{"report_id":"cd7b2d70-b0c5-4c6e-bf07-3b76ef517e81","version":0,"status":"done","tags":[],"date":"2026-08-23T15:43:10Z","url":{"schema":"http","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"104.21.11.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"title":"Rainbow Bets","dom":{"size":584668,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60412)","md5":"58925f68bccd53129316a6c28a6dca29","sha1":"17c2d97b7fa35ec6d7d483d483f703d916d11136","sha256":"c96f0909ee4a239990eca4b45f3d6a0ce86e6c05494a7f1aa9d3832371b88edd","sha512":"fce3ee9ed066e9a67d7e03b310ecd86edd72d1825abdbeec0b5b77499afdec8ee0d4ad5a592532a766bac19cf35490b72325c3e4c97d9d5c26bc74913af7423e","ssdeep":"12288:c/vMJlc6UDrNxB//hQSc3ZZIOdCjYwaIsEv+Z0DHySjUeUiKLQs4jV2fWw/8EP+5:c/mUDrZvz3","tlshash":"a2c4f930e114193ea013c2bae791a35f3269d246db178628bfbd53795fcbce5cd22588","dom_hash":"domhash9b437b7871d2b9d4e5e9d7d4d729a3b1","first_seen":"2026-08-23T15:43:23.928709Z","last_seen":"2026-08-23T15:43:23.928709Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"104.21.11.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:43:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbowbets.win","ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-23T15:43:17.081503Z","last_seen":"2026-08-23T15:43:17.081503Z","alert_count":93,"request_count":93,"received_data":5847571,"sent_data":52872,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":1,"received_data":49345,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":5738,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":2823,"sent_data":1151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbowbets.win/client/data/emoji-data.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03e634216ce1377b7331a7153a88565b","sha1":"57eaa5ac151870e691ebce1835737152bbdbd3e6","sha256":"57a52a59e90ebb002c9985fc250e9088ae6a090531f091f6307b8d479bac183d","sha512":"559cdad54b014c323018b6b91d1ad346615942c31157217f3c90130af0234ca4ef7fff4032e7ffe10408774c10dff4021970ee526fa26c2a183e760a150994b9","ssdeep":"3072:iYIQF2hbhITX7+yer9rOdA/rGPwnOOwxdsgMaFMNkJFaMqTZmMEQr:iYQ5qr7erUdA/rGPwh4iAjY","tlshash":"6d744447be009ffd4373e257a708b6f054091c86b24be99ba48929ab9717065f13f738","size":364484,"data":"","first_seen":"2026-08-23T15:43:24.021938Z","last_seen":"2026-08-23T15:43:24.021938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/data/api-client.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38dab2136a7a772e267da2c4d02c105a","sha1":"1905731cf4c232206e2f65c48649d16d741d457a","sha256":"0f779a1fc4f32333d939d302f0812fc8e87307860e685591a4a824a6677ffb12","sha512":"229474b6a3b0249d43e000ee08fd2d500578bd0924878f806acbdd3ed51d89ae82973b3a0a91b07bd41072dd227a0c9301841cbc9ecf263ef4121db721e99904","ssdeep":"768:3wDZ4F98Bs+RwBfJSuXTuIWNDSs7Yg/JsoP1cod7ctKlXDck+rndPqi5UIQP0cWN:hcoa5zgtKF77RXQ7hXvDn9T","tlshash":"8243c770efe05aad37e64db7b713a6cdf0120f0a7901c49ad158ad18b193507d6faa70","size":55762,"data":"","first_seen":"2026-08-23T15:43:24.033459Z","last_seen":"2026-08-23T15:43:24.033459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/context-menus.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7d89313f002d7ec5fb08432aceb8a88","sha1":"d54bef3c58a4c87189b0de7198b20ed085ebfee3","sha256":"9fb03ce6b0a8324cb246e9b84da0194ebeacb345f012eef40b0240bed1a5528a","sha512":"a33ea955c672479b88dfa26ba55964761086b05a6ec4e0f281e7e9c67d61672ad83ac0364a02549b4c138837b9409ce6a833f7a89feb8546200c79c81306aebf","ssdeep":"3072:tQgrsERnvn255unu9yOwB/uS0hy0vUmH03QsuJI8I6vr:JrsERP255u5Q/JI8I6vr","tlshash":"1ab3d8526be1bea56bc7afb7b213b5c4f52a191a3901a447c00e3c6479f7153e2f2072","size":112086,"data":"","first_seen":"2026-08-23T15:43:24.064708Z","last_seen":"2026-08-23T15:43:24.064708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/channel-drag-drop.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1470854934981002f6f4def62fb7707f","sha1":"4477e2c9c5720e8dd1d7f6c986a6481b4e8dc1c2","sha256":"370ec0f6bc295d86810fd3154589161d704505d61f5ac884074d80251ef346e8","sha512":"9ceb8374ffaa290a2636656d99305859206c5a2b4c1d090428e28176d709f2da72afb5bcfe71367bee18d84e79885e98d70910cf91eb5411de1fb773b28f0b5c","ssdeep":"384:6GJTzMP8AW+B2MyfuUAKX1exkMiJhRUCWygCCu3OurB9r1j52igU7aCpyyMguLtb:6kT4P8AW+BSfhAKX1exkMiJhRUCWHCCt","tlshash":"78b2b6a43ea81db85b6b2efbf34275d0da0c5e4f74944c8e91157c06b9f2017ead26b0","size":23949,"data":"","first_seen":"2026-08-23T15:43:23.978003Z","last_seen":"2026-08-23T15:43:23.978003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"f68a36abd71ae82677dd3c95dcfd9401","sha1":"46a4b43ec98d6a1be16d06cfbcfadc3d3cc0c9bf","sha256":"931f0c77f754571896c47d313437c8fb48d8f92e04bf626b8b78c11b8aeb9bd1","sha512":"9e36b00defa823eafb60a1cf9391eac3a1da74fb1adf095170ec6d168795af921f892e01df274aa3f71cd9630aa7e1be45d39998c8ef1d5b38389c694852370a","ssdeep":"","tlshash":"5e6000c0003030000003030000f3003000000c0300c0c30cfc0000c000f003c0000c03","size":16,"data":"","first_seen":"2023-04-12T12:16:03Z","last_seen":"2026-08-23T19:37:15.025845Z","times_seen":3435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/config.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37641279b851d9a087f8e4af5abc5004","sha1":"0d90b22053bb10bdcd2261aefbea716ee5c66252","sha256":"7103b0cdb4032e6f0b9847877c0244293e044ce84c50ba7d236c87fd930b61b7","sha512":"cb88d13d64477c7d7f6f52d56831816340fd1fe88e7ca484154ed402bd0e1d7c5d9dbb99aaeb5a5686e66f29d9f7345a74372cf7e63045c067258f0148e39810","ssdeep":"","tlshash":"a9e0862b15911531003e15e6841e7106395b463b930d96c0c5107f78ebe5f2b075ef99","size":308,"data":"","first_seen":"2026-08-23T15:43:23.993466Z","last_seen":"2026-08-23T15:43:23.993466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/helpers.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40ed551caf250fc1f05782ed6569ab0a","sha1":"85b99197add6b94ff6c44a4a69d5bc6a8c0aa8f9","sha256":"4e81622bc0f3e9a5548c6c39b6e0cb2ec6f13039a7805e72ce227942744f2f70","sha512":"f44d2a0367fdfdff05fdf555e67ba0f46ccd4dc559a4f6c5e40eb00d7e51b5fe9e853087a97093509d618e794789c1f2f5a08df6c54d4830e7962607d3a8e35a","ssdeep":"384:zYJVAe+fHTX8DzkA5ZvvN5Kb+JfU3HwMKhzf4r0p1B3FR55o0+RFdQkLLzfnK6Iz:EJOX8Dzkkvl5Kb+JfU3HwMur4wpX3/5f","tlshash":"60b297587a5063bb53435eeffb23f3eee48518023916d8e2ead06ccc2a7111ae1e5535","size":24274,"data":"","first_seen":"2026-08-23T15:43:23.97638Z","last_seen":"2026-08-23T15:43:23.97638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/settings-modals.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84f99e3b3feb5b934e49807cbf2c1b3f","sha1":"90017647d35ed05793c9345e442f19ad5d01f7bb","sha256":"625a5e8c2a7fbfa7fcb4c4797c8ad7fdeb933e1094acfcef59c979c6315bcf93","sha512":"f2c701cf30e4fb13bd3960e8f55f0942df825ab2fb1894517c91aafbe327924292fa6d619f7660eea5c4bcc1b248b8b1f501d0b64a66b08a2dfd4e6ce0939f70","ssdeep":"24576:9JpVMgpW4JAW+U/l1lzGRAr4oTZw3v2pEi0CFhZRkycUS0dy13hXjVtc5yFhfvin:9JpVMgpW4JAW+U/l1lzGRAr4oTZw3v2P","tlshash":"c615f95066d09aad33875ff7b73bb6d8e0060b4ab9408e96d15cfc28b692603f5ed170","size":896815,"data":"","first_seen":"2026-08-23T15:43:24.080539Z","last_seen":"2026-08-23T15:43:24.080539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/virtual-scroller.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb931982ad09d32a1538b9dca0d9c19c","sha1":"fa9f82cd822de33c4db783d38cb83f282660b22a","sha256":"e6db0cf7b25fbd5692f3edf2b1d717853b7792eb3cd5995f8a9719166cb958d3","sha512":"9f11a4eff672b5291894880b113c0718a09a271115593743e95ca7c1edb8abdf37591da5f74de5c3d8a0ae756e2e18c6678d05c0a55f8d9ff9107ebe963ebec6","ssdeep":"768:1c5kYIT3rdJws1b5+kw8xMqtoSqxFJpWWTvHyO+QJzC70IUIfFJaQH98RG0i3ddH:n68xTmFqWL+Tcxayq9Xc/bg","tlshash":"5f2392503bd025d5238b9ffbb327b1e6e41a0d5b3895588bc1047c29abd222bf7e5931","size":47468,"data":"","first_seen":"2026-08-23T15:43:24.009144Z","last_seen":"2026-08-23T15:43:24.009144Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/keep-alive.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f025542ef4c289a7514de207b7de9b97","sha1":"0f29947741af19b04a20c623edfda6ddf52b2acd","sha256":"d5146c9a707353863ea91eeb9e1044728932ca5f7d9f3bba553a0c162eee625d","sha512":"971cab3f4754460cbb3f21b75619f8afa919ab41917b3c7519d20f9a3cf2c90988cf64afcae2da9ec9c848ab56581475a01df4414a3f400e5569f6948a4bacac","ssdeep":"96:Z+X/c2n9Ju5STtFugjryTDrJTTOHVSW3EhfnSmG8uD2ks8WSckVd7h44hM:Z5293TtPrKxqQfF1N85dM","tlshash":"2ca1435322e12da8138193b7d62361c0c2666c573a58e81b60697d8d6e93b23f1f2b7d","size":5001,"data":"","first_seen":"2026-08-23T15:43:24.018715Z","last_seen":"2026-08-23T15:43:24.018715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/socket-handlers.