gSeOsjwzQc5K0LQnQoa/8h+ZCN+XMfte5f6:lOBKZxrp62PeOmIUQAh+ZCAMfte5C","tlshash":"aa92e0f2e0b4d7cdd7cad1714f5613fad13059202692ff4e1abab4a96301b769093e40","first_seen":"2026-09-08T10:00:36.062897Z","last_seen":"2026-09-08T10:07:28.39021Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-009.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.242Z","timestamp":1788862017242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-009.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34FVfFu5Mqq9U2WDTAK%2Bst8ZqJCXCGIX6VI1yC7FAOHFCejvdikRyINYLKaLnxRZz5zLCYM2opXIexQ2fMZLtyR%2B0OtjXYiK%2FYzbjr2GnLFqcp7zXuLZP7LQUGjMtLSTUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8116c449dc692dad716fcb537bca213\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7ce362efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18396,"size_decoded":19207,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ae95e3d27543d54f89b46ebac4777ffe","sha1":"e609388d9c3bd63b6284f4d0d0556d4712951ecb","sha256":"9520b90096bc0e22797a29ba48073bca1bc84755b44cefbbc5fa9851961873ec","sha512":"ed2adb43b36cd947f948a7ccc5768951566b90d86e29f7c45e881846ff9cc0c104c960409d41e363569386e4605e6219a7aad39cb8d1eefeb8ba3815fef07777","ssdeep":"384:hRNVVuxuR4LVEoaltWrYESDgKvmMa1+uGVqFpiERhSA9SU:/xuxuRAEoaH1GTQuTvSAkU","tlshash":"6482e1824b58ac48df8cb5ec0ff227086e527f3d498a2549e8115e8085b1fecf493776","first_seen":"2026-09-08T10:00:36.005021Z","last_seen":"2026-09-08T10:07:28.391261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-035.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.253Z","timestamp":1788862017253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-035.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FFJP1KufvxnbF5YrHYPsWgB%2FcNPcLAXOOxwv4o8MOwSXjAWzUWoB9%2FBTLejvFtyLCT%2BDfztUBnOw2covBd61RX2mEuMcK8GxGyjHv9c0CV8TEzUy8HH8sk7RKULfH2qjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"187173b5a087e8806fa53722a5e921fd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7de482efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12896,"size_decoded":13709,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"434e686cebeb41a4ce3feb5eb3f1af08","sha1":"73c54eff44063e4f97356567c4c6626fe7efe8f3","sha256":"0a749c32210b45356f1a3cbb4aeafb991fd280aa2fa643b0529e0426d772b822","sha512":"25b786ada13c081dbe500ef83951a24785b44130e90eddd546fbc6ab54f3d0b9cbd68e9aa56d810d947a03e697230dc9eee159b651bfa3496c0ad404ff7c59d1","ssdeep":"384:uwPryslq2kYuAJCK9dfYY3DhtLufU99gTN9c:5GfDnAJCgYQDfusf7","tlshash":"8e42c0e87cb33786f60a0cd97ae271a7d589f33575e50699007a9cc90cad4dc7a322e4","first_seen":"2026-09-08T10:00:36.069668Z","last_seen":"2026-09-08T10:07:28.391858Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-022.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.061Z","timestamp":1788862017061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-022.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtPhlb6vgoLkb%2BK0zdcR1tDr09SRgTZgRWvfs2WQxGt6ws9N5AmWu8FT7XN2HBfgIwF7EvbQ2IyID3XXJfwYzBrA4vcd1DGUwSnL5WrUO8%2FRjSTIdgW9h2kAzbpbUD%2BHuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"611d485cf1291ade4777b9ebefe8d5be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6addd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23088,"size_decoded":23899,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e911a169a821b4a376495e9d77b33d08","sha1":"3993e1ed2784571f62cb4dc0255a96c64028676b","sha256":"3ece06166527caeed617b75045e35ab4f5b7229922fd127d1d9dc91c62db1ea3","sha512":"e00a426519c9b46cc4d96eb2059b29e87fa25b47b51d25bc2fb4a41d56667f64a02d13f31e5a8f53d1a1d0af7c484c9959ccf2eb97e2b276bf046d8090a5c429","ssdeep":"384:8YCxeL/s6gcbV58fj+B7C4dAvGluN6YJivBm0c+b6TNjkuhZ2Z/Oky6RwtdqBeTC:BCxebgs8fjy+DN7iJmYb6VkjZ/Lyz6iM","tlshash":"95a2e1688dc6a0dd1c557cac1a6e5842329872ae5b2af484bc0c31e5df37c90de5e3f6","first_seen":"2026-09-08T10:00:36.0558Z","last_seen":"2026-09-08T10:07:28.392927Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-050.