{"report_id":"6527dcab-9fdf-46a4-9518-1fe35e0f6539","version":0,"status":"done","tags":[],"date":"2026-07-08T11:42:05Z","url":{"schema":"https","addr":"rainbetpromo.codes","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"92.113.23.221","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"rainbetpromo.codes/","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"title":"Rainbet Promo Code 2026 | Official Codes \u0026 Access","dom":{"size":46407,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (809)","md5":"e6dba7937954c39f8451abead0ac8f1b","sha1":"85fb7b61e5a741e086f98c072f1e727a5a7808b0","sha256":"5f89dd989ec7069a329ab6eb255fd350182dc2cea70d69a2b1563c26e6cd9bde","sha512":"f6ea6c1889506ef4729a512e9ec1fd565abe002d57b6da28f057903260884a51747b69327d29843ba79d1e7708de1afc6179f5211b82a023f4cd0d4c39897bed","ssdeep":"768:t8S0VypIIrF9R9RL7F3QSqxCzjM3hOG7WC9Dai:t894pIIRbnd3JqxLhOG75Ii","tlshash":"c723c61aa2e5137306830096299b23df6b9dd047e77515a078af83bc1fe2e56c93734e","dom_hash":"domhash6e1e08f7b25c4d13583a09105f11bf6c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rainbetpromo.codes","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"92.113.23.221","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:42:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbetpromo.codes","ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-08T11:42:05.690846Z","last_seen":"2026-07-08T11:42:05.690846Z","alert_count":6,"request_count":6,"received_data":228155,"sent_data":2969,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbetpromo.codes/script.js","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"631f5aec9eb14b7dae574949123aa655","sha1":"dad9c5d0b6302baf5a2e337c1c3b7f3a34181fd9","sha256":"c186cdeefd22be110126ed322662733edcac27c25584ef9041494cc1cad5629f","sha512":"9ea91c56f6511622771e039beb74e70e334465f38fe37209ef194ac22156db22c92ad957d8d21d668024392f8ef651e406937c219c4b1c5dca2a00d4e0ab1046","ssdeep":"","tlshash":"f951eb2e6a91093288ff67aaa1efa6c436a541430141d903396dcfad0f20fb558669e4","size":2512,"data":"","first_seen":"2026-07-08T11:42:09.849204Z","last_seen":"2026-07-08T11:42:09.849204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbetpromo.codes/images/rainbet-favicon.png","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetpromo.codes/","date":"2026-07-08T11:41:41.296Z","timestamp":1783510901296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET /images/rainbet-favicon.png HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetpromo.codes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 28581\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Jul 2026 11:41:41 GMT\r\nlast-modified: Fri, 12 Jun 2026 14:18:34 GMT\r\netag: \"6fa5-6a2c153a-b756e4b76306d45c;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-sr-rl-vhost: 0.0\r\nx-sr-rl-ip: 0.0\r\nx-sr-rl-subnet: 0.0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ca14ae85df9056de1dde44aad734ca8f-fra-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":28581,"size_decoded":29198,"mime_type":"image/png","magic":"PNG image data, 512 x 640, 8-bit/color RGBA, non-interlaced","md5":"c528d9cf51b9598b1e82cd7c1dd4e03d","sha1":"a05106316b3ade81781995576b4afbd773763d66","sha256":"1500287ff9c040247eda7e32c164df63f42a061e9f1f7c7012f2c9fb0e900776","sha512":"0be2efd4fb1af15f792caac343f4af4258e11689bda808eaa4276e2cef57a2dbfc7f0aa961a4eb8a416c5e345688bff4190aa34ce4ac349bcb61a0cc62697c54","ssdeep":"768:2WgPBpcplqIPXdiHsdUoLb6WOwiaD3GtfW3j/4:CPb5kQHeLb6WQaDtD4","tlshash":"2dd2f123e6f457039652c2f2664f951325b1123beb381214b2f99924474bfee3bcac46","first_seen":"2026-07-08T11:42:09.843061Z","last_seen":"2026-07-08T11:42:09.843061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetpromo.codes/images/rainbet-promo-code-2026.webp","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetpromo.codes/","date":"2026-07-08T11:41:41.298Z","timestamp":1783510901298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET /images/rainbet-promo-code-2026.webp HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetpromo.codes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 112120\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Jul 2026 11:41:41 GMT\r\nlast-modified: Thu, 18 Jun 2026 11:39:14 GMT\r\netag: \"1b5f8-6a33d8e2-5cff273768e36ceb;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-sr-rl-vhost: 0.0\r\nx-sr-rl-ip: 0.0\r\nx-sr-rl-subnet: 0.0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 278e8be62a331623ea290e0025a47010-fra-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.013\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":112120,"size_decoded":112740,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"955a623897a082ed5833b4b8ad0a1f13","sha1":"5b66d9fba212c5c29ecd43eba65b8d7cb1d0bc53","sha256":"da9842ae190ce21fba10c0f0811e7e01bc31449af7a2b05c3e721d053b6649bd","sha512":"9d10be7f5f38d83d0bb4d174f1ecaea3cdd3aafc6aabdb81bc076242290fe128415c6d46feb8c30cf79ca4843e25b2b862c2c35bc6d7e73c44d27508da3f1083","ssdeep":"1536:QISf4Igwjm/c7YETy75mG3J3Tku4Ig/ffpUtoYwkajOQFrEDfQV8xFj9Ve9JuajC:/SwCm/cfycG3EfGqNf9kQVSBcXzkOQ","tlshash":"d9b3232382e7389f76670af9a0c1f2259190e5e34cd1e8bd73061852caf1f52edf9964","first_seen":"2026-07-08T11:42:09.844561Z","last_seen":"2026-07-08T11:42:09.844561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetpromo.codes/","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:41:40.356Z","timestamp":1783510900356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Jun 2026 07:58:36 GMT\r\netag: \"b556-6a34f6ac-7284786268f3ade2;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 24f6d7d7c19fb6f61eb2be3a5e3643ee-fra-edge2\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.015\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":46422,"size_decoded":10574,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (809)","md5":"b32947badeee65308aec42a0468c45f8","sha1":"1ea8be20e9366172fe798c8103c3228d0b28b048","sha256":"ab3b3fe8744fc196ddfef3d7a9b0892c281900c3ae3a85d335f2c033e9b69c3d","sha512":"fbb2cb1d6e4a6364952abbd4c6f1572df45524558d9c41f173bafcd823eafe3947e4809e6e183f455b784f12e9032a87feef70d7cd8f1f09d96bd59bde96f165","ssdeep":"768:g8S0VypIIuF9R9RL7F3QSqxCzjM3hOG7WC9DaH:g894pIIMbnd3JqxLhOG75IH","tlshash":"8123c61aa2d5137306830096299b23df6b9dd047e77515a078af83bc1fe2e56c93734e","first_seen":"2026-07-08T11:42:09.846016Z","last_seen":"2026-07-08T11:42:09.846016Z","times_seen":1,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":454,"connect":29,"send":0,"wait":46,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetpromo.codes/style.css","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetpromo.codes/","date":"2026-07-08T11:41:41.179Z","timestamp":1783510901179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetpromo.codes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 5038\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Jul 2026 11:41:41 GMT\r\nlast-modified: Thu, 18 Jun 2026 11:38:28 GMT\r\netag: \"6a63-6a33d8b4-22477a4f1fe7c78c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-sr-rl-vhost: 0.0\r\nx-sr-rl-ip: 0.0\r\nx-sr-rl-subnet: 