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e19f28613d7995971543546a0d4da32","sha1":"cc9483149aece0367b0f5b301e0a5ff3386e9374","sha256":"50d97460b3862b84b4246c257f85db80ed017842fefd6a05ad669931acd7adff","sha512":"31317d8c6fe7a0aa2d86505d72d4f6aefc780a4f801b5ede6fcd0313e3e27aad6e621c2af1a5b6d29416d9e12bdcaf6eb4e40883ebfa6f2456aa480d70cb61b5","ssdeep":"3072:FbRyMsF5Ff4QHYChSF8JCwMbNrF7zbGywX:FbRyMu5FYChSF8JFMbNrZbGv","tlshash":"b9c371e0e290396daff316b7f313b3d1e166279a2c42945ac0097a14fba3507e5a17f1","size":129707,"data":"","first_seen":"2026-08-23T15:43:24.037099Z","last_seen":"2026-08-23T15:43:24.037099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f8f82cac93d32d95aae52a7396f2e84","sha1":"2a664d3f84131be37456587c9e1b4e90f356e3c9","sha256":"10032f392e03a236a51f8467cf1f933328bbefe0f8b91793ca18c95f7a540d91","sha512":"8b6371d3f51098902b103508c50a0b790bc9d68693ba1c779a66e2ca5d5cad13ea5b65b74fef4754a038da8e2f78bac6d37a2ab1b95c0be51f6b08f7f658cdba","ssdeep":"","tlshash":"c87000008020083000a02ab002222a803280302202020b222882202e280200300b0880","size":22,"data":"","first_seen":"2026-08-23T15:43:24.084676Z","last_seen":"2026-08-23T15:43:24.084676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3126aa8935e29499f4c7939169517c51","sha1":"7b3deaeab3910ec562b99aac9c8548cb36a6082f","sha256":"bcc2ab0714302f1b4e20c3c38e9560dbf346946a2f78636656851f4d50b722a4","sha512":"4e2f09af1f4e88882ca9c39abbb33ab8fe2867203c9e7471a849e1462462eb07fa8f363eae8c30509eb2e1880739f12a0816c99c22db130978e660d6b971d82e","ssdeep":"","tlshash":"5e80045740450511001705f5c17531013447c107530541d0c4007f54554c503111d141","size":35,"data":"","first_seen":"2026-08-23T15:43:24.086069Z","last_seen":"2026-08-23T15:43:24.086069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"edb9d71d8a90423bdb20c3a7aeccefb9","sha1":"8f701deed35b795d6d8d6d88f0d329b9cc4bfa7d","sha256":"02fffe274c4b3dee16f9c8c58d16e7fd0c41de4ff7caef66062cc4ccb6015c48","sha512":"e1e2b1e8fa13d84c6deabcc2dd68a453dc825ad6bf85b778fbdd3b5af35c4d14effeb0955305ca6bf65d6b2fd722226d26be4ce7acae432728de924be03f7844","ssdeep":"","tlshash":"a0b09bc093c8d09ee0d045b4551bbd505517c302020d8e02c0743dab7c8306bcb01bf4","size":127,"data":"","first_seen":"2026-08-23T15:43:24.087396Z","last_seen":"2026-08-23T15:43:24.087396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c66f60ad869dd9b070d34f1f87f0e008","sha1":"3850786eae6f5c8431a8b993afd7e556669a0b3b","sha256":"c8b39e081a3c8c29380bd9f6d37d7783067a5b7e69da1afe3a4a69c0ee1846a6","sha512":"a19397c05d8f80e1dfd659e5ba43a0cb19a9840d6d6c7834ddb4263cef8cac70f680710862ecd0a6e6ef3bcfd1c020965c3b83c109ec39abb34bb3c87961e93a","ssdeep":"","tlshash":"9bf0ebca71d1a1e31afb00a3aed22e10b36a0381cd8682e110150004a83ca1fe93facc","size":559,"data":"","first_seen":"2026-08-23T15:43:24.088682Z","last_seen":"2026-08-23T15:43:24.088682Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2917836dc28170790da640f16c59cd3","sha1":"026a37768a67f4f81aa53abc9e1434ef042147c3","sha256":"cf184a9c46316c527b0ec054fc1644094501c5645fd0019317f9f1c0972b6028","sha512":"3bc11fb9e95eb80f5dc63c1920a274512b707cecb476e43c4c6965feee696c0a52692ee4f913ce11d9a575c599133a306ca24bb264d0ff369e373a37a1b7989e","ssdeep":"","tlshash":"bb21cba27296583e47ca29a35a7163847e710f173986d1c55619888ba2bdfc3c078ae2","size":1189,"data":"","first_seen":"2026-08-23T15:43:24.090258Z","last_seen":"2026-08-23T15:43:24.090258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30b5a17838bd08bc3a19f78f673e8602","sha1":"5c23495bb23c2e2a3159d7949d45e05b40d92b7b","sha256":"bfd0bcbe0de3fa730e359a4180648ed085842edf687f80ad55bd1af1068585da","sha512":"32b9d244fbcb9c316b71a080cb366174e43a716e8c5af97b684af24a005ff03497259b2adf7d47b3e1f8a7725086feee3461babd04a946681df43747737e7259","ssdeep":"","tlshash":"4311dd7b733019326dce24626614f1437c332546a846e062080d5891627ef4be5f3b0a","size":1093,"data":"","first_seen":"2026-08-23T15:43:24.091674Z","last_seen":"2026-08-23T15:43:24.091674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea238bfecd05f47181350cbc8ac09d29","sha1":"3aa63fc0fad3d5d2d59f37d177036754e1293725","sha256":"7db218684e371e96df557beae3b9a978464e6b16e5f65f593e1d63701293397d","sha512":"d8a574aaee05162d77c9a6568223e85408db443363508825d993174b8a712e8d451bb4a777f6eaa4a54d4ede57be6be1237ba8fac9f004822087253bce9ec397","ssdeep":"96:SAkcxrVaToCCqFWSx1OgAOekSfTtaXut/VnqCMf4DVz1ZIZ6qe6+yUksydgaUt8K:SALxZakCCqFD5+xd/VnqdIr26qEyrsyM","tlshash":"c7b174aa7015357004d3a546a3cf3704763e914a650a8082527688ea777ceefa1c7ffe","size":5492,"data":"","first_seen":"2026-08-23T15:43:24.092987Z","last_seen":"2026-08-23T15:43:24.092987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd90420234ea32e3d5f962af019bb025","sha1":"ee434427d0d256c3279280e758a81395bf378d0d","sha256":"334ec3909a79a4bdfff3b4c18f4d013969efb271d7471149311964457b218d06","sha512":"3cb49582904d3872da504f8085faf79d32f8d64a98855dc7a81e322e3792675633d09e96f45cdc582984bb00f54aeddb3fc835f438ad29ae93322c811b6b2a43","ssdeep":"192:5d75PnC6Pz3haLODiNQEKCUUVreMBOrCqSnHK/5l4ZbtJg:5d75PC6PzsLODCQEKCUUVreCOrd","tlshash":"33d17558544a08399d710907d658db0138b46f079243a1a7f93d0cddefcba8fd2beb94","size":6500,"data":"","first_seen":"2026-08-23T15:43:24.094609Z","last_seen":"2026-08-23T15:43:24.094609Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/category-management.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1521569bc38b782f570e7e053aa12507","sha1":"0e988edc6fb0abe30d678dedb9e0ef354f113c80","sha256":"b34198cd746d4c9fe11aa01453b67cb6b45a3d4f4bd3b8124904d3d8292f8d77","sha512":"1a2480be48fe1992f38634fbcb33b06abe9f95feec9b6a65a0fe9a6bef1139b24c54b75c9a6f984de3341704c97b279edc70aac000d104aa49e49864824a4323","ssdeep":"768:p+tsr9PKPhVrdVxg0E6jCxXRTiBoAAUut3CQS1l2CBc+NWUlduSl:h9PKPHzxg01mNJ+rQ6","tlshash":"6ac2a594abd429bd639b2ffbb343b5c8e4580d9d75029ccbe015be182a92013e7d9874","size":27870,"data":"","first_seen":"2026-08-23T15:43:24.038666Z","last_seen":"2026-08-23T15:43:24.038666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/mentions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4d37e1ab1705bdc74efe7b9a1817f1","sha1":"ae3c08bb6c121ffa5bfd96dd569fcbfc5f5dbe82","sha256":"224981f8a0109518830d65e28716295bff9c6705f6d3602acb3a949e6a36b109","sha512":"cfd357f593f610d55c60932c8a5b4da526fdf31e97e4ece9ac5e19f253295137a803500b8f73be6a90a5f7a3abc42c428f66a0d1b5a0f47cb7c5bf90ba2c8292","ssdeep":"1536:FyQPj2il84TTJvrrMUo7cV/XnfHij34DTPCSgQh7QDU2LhblfKm:h6ixJiotXn/ij34DTPRh7p8d","tlshash":"2863c6407bf0a4dd53eb2f76b717b0d9f46e199a584048cbc012fc547aa3526fab6930","size":71530,"data":"","first_seen":"2026-08-23T15:43:24.030044Z","last_seen":"2026-08-23T15:43:24.030044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/fp-init.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"450d107f6f44b347892279d1e2592fb0","sha1":"c27c0218058ef146dbac6ccb056679265530c34b","sha256":"d53fe375a598fb58ee3276ec465c1292113463bf055765ccc869e16fdebfdf38","sha512":"6ef9e59ed67320c7dfb1254ce07639612eaaa248d37f85386c053b3172dc03b40d915c9a72be4fc2ffa42f59a88503e2632336fef43504e7f0c06235914fa665","ssdeep":"","tlshash":"6a4142a87f803a60231346d7f2375089d127ecd975f0c889e124acd9be32639c3c2639","size":2389,"data":"","first_seen":"2026-08-23T15:43:24.000233Z","last_seen":"2026-08-23T15:43:24.000233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/socket.io/socket.io.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec127053f9c5cbfeeefd263b4b23bc0a","sha1":"11c08d7468ffe8980b0f862280c0c371776938a8","sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","sha512":"81ec905226bb2b6632f968b204f873331a4a75f24c0f27d50bb5ea930bec797a7c201eed1eaf1a9ef06cbbe923a722bb54fdcbf2be7147eea00d77a80565a39e","ssdeep":"3072:zLTygH4CO2KsFpWw0axS8RZIXyR7dSGg18FEEaLH32emV/Tfkmh0KbhEGtkSWq:zLTy7X1sFpWw0aTRrgaEEaLH32emV/D5","tlshash":"6ce35f49aaf72051917330398bafa045f239d01b620acd443d1cd7f49f65b3897aafe9","size":155836,"data":"","first_seen":"2026-01-01T23:52:44.961231Z","last_seen":"2026-08-23T15:43:23.938788Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/notifications.