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.037Z","timestamp":1788862017037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-050.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rc5zqSPWJeOWoZzoIQp%2F%2BO2CKuIA9PQXxeiSVC0I8e1FMoM1MKRNyIm%2FvSLUcRVr5%2FCeM5BoiFznu8uDVoMpC2v4ymISrwF6VPiSCMO4IptLHHtfw6fuHry6v%2BnfcM0nVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"99b96668b953210c69412b23b5404ab0\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15145,"size_decoded":2700,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12075)","md5":"fc92c4a0cddc7e5b79d2f7b640751a07","sha1":"2edb8efd8283680d319f836f88a31a62f4e6de23","sha256":"e0a55bffc3d102ef3a7cf8364a295c3049e6ab62396a0f9b663d78f23b275434","sha512":"ae2c356cd3037f0fc8a74fcdbbbc1a0c1214ae0ee4f4ab90328e1e1b5dd393046d4af97b38b7bf3f67912857271c9d42130ef05d1b89be1063c0aafa2d715b11","ssdeep":"96:s7fPlJz08BoJsbJZT7ZlmmMfsTLFtcM7kgCj8PssbVWgrAgbwbvbdbcNbcYb7brZ:sPlTlmItO6IdbvbdbcNbcYb7brbGbGbn","tlshash":"a262745aaaf6133bf49d604bf090ad59dfd0d5cbe1d69ed82c2c88e2414642632f52cf","first_seen":"2026-09-08T10:00:36.072785Z","last_seen":"2026-09-08T10:07:28.393571Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-053.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.038Z","timestamp":1788862017038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-053.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2uApSiKuiwU7HHB3jRLuwfDZafmTrgdXZLFIJJWb8dDpOKfr7Pv6xsTJ5oIi4m6X96JLhlGp%2B9NAvhwQK14z5LCmTjatbYppZ7gAEF3Vc4o6J5rd9k198USjVwx%2F02CFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"fc403ef3bfb30f0969c600e9c2461194\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53595,"size_decoded":5628,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (37660)","md5":"6262ab75a8ac7e84fa7823f295821052","sha1":"505bf84f33488d0dffb6cf24deb37f7ea996bb88","sha256":"cbee7dcc4f8d1204db92c54f333a458adca38defb9f6c3355e02dee62234bdd7","sha512":"5100bfa003b5992463a8ea391480a6524014caaea164a0fccbeea0ec378b1cc63ee6b5493f812027448430c3c4282012b05dd18f6b74d8909928bad030929022","ssdeep":"384:6VNKeAP6JuN9M9y3c83l7haXk9VUWt8mlbAEXlZL7SngECeK6+Gar:6yxiJo9M9t8X595SgECeK6+Gar","tlshash":"1a330923adf2136b7a5cb1bbf0611902cfd750cbe192dee5250d65e5c6414e0bae8f0a","first_seen":"2026-08-30T11:59:49.548281Z","last_seen":"2026-09-08T10:07:28.394165Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/53cf92435b.js?v3c6c8=79f905515a28","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.081Z","timestamp":1788862017081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/53cf92435b.js?v3c6c8=79f905515a28 HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEhTlAhGuuB4WX5oKT6Kg2EA4EDlGc%2FbOUhl7eWX0bXTsH1dMD2hLfoxBBvKVgsZgMDvOTt%2Bt4WIuKpG5D4zqkf2nv5hV76YNdm8%2BpB559osdIMVZKq38yGRWpzI8tv6nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b6cde92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11411,"size_decoded":4573,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"0439828741f85bfd40ee20d031576ba6","sha1":"67676e6ee0b74fb6024b4a943f2f1b836b853798","sha256":"79f905515a282563194e171e00ddf88efe9d03499df203287bf218e60da2d17e","sha512":"73432a52f395e173e324218dd1620269e1b44aba5fb8a9443f777f90905c7e2b3e06270f777c874291964da1ba4de6697ce2ab0cfa40abc735bc3a0a9e1d6773","ssdeep":"192:lNZ+3JR/KhiEnc8aDOnFFhJpI6f26fqDovzBKTLxeq0xSeqU+Q9NQ8X+vB:MXsfI6f26wovpR7vX+J","tlshash":"6932946e51f319374467e06e535ba20e333a1043718dedac7b9c5a401fca6a8d6d3ac9","first_seen":"2026-09-08T10:00:36.060621Z","last_seen":"2026-09-08T10:07:28.395254Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-061.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.230Z","timestamp":1788862017230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-061.