0.0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1e32e87c7c22a7c20cbb95f2b9fc3d0d-fra-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.013\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":27235,"size_decoded":5675,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5a11fb3472c1ab57f3ca3ae7c111f0ee","sha1":"dada6d4067631ca9a11b12d63fba5e828a0d83af","sha256":"58ecfa1ce987916fc0b9ed215518d3d8e474b5b49ff578a058e8000ded7a358e","sha512":"f2ec5bf8565912ffca2125dd29ec7919857d27cafcc8dde01a2f52db24564847740041f96319281721b71ba4ac232afd3e44b2a0e0a12b1eaa1c1a50b2ea2ba4","ssdeep":"768:ynBbUFfQqlHvUFQaIA5ghPDuZvkvZIc/EW326pwLFqJj1Tt70:yNUmqlHvUFnB5ghPDuZvkvZIc/EW3Vwb","tlshash":"65c211a42b36a574bc3bf759738b8b5c73a8b0918e09c9bc67e520145fc43fc1562b89","first_seen":"2026-07-08T11:42:09.847863Z","last_seen":"2026-07-08T11:42:09.847863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetpromo.codes/script.js","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetpromo.codes/","date":"2026-07-08T11:41:41.181Z","timestamp":1783510901181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetpromo.codes/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:41 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 624\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Jul 2026 11:41:41 GMT\r\nlast-modified: Fri, 12 Jun 2026 14:18:34 GMT\r\netag: \"9d0-6a2c153a-273e2bc44ad43182;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-sr-rl-vhost: 0.0\r\nx-sr-rl-ip: 0.0\r\nx-sr-rl-subnet: 0.0\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3d412153ac45616973262ffda72ab773-fra-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.015\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2512,"size_decoded":1275,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"631f5aec9eb14b7dae574949123aa655","sha1":"dad9c5d0b6302baf5a2e337c1c3b7f3a34181fd9","sha256":"c186cdeefd22be110126ed322662733edcac27c25584ef9041494cc1cad5629f","sha512":"9ea91c56f6511622771e039beb74e70e334465f38fe37209ef194ac22156db22c92ad957d8d21d668024392f8ef651e406937c219c4b1c5dca2a00d4e0ab1046","ssdeep":"","tlshash":"f951eb2e6a91093288ff67aaa1efa6c436a541430141d903396dcfad0f20fb558669e4","first_seen":"2026-07-08T11:42:09.849204Z","last_seen":"2026-07-08T11:42:09.849204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetpromo.codes/images/rainbet-logo.png","fqdn":"rainbetpromo.codes","domain":"rainbetpromo.codes","tld":"codes"},"ip":{"addr":"84.32.84.43","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetpromo.codes/","date":"2026-07-08T11:41:41.191Z","timestamp":1783510901191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetpromo.codes","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 07 Jul 2026 08:09:47 GMT","end":"Mon, 05 Oct 2026 08:09:46 GMT"},"fingerprint":{"sha1":"76:9D:B2:2D:BD:B7:88:EE:12:BA:8C:29:6F:94:8C:82:58:87:D5:AA","sha256":"58:44:EA:7B:07:7D:35:1A:D3:83:EA:DD:79:29:0A:50:68:70:8E:D2:47:9A:FB:1C:CF:97:29:C3:6C:7F:1A:D3"}}},"request":{"raw":"GET /images/rainbet-logo.png HTTP/1.1\r\nHost: rainbetpromo.codes\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetpromo.codes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 08 Jul 2026 11:41:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7958\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: aa47661e93870c31cb2465b96484df2a-fra-edge2\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":7958,"size_decoded":8300,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5e5785348fa28e6d869eeaca031f17b","sha1":"276896f9b74b1312c0ba9e2c3d71867895177d45","sha256":"08750ea57fb231e00f02128643e013ac9a57ecdef81bbe8009ba6ca8ae36eb21","sha512":"a35e41a224f1a04cdacd0a7a3ed3fbece3f64c3f48f3c597da934c77f55bbcaf3656d97ccaa590a1638e413524806df385a169d871707885178ea4821b7f4f91","ssdeep":"192:Fkcle8nzReqJCB+8cBnCqrgwAKnRvMCeOlN6x0d7FBiW:jeN4nCq35nRRsaFB","tlshash":"c6f190b5f6224923e7be3e7d4d634152f9d92185c3fa84c65a8dc3555c33202a92edc1","first_seen":"2026-07-08T11:42:09.85056Z","last_seen":"2026-07-08T11:42:09.85056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"rainbetpromo.codes","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}