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37377d1e7b288feb3bceea2274123cb1","sha1":"3475e070d8ef1d2b7e3110981e2d841daaabe792","sha256":"61e4c23e7542b388ccde98170bc30ebc330f3e8e968d2308c4a7ad2f61f3ee01","sha512":"feb2e5b9938aac942de9f337445bfb7d721a3d98062943b3d6d0376708b26517bbc6251eb7b8d7f9547f6cda7fcbe6c408cd794372f50723229259f06fb5b38a","ssdeep":"1536:+OZF4uot/xHhYdBrAuB5Z5WfQlp8XrYDgTkdkHfy:+AoXhornBj5WfQlp8bYDgTkdk/y","tlshash":"4173c8803be064892bdb5fb7b317b9d2f16e1a995840848bc206fd287665613fff1670","size":78037,"data":"","first_seen":"2026-08-23T15:43:23.996698Z","last_seen":"2026-08-23T15:43:23.996698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/smart-search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"402fe0d2e5741363e67bda41fc6373c9","sha1":"8f5a172604987b62c82377e2bc4470a339a85db0","sha256":"5a7fc82fe731f8ac84a2a108b706f5289d151cf4bff236ab778d724f01091436","sha512":"af9f0507bb1244d68bc8fb808407459d52050a7307bdc2807bb41477a595c3bf34f76bc44f0b2b3898b30dd640bbddca2d35911536103086e7e17343d38f380b","ssdeep":"384:psSs6h0zGvDXcUd3bTRKurGhWs9uQBmxu:pts6h0z4DXlhTRKurGss9uym4","tlshash":"a79271148e40d3bc2b09cfbbb971a49ad64a0b1a540d979ef178fc1925c9903f1fe2b1","size":20413,"data":"","first_seen":"2026-08-23T15:43:24.028214Z","last_seen":"2026-08-23T15:43:24.028214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4a758f59405b7aac5c267a2e8638f7c","sha1":"8222ad306c18633a9aa23cab5ca39e7c3c6145a8","sha256":"17d6f144e3158c2d20684b91e8e8f15342369ef1209bb556daed3bf3de53fb58","sha512":"b92d893d61309a343efe10cbd0d31c1f86a0e536679efdef1fdf503ec966cc027962fbf203d602f69032c40f27026a71c9e5e69d396932b3091391e76c8f0d33","ssdeep":"1536:dkxq7eDasJxgUwB2sM02y4UpU78RIQTkyDRmBQ:57eDasJDQ2y4UK8vDh","tlshash":"54b3b991e640d3bd3213de736b3fb9c8d2140716b9c44b8ad899fd95294ea0be1ad43c","size":107804,"data":"","first_seen":"2026-08-23T15:43:24.02026Z","last_seen":"2026-08-23T15:43:24.02026Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/permissions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a232e7640d420c5f747090a410178c2","sha1":"5027ec3dcf56831da225216333171a6d31771c3f","sha256":"ea13fca0054fb874c3f65f7164279156fd1e6ea78df9345b1c37be8d2d889549","sha512":"fd75e395f74325ba1c92c0f25f44572e927d3b0815d33808ab439969f12b61e25e793056a0ed297bfc308ba2f0fde21181d9f99ad4560efbb2540409b135c7be","ssdeep":"192:n89kX3Yd/QW61WGWXW1qTv8WrWuWvWCWtWOWnW2wNWQMPeJNSBGEJ+UevJ4AFxTY:n89kX3qIj11GlTv8iBwBKraVwNXMPrdF","tlshash":"ca1265586fc02ba45742bdd3b317f0e1e92f7a9ab499464ee3167d083ca2a03db61531","size":9361,"data":"","first_seen":"2026-08-23T15:43:24.076021Z","last_seen":"2026-08-23T15:43:24.076021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/pwa-install-guide/pwa-install-guide.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7ac967b5b1bd461b969d5c76f7c988e","sha1":"06560e09f15ba86d12f97a2f61bbea6e291cb78c","sha256":"4e5af2e0cbf5c109b17c01e4ae19edc2df8c8c18236402ec0fb2e83a8554be85","sha512":"3855f41a02aca4974251ee54f939644fe3a42eedd818c33708e18e531df6ef8278e931a773d8e78d3b292dc2a8b5ba3d2c3a97e0b2ca9336ad93506533178dcd","ssdeep":"384:sPeN6Pun9QeYWfYhkcV3CQ1kXJSWM4jp7D00ovHRwdsIIyTkjFkbfZBsRjq/l:sPZGnCeYWfYhkcV3CQ1kZSW5jHovHRwZ","tlshash":"8f6276043e90e6ac278a8ff7773761e9e01e17cab894468bd418fd887d92117f2da470","size":15355,"data":"","first_seen":"2026-08-23T15:43:23.979789Z","last_seen":"2026-08-23T15:43:23.979789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/automod.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f223dcc5ae52f2598c6329b2ddcee81","sha1":"0ca10cc9ed4c7f112a2f58a4ba5d833203b8168f","sha256":"9c5b13cd6bce7e233a3c16d1ec4fdfbf8405785eb6be2dfc5d33ff9e6205e5cb","sha512":"8829f57fef498e2f84950de8175a2d54ccc62b15b831b376a92ac26571adf662781954e144e8db11b0de885f7372d7a405881df21c82c2ebcc68cca924a0fa52","ssdeep":"768:EzC49dbeHU7S90iaj0hvc/dfpvsjThr62GQv5FE0t/aakqcyVSWWSFktB6ybqFbx:B0zdabVSBRuRFf2bCT9zwNfvBxM","tlshash":"6d93c691ae90d6fc7247ceb7ab36b4cce1120b4af1804bd5818ced2879ca503e5ed5b5","size":95170,"data":"","first_seen":"2026-08-23T15:43:24.071105Z","last_seen":"2026-08-23T15:43:24.071105Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/application-acceptance.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c468c220717aa9e5ea9f6ebd9305720","sha1":"1ac7040b521c6f2d7da07f4bed39261fae65cdba","sha256":"d9304d8fe718f59acf5ba0f04551010c65ef45d857ba951fa58a4e1b66e04d24","sha512":"dc424656351fbac1e1bbcb5d1478702159c06a9bda90942bb7f0e7ddee24a52af3fdccbddcab45bca8c21d5537a175249be03a396e96265b9efbc0ecead2ac99","ssdeep":"192:Yi63SRYLwUX1b3inJD3AX00Ti++y5Gc7+8WYh2D9T/m7OODKLa5gxtaUioZBOE96:163TLwUh3uD3e5Gc7+vBwKbVf6","tlshash":"0b22d7883f409ab9179f0ebbf327bcd0d7270a54b881a885c824fc565d63701e5976ba","size":10189,"data":"","first_seen":"2026-08-23T15:43:24.004113Z","last_seen":"2026-08-23T15:43:24.004113Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/reactions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4742b0572f3531ade5ce8ea534c02992","sha1":"94b2f2d2bf5fb06f91569d9c85d049b7d5673601","sha256":"6d4b8afe04e1d5d4309db3a0152e1edc3fd0e5564c9ae5076fe66b5aefc35080","sha512":"73e80153e9a1ac6d3f242f9f1a6e3acb4f4a679fd1b94964e6c1f70b2a8b0f3c51fef0effe32f89842413dda6b4682c3e360fb1c8130818b47921c7ed22b546e","ssdeep":"1536:1yLhpdIYYiS88Hcz8p7Gqc6rWj8+NVT10y/SLPG4aoKQxRAp:1yRIYY588Hcz8p7Gqc6r6VT14fpAp","tlshash":"a0b3d5a0ba80e77d3643ce7ba73796cce019031576818b9ad189fc5c2bda54bdadd130","size":113004,"data":"","first_seen":"2026-08-23T15:43:24.069518Z","last_seen":"2026-08-23T15:43:24.069518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/webhook-tester.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f01e530a56e7e6b4b109523d0dba65d5","sha1":"3c44fb9c7a3a8229970720cd2e3ed0c6d177842c","sha256":"921dcdbbb6b55950523fc78e5507393010fbcba3f62f4610089c44480e18d60b","sha512":"e8209a05f7a39f2ab3a684560bb7d98decea0c6f87dbf04803ad31878927d254bba04f8e23e7d173c7c03f60821a321d5efed456a9fc2794997ee0bf94a8e54b","ssdeep":"1536:wF/5MD4jaFTJyzDv64ZKrtQbKoDSZCNbizcB5UUrCgOO9xcgXUbSzt1L82aY3dEH:gVNDy5bSt3dajNR","tlshash":"e4537281a640eafc6306cef7ae3594cdf1140b16b54087d6d898ed2c69c6d23f4ee5b8","size":61380,"data":"","first_seen":"2026-08-23T15:43:23.99507Z","last_seen":"2026-08-23T15:43:23.99507Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/data/cache.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c08af8b1017e300be63269eca27dccc5","sha1":"d536b073071edb834b994d4a95b714d10261bfb5","sha256":"9c2a5a567201cd83ae30da421677cc821d3b5dc0458e092003231bdba50eaf0c","sha512":"3ed6fd65bf387aba9fec3aa1ec6ae75605a7f95aac1fd5dad014e69d07a7e600aa7c499bbfc2292f26f48b63e39a1f6fa92b1904874cdb532c4ed72d95b69e60","ssdeep":"384:Jt4joZbto0WPvb2bKBFHcrj0xWBEJLBQqF:JtF5o0WPvb2GBpcrYxWBEJLBD","tlshash":"3642c7d0a3842519df861bf7731236c5e3852a6eb4288691f308b8edfadb10bd9d4771","size":12887,"data":"","first_seen":"2026-08-23T15:43:23.940286Z","last_seen":"2026-08-23T15:43:23.940286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/unread-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b469131e3bd8892aaaaa1b29e5e914","sha1":"0a6aec84f928fb8a17da970ba1460728322734f6","sha256":"a09df6086a1bed213e7c53aeeaa092e170f61e0cf97fea499efe34a1be32f627","sha512":"88f81d80b56ecf1a9360260cc965717f9a78277c3cd1beca57e44782833e596af6592a7d584dbd97904180cc35616c3fc0e2d172a14b20a6a2886560be4a09b3","ssdeep":"384:N7rhLPBdPZylNtqgu+OefhZbfyivpVjlTwEGTiZpjeqkzY+89YRJLtsE8iX3djAq:N7rhLPBdPZyLUgu+OShJfyUjlTwEGTiM","tlshash":"8d92e9f46ec019982bda4fbbb723f1c0c4192ebab94a9497e404bc587b92257f4d1770","size":21066,"data":"","first_seen":"2026-08-23T15:43:23.943393Z","last_seen":"2026-08-23T15:43:23.943393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/channel-rendering.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8fe84a8cc7b76a43f7d002fe1c92144","sha1":"975359c8046f7399dc072766f7f57a0f3071c1fd","sha256":"38430daa530877025cdc1470d7714c4780a24713dfc014ab075528551d06df16","sha512":"e35d1d5f440d8b9fce9d851e2eb5e0631cd5eb13af289705cdfd53df01efef7288002ffa1ec8bcb48993e1126ffe0e71d4412b6a4b4ad20d0ef0c1a21e4def63","ssdeep":"1536:p0p3lj1iiPGwLoUBEWzYNop1ZLwdrtLgvFV+lqD3F5Kt0SnmkOQc5ZgsFTbjbxYa:pnEF5Kt0SnmkbsJ7ge7","tlshash":"7473d8c0e584d29c27825ff7b763a5c8e42a1a8af94155dbc00dfc187ea3503eade974","size":74521,"data":"","first_seen":"2026-08-23T15:43:24.053529Z","last_seen":"2026-08-23T15:43:24.053529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/user-profile-modal.