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H54YiTshkhiCwt7Z08RvhtWd8bBBrwhjiWgv0akMCM%2BHNyxxovyF%2FQ1lGhwCFfYDQrFyTrLxA69IUlf9su3FvRSnsR4JrEVtI4ftRsbOKJxdZH2xOUpPZj6NbKAMMvbGYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1e5e1f81c19bfe560fe2b7dee6f8e68b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19450,"size_decoded":20259,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"208ef11cf28f640b308db9c674368a31","sha1":"3b43c41f3a1f72e47f4e26715283b13a6070632a","sha256":"0abba97779a7d1636c7c4db3bdf33e07e3477aeb5ea945025a2ac5b45b07426f","sha512":"7a3e1b58c17ac00dcb767a6452e466958b3298df83e8032821b384104710b1373fa84012a77dc647f7374d7c201f95d165d9e8a5957814bf77f46d9cfe2326b3","ssdeep":"384:S1X/cgyVEq+2YwOjE6JjYicjm/yuMqXrW+UF7eW3AzYctNRuw6E:Sfyu21iE6JjTHj7vUBeW3AzYXw6E","tlshash":"da92e1c3bb38a43eaf248d22db6a280e515c09d951f54fafd6d0950170d80af9f169e3","first_seen":"2026-09-08T10:00:36.029271Z","last_seen":"2026-09-08T10:07:28.39587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-038.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.235Z","timestamp":1788862017235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-038.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iL3ul54du%2B7kbWzLQm9yZeJMY0Lq6Xuxz4hCebjXgYM2Sid76eQrycPglEmfWilCgwynFlFSkRGLFoSM7NnvHAS0Rcecyi6Dh6b14Y33CbuK8NDlWq0D6ndqcFEurOcSYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"413a28db3e2c02fa65e46e73e4e81bd5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be2f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14136,"size_decoded":14943,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"db5cbdd8addd2bced2338691e8f45f52","sha1":"b070274fbdcc52e71d089dd046a726075be65ce3","sha256":"cadf8486042d0757ad7525dc0fd70850abab0563f84cae33cb887dd26aad934c","sha512":"73cb4221e31b7eba11d33c366c878f19e252fa2cfae1d2206d3a7e7135adb24ce9967a22707dc4c4a5a4eabd9db11e56eac7ea3bbb8142e57e4716a47d5e3988","ssdeep":"384:wcPfwCMct5sjfv7/CxVSjky8g9dCa/7+k6H:lnwCMS5Gfv7/CbSQy8U/7T6H","tlshash":"d252d0e42b0f5c2967651d28b466720e3f993abb20d314a2bbc97bf970fb55051480c8","first_seen":"2026-09-08T10:00:36.10845Z","last_seen":"2026-09-08T10:07:28.396539Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-063.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.239Z","timestamp":1788862017239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-063.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SLuznL1i3TP9%2BpsSSxFcffPrndcAiFLJgi2gbxjiYb%2FbRLk7Dpwji1xl0nPHssevD8mG%2Ba5bubLriRIw%2BKVmxRaOPzO5zS2x6PWioMP4r19IfgmkjnZqj7zCHvEat7%2BOpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d7d1caab8659287322934ffdae83d5e3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b7be322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20182\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20182,"size_decoded":20997,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"24aa60973bb4c9f9b57c05e07bae63bf","sha1":"197ccdb9f9c88a6f89e78d9802c6e91dc75a5828","sha256":"5955f848f331021f554f3f76c93cf1ec39758fc0c8f9df0d1ebfc4b8f04012b1","sha512":"3c9185244f3afd69807ad230903cad94bafcd8be583017e297eee448c4559e936af8c0bf77654e16a2e1d82bff5b79082cb037bfc2d9244497ac8e36fced1ff4","ssdeep":"384:iRsvLJfqSBzisUq7auh/WEykkEqaWaEHiCbnVjidJ0vBTCjsRKfhg6OUUv1AGt:ACFfq6zUut7FuHiBdCvOsshgFNAGt","tlshash":"1392d19b13ea83f824b9cb8b98c522523dd0d185446c32dc78427691f7f385e89e96f6","first_seen":"2026-09-08T10:00:36.047992Z","last_seen":"2026-09-08T10:07:28.397667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-054.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.034Z","timestamp":1788862017034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-054.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6P9TD7zVr857WxhV0bUdLFy6RvPMeGmBOlyrIa3qFar5qPlYhxGKT%2B3Nq5owg2AL%2B3YyB70XJcqYRdZ2klBFr2KqNXQqmvrL1FEAO%2FQwxd%2FdBcmOAQ7PLokCQJIlyRexqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ecca869d16ac6195c57660809785212e\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":357819,"size_decoded":52951,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6042f20a37d203e11735321527323c88","sha1":"d6d4df27e4da59de61a2b91a52cf6421562f7aa2","sha256":"a94e5ecc340fbf27e0a22173ef7d4d544912f49d344861a3b0b7472bab542144","sha512":"224f55bed9984971cd693228f73ddebbfdd703f87c67025d4043485c4624092f0db6695ae4d920787b44d93c3f9a0f100a6d23678179047ed619eb029d01a742","ssdeep":"6144:cFW8kdrz7lqaehrNEsJ7oAzjXkcgs54zKr3YTogyKN9AOL+OVxdqKhayvKmiNsIo:tdzVXB","tlshash":"ed7483a5a25a507f7c23a0f4c3ac699ca11ff1c0df3b16e5be82512157e13fa1c6ae14","first_seen":"2026-09-08T10:00:36.05375Z","last_seen":"2026-09-08T10:07:28.398261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-052.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.039Z","timestamp":1788862017039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-052.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3i6Qwqy5tX1fX5OueThulDD7WouPXRkBSXmyItW4wQJrZNO1hmNQdpB%2B1wsrU1s7dPzc6%2F9BvokqVH2%2F5wcxHV1ueECHXGBGfQmRSfnvDNx9yAKSWqy7T6h0M7qQ%2FUhqqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"f0f616c8515722c0ee8f3b1f0518adfa\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b67dc62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4732,"size_decoded":1641,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4731)","md5":"26e8072617cd048951ea21770491e42d","sha1":"2890047e8b0b439b65a9c5383dd4469fe52017d4","sha256":"2d7e5e57da32aeb8de6b909178afddcf76951747732e3ec776bc9112b19a97f2","sha512":"c5f582d18303e162e96b919401e1b4be92ddb29a55ddc954c1f6a4889b1823da1aef5671a3bb0443662151ccef9410f4c04e3a8c9daa6690ffaba6c3c7894a7f","ssdeep":"96:QpLac1/e1f0sqNBgIvZBvnVBvnk69bYfbaNk:yj1/YEn+6EF","tlshash":"8da11f3298f0b73bd55c6e67f6c09948ebd461cbf281bee5989c1cf940c5e6522e0329","first_seen":"2026-07-25T00:53:35.827863Z","last_seen":"2026-09-08T10:07:28.39889Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-048.css","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.041Z","timestamp":1788862017041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-048.css HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2Bsn%2B6UXUogyApezMjS6ZrzDy97mvPjXNXQ3JrQc0Mj84sVWlG70QFJJa9EyuReqNxW1XoN7T3zeN8D6vu9PpJ%2BUs5sR0Kq1ZM%2F%2BlOphXkp%2FHpvhIYeaSuJr6aFx1YudNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"a3df2139ea5e6c5663477f26512206f2\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b68dc72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41730,"size_decoded":6251,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (33273)","md5":"0e3cfd1a0aca17e1a03e7418e2f4bfe8","sha1":"16bd0e1f62ab7dd621ff6b22992fdc4d27ca7791","sha256":"edbf21bd0363790e376884d63675105f91faa93d55927799c48b5ff4f89979ac","sha512":"de67802e6a594343bfd25a918814568d1a96f3be5fa85524acbfdc43dd990469f609e85d5e069aca3a58912118eb04612d9819306b3853359b591418585bd053","ssdeep":"384:bjlA/jcW6tmaQJm4/g/yc6byuKF/H2gyt6c4gDqg:bpAoxtEmqO36A/Hty15Dqg","tlshash":"ad135b17e5f1233ba0adb256f8441d44dfd860abe36d8ed954ac54b4888641b3ee8f0b","first_seen":"2026-09-08T10:00:36.07592Z","last_seen":"2026-09-08T10:07:28.399475Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-060.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.059Z","timestamp":1788862017059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-060.