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c022bd97422f9ae104a969977f8ebe7","sha1":"6005616ada64127fc1f3889e1ae69074ac8d1c1f","sha256":"9321dfbdbd099e182ded1ab57e733c9e5d8e8a1575a38e59c26e23331ff599db","sha512":"0867808f93e6ddfcd5365916022e7ed123c365a88c1204379803ceb51aced64471786825416dd8e6b422dc92ec5d079f69d7edd38e6b74b280010c8efd7e311e","ssdeep":"1536:cwRB/DNmuUwBLh5OYclI/bXTdTmKIjDWrwhWzSqjIIk4Ve:1Bh/5/PdbcDWo4Y","tlshash":"b493b5509ad0eabd2347cfe7bb3669d9e10a0b1a748487d6c428fc087a93813f1ed575","size":91289,"data":"","first_seen":"2026-08-23T15:43:24.034921Z","last_seen":"2026-08-23T15:43:24.034921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/messages.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4e3e4369885f82f2da2c614fdc59e92","sha1":"287d7d1da4bb849658871801ef2f11b6c80caa3f","sha256":"097c2fb375ba17a2ac04b4fb7b84be56c31646fb29a1e8f19f4f048fae65972e","sha512":"04771e0ba71048fa2e05a6bc8262ecc906b26dc3464fa64539c51311b44e70c363141f172dcf0e2e6a8cb3f1d92fe857a5506506a9ce2bd610c7ed3fb57356ed","ssdeep":"6144:nRJLOSznOSbXTMxXtEbaK/Sbm8rdWBpuga4yFV9+:RJLO4nOSbXTMxXtEbavbhdWBp+4yX9+","tlshash":"5734c55077c029ad678b5fbbb313bad5e059099e79409c8bc10dbd587ae2213faf0631","size":238546,"data":"","first_seen":"2026-08-23T15:43:24.067831Z","last_seen":"2026-08-23T15:43:24.067831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/storefront-overview.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"801de2f7bddce7ab478d28df55353cd5","sha1":"f1f5e7755e3345815887c00e9b1a989c48d6034c","sha256":"4e2b9f23061a865d656cf743081705ba710615cc155a89a15cdffd6fabc06036","sha512":"3062a185eb03a608d5862ae8e50fac23b2832edab3966f825c602952f29ecd26c428876bc5e9226b16b6f9bf468d07d9b4c80e7cce9ca2bb7a7bddf646a0c3da","ssdeep":"96:zr7ND9EREI9WbWmkys33AMr055a5rf//Xtaq/yigR44MtchvkYlWyc:zrhdIuWryK3AMI5U5rn/XtLyijasyc","tlshash":"1091415c3e82b1d21b578937bb26a48ff6f2f15aa08040459110bcd03eb7b17ea57ab0","size":4607,"data":"","first_seen":"2026-08-23T15:43:24.014Z","last_seen":"2026-08-23T15:43:24.014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/course-player.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cbf9ad37efb1966a7f6566b87cdf153","sha1":"beeab98b0b4e81bbed87fc3334a79145c263a1c6","sha256":"fa72950134556e9df3af4716d0d079c7744e0f3bb95ce4bd3c970b08bdf3feaa","sha512":"175f3d3771509c62bda6f5c9f08cc20aecf320d6b31a0eb020b977e5aeff02fdabd17dba308baa731ea7f23f4fce5899409647a4eb0bfd2d55db8288c5e6795e","ssdeep":"768:TJDLC+zYRbbXi5UTGfflMi8WWoc9LnMfsMOEhTeELy2je5EFbGWm4vj17XSuwAfX:8Xi5zgoRLNKsm6G2uCufVXjc","tlshash":"340383842fd0b8bd13cb8f77281f66e4f16a251e66404cced025f9d139a8722edca675","size":38751,"data":"","first_seen":"2026-08-23T15:43:24.023556Z","last_seen":"2026-08-23T15:43:24.023556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/direct-messages.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43f005c60bc95880c30fb851bf1a896","sha1":"889a3f09f1dbdedc86593e0dfeab47626aa70185","sha256":"6f55f17b66de3f24be7b931a3d68456d180686c660516925a8ce8779cf57c143","sha512":"15450f23152196b3ffd4066ab21da38fc539ab6974c556230548b102c6202394190529d7f25bf7e7f1ad89aae5e90d555f48153bd2092dacd008e1501bfd9965","ssdeep":"1536:sPIa1pJjpF2KJopYO6gw4Jo1NZkawDwKJkwJfIIJczAS1qXYgKTdP:kIywDwezJ7czASVgKTdP","tlshash":"bb6387632ad0dafce78b5ea7ba396185d006070e6509cfdb9149fd18bd92103e5ccab1","size":70813,"data":"","first_seen":"2026-08-23T15:43:24.017093Z","last_seen":"2026-08-23T15:43:24.017093Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/push-notifications.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d446fdbf097cc3aece7d5527566b282","sha1":"c222f0e3b9dc0344570d53145c6bda3994052f24","sha256":"b0846292859c1f3facf653d1ccc912a164e33b14ff179529961d603594d42b1b","sha512":"448d797631724454a4de095689525d72c5556384662e76f29ab51f36d969387d65910c03e43b3c0bcbcad09e7bf1376d2d31c9e400d47c264a237352f6882dc2","ssdeep":"768:6XQpcsUvq16WYFIVBUFuV3AHfSI2+ekvSDEj+U+M0kyRah9JK9oVvB3fxkMpvUT1:gHqUKTU+uI9Gv2","tlshash":"6113d8917ee0a3bc37838d77ba27b6dcd023056ab94848cbd209bd182e91617dbd3534","size":44433,"data":"","first_seen":"2026-08-23T15:43:24.077508Z","last_seen":"2026-08-23T15:43:24.077508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/message-attachments.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"424f5390c3dbf7305da7d17353b465e2","sha1":"458df1c66a299d682f884c83345bd7daf8a457e8","sha256":"b04ff9adfe24556efcfc6e6fab01849322af2d48e655f70bf77b0543d2a4f4b0","sha512":"d8bd19dfec096298e4a518d1542675d0fa8670012007d1f4c704da5f6921a48765a887f9bdf0066a968055164701f3ee6b7b65246896d33ca323d82cadf65c87","ssdeep":"768:OMxpUMaLfRF5Tn+LKccZL4b4negG2hZ/7hOMmZCpkgNFRQMTMQ+jrGGWSAxJ3/zp:tpU5jfXL84ntpNQ+ScGDAc/vxf1wqk","tlshash":"2333d6103bc095e973578fab7717f2e1e0060c6e78488d8bd00c7ca96e56623fada975","size":52350,"data":"","first_seen":"2026-08-23T15:43:24.031603Z","last_seen":"2026-08-23T15:43:24.031603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/tooltips.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d84fc271adb834f5251bed74e8d5c6e","sha1":"ea850170481a7875b334c1b359888e618570cbba","sha256":"d5ff2ec51d654404482983321067875f88ee58fe3e4116410c6de1c7064ce34d","sha512":"45cc14a7ac86271a88b65931f1fd728a17a4d7ac4eb06faa804010d09a85aac39f225f578832648fe3512e8596c8c26bbb03d8cb1b3293e2abc8a04c4cdac135","ssdeep":"384:VEqttXfCnw/UolHPJQpMn8t6O61wJ1dvCLtpfJhSJl1XbUqT6FsG2w:VEqtxfC5Of8t6O0wJrO2trw","tlshash":"fc5232f2eaa1f37c7107d81789bef2c8c724670271c14b74a58de8d92a4d50bea9c478","size":14124,"data":"","first_seen":"2026-08-23T15:43:24.015499Z","last_seen":"2026-08-23T15:43:24.015499Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/ui.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65f16d8ba5dff6c7f22e8fa40fd34c53","sha1":"410f89eaededcd74bf28ad2bb00acf584692787e","sha256":"c6716de4c89e24681ce7e03b0232bf424253b7056f1d056dd71277e51c1d0749","sha512":"bb05a5ce818210d1bec861847323700db22043bf46df52c94792e7d30d05cd477cc626519b68888857bcc62b58f46bc854d28782e7224cf6371cce227576f8ea","ssdeep":"384:rcWA8PQgChU+SlLl1oD6WxTdZe/r6uEKkOZXOFj:rcWA8P8hU+c+ZxTd8/r6uEKkgOt","tlshash":"7a72b861a7d48a2c678b4a373577b0cce1261b41b5445f82911cfcc81ea1347f9eeabb","size":16648,"data":"","first_seen":"2026-08-23T15:43:24.082292Z","last_seen":"2026-08-23T15:43:24.082292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/activity-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16e8d3ab11173d3ec6586f92cddd80f7","sha1":"5a3be9b724ff2b887075a394617183045534ffe7","sha256":"8bcae727a625ec1a4d15a9b5cfae846e23cc7af1179abdbd23fc3ccc23814492","sha512":"74f74f5aaa0c539b598d0557826c04e5b13b109d78e0ce648c9e01923ff5e373b926235f3df2cc74c143836013c577ef5855b00741bc54f063ebe26e11daa0d7","ssdeep":"96:bNDU2zujA+92C7qXV6i2ICBFqVNfLIq1000IbKwnZxWAnd:bxYX92zXI/if19nvnd","tlshash":"0f9174a43dd0317c26a34776a223e1d6e5465de63a13d883e270bf483b67a23c1c5679","size":4474,"data":"","first_seen":"2026-08-23T15:43:24.026743Z","last_seen":"2026-08-23T15:43:24.026743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/markdown.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f35a7a5d05c557fd936fe63ec3cb158","sha1":"25352b468f7e212949b8ee8842cc72cd5083e731","sha256":"e35d5af3d4ef0a6e4cc72603e321a8c7814e7d7bb8abf818da8556cd7f6781c7","sha512":"8d16c4ffd40d93112d77fe0d1ab5e50d52ed92732afe4f21eae68e90fbb0d68597a4e7bc016545bcf071e7ccebdff6e4bc73ffcbae39f5d2a4464af55e7fd77d","ssdeep":"192:O6yxrVJoCWQsyqJaW7BaLBPOinwSiehUFYFXIl:O6yxfoCWQxgNBkmCGFYFIl","tlshash":"45d15f843d8140c9a31b6ff6fb72a2b5e11f5849688954d6c088bcab7d3153c99b7b31","size":6300,"data":"","first_seen":"2026-08-23T15:43:23.968584Z","last_seen":"2026-08-23T15:43:23.968584Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/storage.