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66x%2Fwz5gygISUgBLiAPaALYuCt1FSp2ieQkroT1hZn4Lu2N3SZCV3%2BAGc%2Fyu3XPjmLiNKwDs5QAUXaYDzJeXEqi1xRu72ighgkAqnFy9qmXzKByKjCxMdFlVE91BKH4FAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"28d69aee8a436ce7dac2c04fdd5fd3d2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b69ddc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22488,"size_decoded":23299,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"183a7391b6842b913cc334092386d179","sha1":"07e4f50e9fc6e7f201857d0bf6ab968479accd79","sha256":"69f4bfabb89d1eb15ef96ffff7b53e30e5604627b4772e23ce1f8c31e5f653b7","sha512":"4cd9054e0bd2b5b11fdce5ccbe24e80ab70d7cbd1f2f7b50adfa6daecaae910a0e72f841deb0c15798e5c54449de3520c4108ee321f64bbd714959a9b2630a58","ssdeep":"384:iK1WefM6EZqdNx4kUDZG/H9M5wUWFoqhoSO14qQ+eJgEqL7HJdaF/qv:FoHsytG/dM5MFoqh3u9hefqfHmtqv","tlshash":"23a2e0d91ce24719d35d17b11b36b4f4bbbaa07c03b4c6e90d2da544269eb923342eb0","first_seen":"2026-09-08T10:00:36.103085Z","last_seen":"2026-09-08T10:07:28.400352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-005.png","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.063Z","timestamp":1788862017063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-005.png HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LtrlOPYlL%2FyUXczhJB9xv3jW3cjPeFQaRy2Fcv2%2FMiePMyCRlUES3iEgViEwgF%2FZ1mJ%2F%2BoiFAG%2BFTjlFp0d4bBimcZM7ZoUSrujU9QWrljo3emfAkG4ENf%2BwgxC0WFgMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c22c806526e814fd52874fc82b6cfe5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\naccept-ranges: bytes\r\ncf-ray: a37d24b6adde2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30974,"size_decoded":31793,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"faf5acf87934d592059f137e49b30c74","sha1":"44a1264bf624be5ad9f2eece0f72fe28e1d0c0ab","sha256":"c06d69e08cb846679093f208e14a126186e35a7aa3415dfb4ae8a76896a33f7e","sha512":"4ad90c2e9d3c0c285c0479990ad8ba6f2adbbbc164fe4d7ed79648ef01cde36338be8c74bd0790d63f7228179bb8f77cfbb4f5aebb773c931e27fada73f7b5d3","ssdeep":"768:WBCZhTnUHEvBfEj918HCbOEqOJjGenQuKymLBlL0P:WBwY2Bf+97aEqOl7nsLboP","tlshash":"40d201a4f9a2d83c2387db2fb43e9b5c62705412887d858e2cae61d13645dfe1fd9290","first_seen":"2026-09-08T10:00:36.015625Z","last_seen":"2026-09-08T10:07:28.401009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetmx.info/assets/vt1-021.svg","fqdn":"rainbetmx.info","domain":"rainbetmx.info","tld":"info"},"ip":{"addr":"172.67.145.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetmx.info/","date":"2026-09-08T10:06:57.091Z","timestamp":1788862017091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetmx.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 14:43:46 GMT","end":"Wed, 02 Dec 2026 15:43:40 GMT"},"fingerprint":{"sha1":"34:94:61:E6:6C:A3:0B:22:D5:A5:B6:08:E4:16:2C:2A:FC:87:4F:D0","sha256":"54:25:7B:63:28:DE:88:57:49:AA:CD:96:7A:2A:63:E8:8A:7E:7A:FE:7B:7D:00:0E:98:97:FE:9D:71:A4:23:AF"}}},"request":{"raw":"GET /assets/vt1-021.svg HTTP/1.1\r\nHost: rainbetmx.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetmx.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gc5SfJ6fzFv4bBUDQ17lk6K6q3taLF6V0u%2FczeafSzpzuTHsdYMJfGS6scgZSHac8D0iQGfkY87gqUAz%2BVg6cgAPZsvmiRK1HDPDph4yLJH6%2FR11F539nLSOz340peucQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3f5c88d195b84e514a37eb79ef8b50c3\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 08 Sep 2026 10:06:57 GMT\r\ncf-ray: a37d24b6ddfb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":1924,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a524174a0b84b88ba43b0b556abeade6","sha1":"6b2b745ff55586416cfe5ca7602a207a5fb7bceb","sha256":"7ed2712a9b957d90910dc8a8ad22ae45102ccf585d8b217ffcf9e18845d56e92","sha512":"a2c4105665f53dc8e5a52bdbd8f78904c6b28f7df20a73b9c3b6c8bd11acb2004d807862f169311feea6fc051961bee3d818577b891dc77621c601077e2c644c","ssdeep":"","tlshash":"5b4194b4232923fcf20857b9953cd5d83f0a38f63250c894cbb08d20946247c8da58db","first_seen":"2026-07-14T06:13:23.682446Z","last_seen":"2026-09-08T10:07:28.401664Z","times_seen":20,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"rainbetmx.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}