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"102107dbfe9b53761908ea8be9545506","sha1":"c596ad94dac1bca7ac0a67c4ae4e611ddee81df5","sha256":"23384b0f42531542fe1576ffed5ea3c7ffd0a753f9d56186ffcdb66f06d2b961","sha512":"6fa62da53c20e2aba8f94a98b0fbd7ca2fa7f598b6038d45dc2dc344b9b3533bd03ba97226a02a3c650e1ef239ad5c851ba6a93373d74c47b692d01a421cc3fc","ssdeep":"384:AGSxLK5EuQT3W99pP5IfhStQ9lJx/WhTaGrLDAqNkuWzJQ1j:IK5EuQSHpP5Iwtsl3B6DAqNkuWzJi","tlshash":"8452d7b1be605f2d1f690dffbb12b944d1a30e4e35809043e499ad06b9c2a17d3f16b9","size":14454,"data":"","first_seen":"2026-08-23T15:43:24.063111Z","last_seen":"2026-08-23T15:43:24.063111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/members-virtual-scroller.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3466be03931bfe308055f5747a16c28b","sha1":"fe7c290abbc01cfefadcd64b4e5c9fa76f9a52ab","sha256":"804ca3f64433e1a6a67f75b87069581f36adefda9f0a2b1ccba9cdc63b789429","sha512":"165d6fe0ba1b45606bee18cec846a57d3b7031e79d159cd1b6a2130fe6968ae966ab1275acb8dcf36adece69f675d832f2876e419fb3e7bf25a4370cb25bceb7","ssdeep":"384:rggSsIBO9LGi1adITJNiRvZR8MpJrj5pBvAsAI4TvLhyyJCz9ZycD1RJMyEEDHzW:p1SITJjarj5pBvjFKvLhyyJCZzR+yEE2","tlshash":"baa2a4543e802955774f4ff7b227bcd4e02a0a6f3984999bd014bca97e93a26f7c2530","size":23180,"data":"","first_seen":"2026-08-23T15:43:23.970276Z","last_seen":"2026-08-23T15:43:23.970276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/scroll-button.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55e2620db3798803f68c8d5d00df9217","sha1":"fc25af685afeb13e61944fcec808802b55d908f3","sha256":"4cca018f403f0dfe5270dd5f766a5011f592b1b71025338147a16be33db20e78","sha512":"adad60da615e23ed0910458bcca4b04ddd367323f4d0bbc672d13295f23e880f9c9687abe6f7de33adcf97239e47455845e38bdbbf06bc8fc8e97b4186406c5a","ssdeep":"384:7CbRUN8y6qmHo6cR+vhunpoZfYy0ZVZy5hLSVw:7CbRUOyTmHrcR+vhEoZfYy0ZVZy5hLSK","tlshash":"5252939137c13d9063db9fbbb613b2e9e82a0d2a38499853c910bd587e73167f2d0974","size":13418,"data":"","first_seen":"2026-08-23T15:43:23.972161Z","last_seen":"2026-08-23T15:43:23.972161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/char-counter.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a67c604822654d31a37be929a33d3d5","sha1":"5e056da01ea932a251d4b1e431575b526439df40","sha256":"206c8bae8157067d631a943b9f75d933aef76e667467b17bfe7bfacec5526f2f","sha512":"80d0e1949f7455bd27d663297367c154a5ca6050d6bfa49932a203620d947fa98969ba2fdb4fe2624388e273ebee6dd134282eb0cbf2b2ff11133aafb3513000","ssdeep":"","tlshash":"55512f16bd8019ed279a9eaf362b62f1c625c48cec100c89850478c4eaed534f7e6b35","size":2578,"data":"","first_seen":"2026-08-23T15:43:23.987823Z","last_seen":"2026-08-23T15:43:23.987823Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/settings-change-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e47d915059d3bc6922cfb0997354dd","sha1":"74633fa50b4d751f6d8b458089aa1290ebc15137","sha256":"1edce3375738d80b634353e3b35e34d7af51b398c53b785f390b3b3f699ddbb1","sha512":"f90ee716afb4d0cb7cbcbb265d552a3f74000235d7ef9a34666c7ba3fa8c70d115d6272b7978e91d96bd7722fc2424c2bcd9edf557891673e58179ec66781d4e","ssdeep":"192:sNN1kxMIRiWmOhbFayzgc6TEpZprYYzbbwu1fKsk76KlPpNfNoVrxYagK:sNNexMIRRmOdoyG+pr/wu1isk76UPpVw","tlshash":"25f1322596d11f60738bdffb632325e4d11d0c8db4588887b16c3c683aa5a0ee1ead74","size":7990,"data":"","first_seen":"2026-08-23T15:43:24.056719Z","last_seen":"2026-08-23T15:43:24.056719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/overflow-detector.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4991f2b2cf6bc834214aa07f08cea0c","sha1":"c96ea0f9e8398b78287feca0e8bed795a6154798","sha256":"46311c117fb5a6da9ff3904c48534e5ad35793ec5192d69b31bd5dd4070d8c69","sha512":"823851a5cf342628f9318726c53b503f32e0ee062acda2c3f80c1168a16ecfe936c584fc685a92f0745818414ed3d4be91c934ce2c656590b854a8cedde4aad3","ssdeep":"","tlshash":"1251f0753d8632b167160f7bb923a1d9cf6d4c653390c486e638ad4c2f26c51e8ea934","size":2521,"data":"","first_seen":"2026-08-23T15:43:23.954054Z","last_seen":"2026-08-23T15:43:23.954054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/version-gate.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dba9918bfc0a602d697905ca24c8c700","sha1":"6c816e0eb889e2c09d26d1a5777604dab3a8e214","sha256":"6103b7ea1b76f6e305eade78b3aec8435575b7d1e2537fd7058c508714fea0fa","sha512":"ef09e7abbec1360760dfc68eed1cf5a9f5cc3a38768d891fb9ed0e05d3410508a5c6ef9677abdf17192533b944c1118e0716b36999a22fa03638d43c18f9c490","ssdeep":"192:qMzYznzhcT0O2XmnyFlHq5QNwFtCpEmqp9PiiuZpHMC8MJASJdJuYbGGpyY3J22Q:XTDyFxalt0ER+/lJZS0VZ2vViPrsaF0x","tlshash":"ee22ca567ad0745d03d34fbb253f7187e1764abe688d8c41f112bd802ea860aee93e35","size":9984,"data":"","first_seen":"2026-08-23T15:43:23.989271Z","last_seen":"2026-08-23T15:43:23.989271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-23T19:36:44.299708Z","times_seen":424654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/in-app-browser-escape.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"518b915f4eaa7932717929ea6d552603","sha1":"d1cd74fad0187135b52b0132dea8fda53dde10d3","sha256":"5da135ce4977743999ec8c257bc3a8ab4fec6c49a9a98fe0872b9b4eb1bb476d","sha512":"3acdf9cfd3f14fef049c133cb361476e67fdd2a9e35111e69833b50eebacbee69a77e55c42f433a9d43737fb4106edb1addffde6ea27aefa6e6190cccd6f0fb4","ssdeep":"768:jDKuexYkRJ6I0YT3WcOHZ0RmPQs4woMQrDJt39E:6hx0oM2rq","tlshash":"96d2d840aa4047ddf2a3df9b9a61c4cdf139a445f21354eed082b6b88b806ded7176f8","size":29554,"data":"","first_seen":"2026-08-23T15:43:23.932726Z","last_seen":"2026-08-23T15:43:23.932726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/fingerprint.js","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8688eaa4276ad5a44b28b4a602c1d348","sha1":"444ccc506734b44e6e13df70db474cf135d7b654","sha256":"a3ad7eec7e45dfa5e5f24dbfc15f3f6f1d0bf1e094444f81eaeb11a10b424457","sha512":"1e79521f6cb7c1ca0a1d155aa3d2c266baf93a99d5b94ade6495d85a5ea96966ab11d153867981a145c8f79962404388a460f576ee629d9d0bd42fc7628926c6","ssdeep":"1536:7wb6XtNM/cEUEaA1iBFhBC0ytkE5wVwAJe/hfYULjP8zc:kl/cEUEaA1iBFhBC0zG8z9ULj8zc","tlshash":"5d73b54077d07448d7a7ab77b72bb0c6f56a3c9a39c4994bd401bc807aa4a1bcef1931","size":74201,"data":"","first_seen":"2026-08-23T15:43:24.025091Z","last_seen":"2026-08-23T15:43:24.025091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/onboarding-checklist.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3f95c018ee1f26c18443486e393cb89","sha1":"12ed0fdcd5e468f599df58f5b47136c4fb65a668","sha256":"1335341e753ee3f5052ef29f7c9545327a7fec127c78eda3ee8a3c3fd6d090cc","sha512":"fd92c653c0316010667122576ea4e680e228a09f49e9a60a88df5c30cb759bf18721bfd058296dc482a594ba2de366f2ba60dc641f78c30cc8259cbee4371949","ssdeep":"768:L9QCRoPXzloBGoGeJQsfus2Mx3VKDEJ/dyXPZzmMQiJKagcDiJKWXJMdWYstD:L9Ol1Vs2Mx3VKWVyXRztJpGJK6","tlshash":"c8f2a7406a80e7be72938b77b732f2f9e1260b0681018bc9d5c5e9425d95167df6f2b0","size":37481,"data":"","first_seen":"2026-08-23T15:43:24.04619Z","last_seen":"2026-08-23T15:43:24.04619Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/mobile-navigation.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70a82b45e31f048ab0a871e07c99734c","sha1":"5124a2acbe1897bb600f98d6862b69871b25d060","sha256":"809521e38c2f20cfab9a03aa85c330c9c9e37549a5aeb568c6a9cdc1ed47f2f7","sha512":"7a04bf7bad2f0e7de3dc75f1e4cb2fff235c527b886b9d5e31fa01cc926e635671e222d14b9ba5e006d9a631e6e5a7910b54e50cabe1388d8e65747e01f127a0","ssdeep":"1536:CQ8bDz5Ni//p3fYSWlILd31TIEJwSDgOdY5UDbp3Vi4BTLAMLy1+8YUv664bTz7V:W1eKxyVBBnLTgLzJKEr1pSWep","tlshash":"0cb3a6916bd01aad278b9ffbb32375d4f429089e3980945bc1097c1c7a93617faf25b0","size":107613,"data":"","first_seen":"2026-08-23T15:43:24.079204Z","last_seen":"2026-08-23T15:43:24.079204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/floating-corner-physics.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e64f19d17291413ac01d81d4191489c","sha1":"ed928a6565cdfb300d590bc45e0be02a7ae8961c","sha256":"5c0516e06d98b35e274a0e3a3b0576ec94bc548db9216d4c6048b070ee407064","sha512":"9de44d1ca428d62c1bbb92786927ea78b8c2534fb77fc6202a417ea138396454c8c3cd61eae052676855674f22cbe119b1d37b659467b2f167d7edbe74a7fe71","ssdeep":"96:K56JmDj9O0+1XtQGwg8Q+GyZP3+C8PsMUzqE1ZsZ0ZIrpXslyVsEcg8fUAMe:K56JKO0+1XtQGwg3+Gy1+P7UzqkE0ZIk","tlshash":"dda142547384b4d0139b4fb6b437a0e6e32add5f3bc94817d100bda06699a2def89731","size":4947,"data":"","first_seen":"2026-08-23T15:43:24.005686Z","last_seen":"2026-08-23T15:43:24.005686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/server-management.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"335777f92d3d1729637e5a36e23c2251","sha1":"db35d36ae677cff14e6aaf49bc6db0264a2f5679","sha256":"5791499beec28dfe790666dc166b553c569be25127d56efe83776ef014706efc","sha512":"f97973a34b2ffa9d8d5715ef937843b6fdb32ca569441169b79ac898b63f784530b6c4999cb21e27d04a5aede875f7250976370eb39988fc8af028ede8c1325e","ssdeep":"768:g2jt+hiPR2yEKH99y07vcZSXm1JBSLVCMDXvrtbOxhBrQB+3JzIVXDg6XS30Bgav:ai9yfKgvEEK9i1Nbg/nIfSN","tlshash":"4343c991abc057ad27979ef7f72371c5e14a0b8e7940958bd108fc09faa3403d6d9670","size":56954,"data":"","first_seen":"2026-08-23T15:43:23.946288Z","last_seen":"2026-08-23T15:43:23.946288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/members-list.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d59e2c32e2c2e858c95c8a8749c7ce3","sha1":"1851a970a3e94a64de4069448b5f1637967570b8","sha256":"e73bef8dcdc509fc51e7aba0a402164db21035f57b6e12858155d40c8037d7ed","sha512":"8466a4af5cf4b845aaa60ba8075be428dc8941c25b4ca342d016ca73b146b275fbc6067fdd62145a85d4c9b3cc50622f39c0d6399c8969cebd8df202bef5737e","ssdeep":"3072:nHi6A0dCTPgdMMXtpfv3uWwgag5xQuHVvaM2Bz/Z8:nHi6A0dmPw3pX3uWwgag5xQuHVvaM2By","tlshash":"f4e3c6406ac0a9bc67839efba72375e4e01a1b1e794085ebc024fd19b5d3523f1fa670","size":144024,"data":"","first_seen":"2026-08-23T15:43:23.998452Z","last_seen":"2026-08-23T15:43:23.998452Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/typing-indicators.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4567d2823a9987601366d1c7d3e6419","sha1":"64d7455078887d4df3e6f88d148f61017f822b75","sha256":"1f87508b7d98ab303de78aa341142520d6db584e422699c15e962ed615d4412f","sha512":"43558abb7a719a69f085938a07cb945853f06305221bfa1c65b366f33f112a6691c471578eb1794953df5bd452fb2afee5072aef80f040b0f52ff0f831dd388c","ssdeep":"192:iHfTeyXYBnupl6GjEf4N9ypL+yqc2fppuQF79F4dlJTfIjED:i/TeyXYBMlbE09NppVn4dDLIjED","tlshash":"08f15593ead076eeb2635fe364376084d94a1b263404abc9e064fc18bdf2557d2de630","size":8034,"data":"","first_seen":"2026-08-23T15:43:24.066354Z","last_seen":"2026-08-23T15:43:24.066354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/pwa-visibility.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef04c328d7ef65b8ad49d4009e855141","sha1":"a3d090fa098538698900741c4e95df8cd051375f","sha256":"caf1055a48dda2bc1eb62ecd79913fac3e9a390e824b0e16497c1b99f3fd595e","sha512":"43b466ad95f624b7f2f54f99e9109153cb857d39489c25cc9d8950667e86fdec31aaacd7ca240f002d830713165b8f99a23774a97e197d9b2f25bccc5f30e538","ssdeep":"384:R1GsYJLa9DESTbEc99TgRZolRdOlSstnUvQMMT1bdvrA1gJ6oioX9b119MbB//md:R1GsKOxwR119MNHaHqbsc+","tlshash":"3862c5e25e84163d77d36bb3f3233290e49f0d9b3e01ec4291ac6f64a86260bd1d9675","size":15167,"data":"","first_seen":"2026-08-23T15:43:24.007428Z","last_seen":"2026-08-23T15:43:24.007428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/settings-search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1382f7179a526794751cc437317c7723","sha1":"bb0830e14c6f2898363c19ac08fe6bc62da749a8","sha256":"ed7d51373150df7b5d684516010735bda73c031734e81839551c378041929c34","sha512":"07523e90befbbea1cda0f519d1ea325f164273453c6146466dd32a30d68863cf0f19f44aac6a8cb5e81383c017085a8b7ebd8bdfcae6eb2496471c76e40533d0","ssdeep":"384:pw5JfZgw0jDKcT6GthL1wH/CFZLaBgngDmMpNLxWcZ6oZ:pw5JOw03KcT6IhL1wH/OaBgngDzpNM/K","tlshash":"3e5294853ac025b553876fbb3727fcd4e0291c5e388446c7c5007c986ea3a1afaf6979","size":13592,"data":"","first_seen":"2026-08-23T15:43:24.047663Z","last_seen":"2026-08-23T15:43:24.047663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/voice-channels.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf5823065d1f80b16840ce24c129995","sha1":"49fd8aa37b1a8af07793fd0ed25523b282354df2","sha256":"b242ed92f9d7b9d864d245c50474cb179d887162dd2110d83d55ae59161c4224","sha512":"76ab70b2e191f76618ca09d3d339f967dec172ab19a9a33dcef8d601b04f15627ec1f165767b7ac590f561ee5ed5a63808d2c1c035e4c248ad9e386485aa093a","ssdeep":"3072:QPWxKG6akktqyZhE41b1B02x829YViUnEtO/dXDVJ:VtDZhE41b1B02x829YViUnEtEDX","tlshash":"58d3d640bec05ead33876ef7e6dfead4d11e0f5eb04588dbd01abc096aa2416e5e4434","size":131592,"data":"","first_seen":"2026-08-23T15:43:23.95645Z","last_seen":"2026-08-23T15:43:23.95645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/home.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"003466397c14ef00546469894e884035","sha1":"1a296e5dc8666f41fecff4d007deff31bfeb7d2c","sha256":"b4c825ae15795e62fbff43cfbadef65a5a1184b924bc62a5d2a587967cf0faab","sha512":"f2e1763f9b9f2fbdbed342ca8a37f6e3c1dfb5d536efbcf61ea1f3deb279f4c9282bbeb221e14b574c9573b6043c176569aa834aca1e344caeb339c637542a71","ssdeep":"3072:V2zj5sgO9122z/K+e85vveMyRNntYYFkc0nZwYEkln:8OgOSZHFkc0n+Z4","tlshash":"5ee3fa90abd0a5ac67979fbbb32375c8f01a165e68004ccbd008fd547e93613f6e66b4","size":150428,"data":"","first_seen":"2026-08-23T15:43:24.040213Z","last_seen":"2026-08-23T15:43:24.040213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbowbets.win/js/in-app-browser-escape.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.931Z","timestamp":1787499750931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /js/in-app-browser-escape.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-7NA+rskZHT7kymX23dgpkw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"7372-1a02e91d58f\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HATrXrbJB5vbOzN0nKaf3vcWZRgw%2F6bBWhY8ZUhpT%2FOkHZaD6PpUX2bMd2NuPNQbcQg92hQndXE71Vzy%2FwHoDRTIcfFJDm13pPv9PJ5IBDfOSrQAhRR06xjCkxAavQWF%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a434cadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29554,"size_decoded":10083,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29550), with no line terminators","md5":"518b915f4eaa7932717929ea6d552603","sha1":"d1cd74fad0187135b52b0132dea8fda53dde10d3","sha256":"5da135ce4977743999ec8c257bc3a8ab4fec6c49a9a98fe0872b9b4eb1bb476d","sha512":"3acdf9cfd3f14fef049c133cb361476e67fdd2a9e35111e69833b50eebacbee69a77e55c42f433a9d43737fb4106edb1addffde6ea27aefa6e6190cccd6f0fb4","ssdeep":"768:jDKuexYkRJ6I0YT3WcOHZ0RmPQs4woMQrDJt39E:6hx0oM2rq","tlshash":"96d2d840aa4047ddf2a3df9b9a61c4cdf139a445f21354eed082b6b88b806ded7176f8","first_seen":"2026-08-23T15:43:23.932726Z","last_seen":"2026-08-23T15:43:23.932726Z","times_seen":1,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/launch-app-generator-ios-home.webp","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.956Z","timestamp":1787499750956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/launch-app-generator-ios-home.webp HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-pcRbgmYLd5nbS/mmBIwu8Q=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Thu, 13 Aug 2026 19:52:35 GMT\r\netag: W/\"f966-19ffcaf0273\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEcDAZxt%2FiEGeDCCOg5N7foqHYbKY4FjUhBVMjrp3lh5Gt%2FPAcbmKWhAX0ISvmFbUfakPi83VFwMrAt0IvKHhyy%2Bft4p1yLJFbltU%2FpqAuHExLBn0lenRRtUmYpIdijn66E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a437cc3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63846\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63846,"size_decoded":66357,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 945x2048, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b70c1241931d04dcb9d356fa39aefa0","sha1":"b808467442fede7c1d1bbccb954583c54a4bba52","sha256":"95885f716b16f4ef569b8a61f4c10e8d88ca4f4e00073d0fbc41b03a88e801ab","sha512":"fe736532db00c788b8a274ad724f5691d2588f0b0fcaae6399f24d364824d6e5226808fa572246fcd153fefa071f87c0820e883014f32a6b30ab954b16466ee0","ssdeep":"1536:x5hWevKjcXX5BZz/LJPHyH21PgWtXywaL68gNaWwe7POEKt:x6GKjcnJjL44PgWkcxj7POEI","tlshash":"1653f1d39872590ffb6061387f5922d923be66f7876cbca4e1b6a09dc39a5c0111b313","first_seen":"2026-08-23T15:43:23.935993Z","last_seen":"2026-08-23T15:43:23.935993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/socket.io/socket.io.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.841Z","timestamp":1787499751841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /socket.io/socket.io.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"4.8.3\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZ8VLxQ9c7meGeenpb5AXLZEdAi5GcarIql6ZBDH5envPgyp7qOMxz0ZVUWrX0wjsDeR%2FtfCDosd%2F9Oc3MaKIvLjMElpPkRpoN%2FsU%2BaxTxvVUzmyr2eH9SLX4H4i5dtt2D8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a48fe0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155836,"size_decoded":38440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ec127053f9c5cbfeeefd263b4b23bc0a","sha1":"11c08d7468ffe8980b0f862280c0c371776938a8","sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","sha512":"81ec905226bb2b6632f968b204f873331a4a75f24c0f27d50bb5ea930bec797a7c201eed1eaf1a9ef06cbbe923a722bb54fdcbf2be7147eea00d77a80565a39e","ssdeep":"3072:zLTygH4CO2KsFpWw0axS8RZIXyR7dSGg18FEEaLH32emV/Tfkmh0KbhEGtkSWq:zLTy7X1sFpWw0aTRrgaEEaLH32emV/D5","tlshash":"6ce35f49aaf72051917330398bafa045f239d01b620acd443d1cd7f49f65b3897aafe9","first_seen":"2026-01-01T23:52:44.961231Z","last_seen":"2026-08-23T15:43:23.938788Z","times_seen":393,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/data/cache.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.693Z","timestamp":1787499752693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/data/cache.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-fvm+3P8rjQW+nKdDqUM+Zg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"3257-1a02e913260\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGruXnNMZLjC8MAGXWNrjiD8eDqjfHKHqnT1pnLXBaA4Bsx7Rbw1HtqkLVuT%2BISG%2F%2B4nnUU51PFUcPUx4jb5owCOqbJO9dTKcr7rqHoRBhIbGDrJqskmMeyijtmDtmHcBlc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5ecbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12887,"size_decoded":6717,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12887), with no line terminators","md5":"c08af8b1017e300be63269eca27dccc5","sha1":"d536b073071edb834b994d4a95b714d10261bfb5","sha256":"9c2a5a567201cd83ae30da421677cc821d3b5dc0458e092003231bdba50eaf0c","sha512":"3ed6fd65bf387aba9fec3aa1ec6ae75605a7f95aac1fd5dad014e69d07a7e600aa7c499bbfc2292f26f48b63e39a1f6fa92b1904874cdb532c4ed72d95b69e60","ssdeep":"384:Jt4joZbto0WPvb2bKBFHcrj0xWBEJLBQqF:JtF5o0WPvb2GBpcrYxWBEJLBD","tlshash":"3642c7d0a3842519df861bf7731236c5e3852a6eb4288691f308b8edfadb10bd9d4771","first_seen":"2026-08-23T15:43:23.940286Z","last_seen":"2026-08-23T15:43:23.940286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/unread-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.374Z","timestamp":1787499753374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/unread-tracker.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-sxX07nbuDYbW3IEMec+GHg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"524a-1a02e9149b8\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75n0kFYPa1%2B%2FyjaSaSRhijAvTpqDOMwl2mfgPDVl4owZQgCgsFOUN0FPDXCYN1AxO2xtiVjf5fZoKzlJVkod6TwaPcuOaUcui63eI6rTNpSRjPdzfLDQz8N6dko2tNsnI08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f81c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21066,"size_decoded":9248,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21066), with no line terminators","md5":"b7b469131e3bd8892aaaaa1b29e5e914","sha1":"0a6aec84f928fb8a17da970ba1460728322734f6","sha256":"a09df6086a1bed213e7c53aeeaa092e170f61e0cf97fea499efe34a1be32f627","sha512":"88f81d80b56ecf1a9360260cc965717f9a78277c3cd1beca57e44782833e596af6592a7d584dbd97904180cc35616c3fc0e2d172a14b20a6a2886560be4a09b3","ssdeep":"384:N7rhLPBdPZylNtqgu+OefhZbfyivpVjlTwEGTiZpjeqkzY+89YRJLtsE8iX3djAq:N7rhLPBdPZyLUgu+OShJfyUjlTwEGTiM","tlshash":"8d92e9f46ec019982bda4fbbb723f1c0c4192ebab94a9497e404bc587b92257f4d1770","first_seen":"2026-08-23T15:43:23.943393Z","last_seen":"2026-08-23T15:43:23.943393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/server-management.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.380Z","timestamp":1787499753380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/server-management.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-kjvpVoc2FmS+msLpkrG8HQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"de7a-1a02e91494d\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTRlWdAFTI%2FIOfzVHnaY6E42yE2bDriajNW%2F6ja7tGI%2F%2FS76g2YqUPDWPl%2Bex5sgQYP8j8TEp0xBfzEy%2B3K8Dc3Rvki%2FhErKlAe9pilZXIkcLUOcajzA1DBQjhDAsfBqleM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f86c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56954,"size_decoded":18930,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56936), with no line terminators","md5":"335777f92d3d1729637e5a36e23c2251","sha1":"db35d36ae677cff14e6aaf49bc6db0264a2f5679","sha256":"5791499beec28dfe790666dc166b553c569be25127d56efe83776ef014706efc","sha512":"f97973a34b2ffa9d8d5715ef937843b6fdb32ca569441169b79ac898b63f784530b6c4999cb21e27d04a5aede875f7250976370eb39988fc8af028ede8c1325e","ssdeep":"768:g2jt+hiPR2yEKH99y07vcZSXm1JBSLVCMDXvrtbOxhBrQB+3JzIVXDg6XS30Bgav:ai9yfKgvEEK9i1Nbg/nIfSN","tlshash":"4343c991abc057ad27979ef7f72371c5e14a0b8e7940958bd108fc09faa3403d6d9670","first_seen":"2026-08-23T15:43:23.946288Z","last_seen":"2026-08-23T15:43:23.946288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/dev-portal-channel.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.938Z","timestamp":1787499750938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/dev-portal-channel.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-y+q4LAeaB+tLfqPFoPYpow=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1d0Ycz9oCG8KClBrMnmnJPbRefKhcX6UkMttjYlXRQ97OZo1k3YH33ZYMd7XGf%2Bl%2B8SmLbbBbEQZ5qrcpzEKnwn7SlFLIvusUj1gZhhimZm%2B63YMdKB1nFliODc7uKU4rQ%3D\"}]}\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"153-1a02e91e887\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435cb3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339,"size_decoded":2774,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (339), with no line terminators","md5":"ed8eeee273357be54f43d9e31efbb42a","sha1":"ec5a465b769e81e0ae778d94b0d21693b5ee2499","sha256":"c4351ba750513c0c9701ab6b1f3a881d34c9b395899836b8f8e1ec0e01819da9","sha512":"367fc7a7dc0ba0107267cd112edc396b9b12aed85db92d4058c79b42fe6201d2050dc5dd8b78c1ef5f4623de8fa63f7fb7c5e207defbd3a772cee8ef2bd6a90b","ssdeep":"","tlshash":"c8e020f69d54c1755437d150a5538b4f955f9226e6000759d798fe60cf9e0439f33094","first_seen":"2026-08-23T15:43:23.949033Z","last_seen":"2026-08-23T15:43:23.949033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/full_icon.png","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.951Z","timestamp":1787499750951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/full_icon.png HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-FngQDt44gmAYgWjlfgNLPQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Mon, 01 Dec 2025 00:58:40 GMT\r\netag: W/\"17fd-19ad76b3a00\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvIau8777C1cthTNfJYRxIAVOgE4UxgPG46z%2B40BA%2FLIXXOc8IxyUoD6SsduvBlIjvP6%2FkYEB3iN4wt2ycS8%2B9VaibI9PgOTuaMhnMFueiSVaSmgXUUPuqLykyLdtYI47iU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a436cbcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6141\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6141,"size_decoded":8467,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"d45748376b6d9da6aebd0dc81d9a045a","sha1":"94d34969c0000fd1545101bae0770e0adb0b2a3c","sha256":"29d31a9acc2d5c9dff01c87911177363ea4e0ce90592cefb3712f94d6ae3b27b","sha512":"8c18dc492056fa5fa534034f76846685b96c2be7006006f57af056005dc25757751edccdcd1ce714aeae48e4677c6eb4e9f4b093f809c6504f5fc38d1208c400","ssdeep":"96:ySIST+hSW1aTBM/urv0fWg1K+pzjM+liGX6iXX8mCUahwq:ySPuSW1Lg0fzhpkqJX/auq","tlshash":"45c1a8d7daeb4f90641ccc06806b4ceeb919afa4fa84b6fd581b3b1a5579309c2f0443","first_seen":"2026-08-23T15:43:23.951531Z","last_seen":"2026-08-23T15:43:23.951531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/overflow-detector.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.707Z","timestamp":1787499752707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/overflow-detector.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Fyio9IOGVK+7hILVPKP60A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"9d9-1a02e91d3a1\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdI2jxRv%2FEu93qgs938HwzmIT7dXobLCMxpnunxWyKYR7FB7VVBauRcu9DJeFMDDy0GVSqa%2BATd8JACNUITo%2FJ6npnp7PVzm4DRBRtHvwOktN8FgYUKk0URZkSr%2F7NLmftU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e6ed5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2521,"size_decoded":3656,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2521), with no line terminators","md5":"d4991f2b2cf6bc834214aa07f08cea0c","sha1":"c96ea0f9e8398b78287feca0e8bed795a6154798","sha256":"46311c117fb5a6da9ff3904c48534e5ad35793ec5192d69b31bd5dd4070d8c69","sha512":"823851a5cf342628f9318726c53b503f32e0ee062acda2c3f80c1168a16ecfe936c584fc685a92f0745818414ed3d4be91c934ce2c656590b854a8cedde4aad3","ssdeep":"","tlshash":"1251f0753d8632b167160f7bb923a1d9cf6d4c653390c486e638ad4c2f26c51e8ea934","first_seen":"2026-08-23T15:43:23.954054Z","last_seen":"2026-08-23T15:43:23.954054Z","times_seen":1,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/voice-channels.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.068Z","timestamp":1787499754068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/voice-channels.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-DqinUSNMrkAHANlFsP6fFw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:09 GMT\r\netag: W/\"20208-1a02e914d53\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6A1GRL2z7PN6sZnKzMsf4yJKLxxJoRTYJZg0rMLsg9OH%2B6YgAi%2FNvbBgLpmcKweEj2eF2KFxubsckCN6P61%2FsLr%2FJDxMP4zlPzubex0cQuP2DASjUiWbXJUgi9R7Vz4k490%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56effbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131592,"size_decoded":35253,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0cf5823065d1f80b16840ce24c129995","sha1":"49fd8aa37b1a8af07793fd0ed25523b282354df2","sha256":"b242ed92f9d7b9d864d245c50474cb179d887162dd2110d83d55ae59161c4224","sha512":"76ab70b2e191f76618ca09d3d339f967dec172ab19a9a33dcef8d601b04f15627ec1f165767b7ac590f561ee5ed5a63808d2c1c035e4c248ad9e386485aa093a","ssdeep":"3072:QPWxKG6akktqyZhE41b1B02x829YViUnEtO/dXDVJ:VtDZhE41b1B02x829YViUnEtEDX","tlshash":"58d3d640bec05ead33876ef7e6dfead4d11e0f5eb04588dbd01abc096aa2416e5e4434","first_seen":"2026-08-23T15:43:23.95645Z","last_seen":"2026-08-23T15:43:23.95645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/servers/1476772561583869959/unread","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.166Z","timestamp":1787499755166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/servers/1476772561583869959/unread HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-5Wlp8kKQa0BiWw5ze8AnVw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVZCuG2no5GVY%2F0usBMVOo2pbCZA6x4YXoQyD9u1t8bjt92JThUjNNYVHhEukw2iUa3TJSDWUk7yVepmKawgThJ%2BgzEbjies4O89tXPN%2Ft5GgM4AKM6yMC87ATjoMZ8Bdik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5dc958c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":2482,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/channels/1538347168400674898/messages/resync","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.358Z","timestamp":1787499755358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"POST /api/channels/1538347168400674898/messages/resync HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 271\r\nX-Instance-Slug: he\r\nOrigin: https://rainbowbets.win\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":271,"data":"{\"after\":\"1538378068459000450\",\"known\":[{\"id\":\"1538348125092057446\",\"edited_at\":null},{\"id\":\"1538348225038127592\",\"edited_at\":null},{\"id\":\"1538348347385975284\",\"edited_at\":null},{\"id\":\"1538351042230491367\",\"edited_at\":null},{\"id\":\"1538378068459000450\",\"edited_at\":null}]}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FaOiAhTbC3BAZUHwSBD0blADmZbsSbHB1qFFda4uNwPq7buJtRuzqspNcMKJdHCpOATr7vv8%2FRuA%2Bg15PpAthoMyz7ANEz8RGsSMGiiFL735GbCfktP43VXAhZEm0AQ7Zs%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-rqq/NH3jh/9gMXPEYnYhmA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\naccess-control-allow-origin: https://rainbowbets.win\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Instance-Slug\r\naccess-control-max-age: 86400\r\netag: W/\"191-2DdJlqrMrsly/ZVtPNGq7S6YA/E\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5ef97cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401,"size_decoded":2937,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e420da811b0d5c54423b68ab57b9bc86","sha1":"d8374996aaccaec972fd956d3cd1aaed2e9803f1","sha256":"49efb2c6431890bd48ecf98a60feb546ec01135c39768009850a577e5bbcf6dd","sha512":"6efde783997c718729bb158423215c0c00af5420330b166b2b6c69606a51492a4c33cf54e39dc39d5bdb9905879e226103cca92de92d81d82337c77074508cba","ssdeep":"","tlshash":"55e09aeb522009ff5aed1895fe4028d05bee408e361a65e09572a13f77a259f2a1348f","first_seen":"2026-08-23T15:43:23.960761Z","last_seen":"2026-08-23T15:43:23.960761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/channels/1538350319216367346/storefront-plans","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.518Z","timestamp":1787499755518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/channels/1538350319216367346/storefront-plans HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-QNfI9IGO6DxZ88cTmL8fDw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"729-LDLv1+IrgTLTS87BDDFyVSNw7HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bc4gkFwfFn7CHXD7vUm8GQoiRm%2Bm5owuBDmUro9txkkogJi9ZGvQyxCWtT5PplKGxA06fp0Ow0FWS%2FhaEmBiyocvsABKNvLYAOA3ZtbGYqIc0l6wFLZ6kyMNJ2wLVRBsW%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a5ff98dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1833,"size_decoded":3151,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c98d9a72a798fc29b67924c3c8f9bfc7","sha1":"2c32efd7e22b8132d34bcec10c3172552370ec76","sha256":"0519c18c6cbeba30b75428ee4c37e6e94b59b82cbd6abb72a2de2344c845c82a","sha512":"88d2de8d52ed8a751eb33c37a0770be0f87664261151adc8c8fbde1aea4ac2000d8f3e0e717406ffc4de79c5b655788cb03572c2bfeaabe73a04c1b1d8264222","ssdeep":"","tlshash":"a431de458b4f60f44f7b89d3a48f5a516834361bb345d86a9b0c8958338b562473b693","first_seen":"2026-08-23T15:43:23.962937Z","last_seen":"2026-08-23T15:43:23.962937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/webhook-tester.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.934Z","timestamp":1787499750934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/webhook-tester.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-KVqstYf4HnyOZ0kuvNRtrw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"3e19-1a02e91ea81\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyQNrAnkkPC07PS89%2B8WxdnTOV7PGaFpBJe2Qb0jLaWFxG6pln9FVh5TW4Av8%2F%2F3PsyM0520HVdgws%2Few9tdxwY39c%2B74lm6UtkIIY9k3qJoYhxC8PP4KcEtbO0GeVEmVhI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435cafc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15897,"size_decoded":5812,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (15897), with no line terminators","md5":"2e977ea1d545fa66b6cffdbf61b8d407","sha1":"e7763a1052c0e27408d5ba017208751ec942c1b3","sha256":"3f1657a072e741008b22dbdc6a9a0566d7b25bb61c036858b804a85eccadf7d4","sha512":"460cb94a3a2fd6ed8bd86b79b808e585d5374d6ad6fedf5b7b963bd0bdebe1fd7bb29a9a40ab7aa08f74d5ed3a6ca06fa2270b647aa670dfbc18d9ef1b709e17","ssdeep":"384:Ut3sMCcJhJfJMJYJmJwJaJZJr6zx60e5A6Bt7/wEOCGxLmZLWgfcDfA4B:Ut3xCczB2q8eo7B6zx60e5rBt/wEOCGD","tlshash":"67623f33f60615282027c5b7998296cfb138e622f3131798ebb365a8cf874efc759645","first_seen":"2026-08-23T15:43:23.964768Z","last_seen":"2026-08-23T15:43:23.964768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/he/pwa-icon/inst-he-1786842729427.png","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.287Z","timestamp":1787499752287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/he/pwa-icon/inst-he-1786842729427.png HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-n+C0zSkgBhz+uANuzEVNKA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: \"inst-he-1786842729427.png\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRCx%2Fi4XezJ1Qvonx2%2BdnGbiUwtOMWDXmhlKGWjV6kjrD9t8C11RFvBoS9zNU3oIGDdX5LMlWJeqp%2BBvX4GvLYr%2FKx%2FG8gMQIQtNArn1DpsradLjacr%2F4ebZtH4sSsSm%2Fkg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2fb3a4bce68c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6149\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6149,"size_decoded":8447,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"1126c8a21cb36cacb81c1021059a20d7","sha1":"5c10edacde0055a00f3a44f9f950a488c6c9ed1f","sha256":"824e9107ea512db3e8cf457488233ca5cbaf4367995508f2d198f1047076d377","sha512":"540923221a8818483fcd67d4c5fd1edc484e9aa0a020e5538dd3f36d49abdc499b3126034c7a91b15d575469cd106651634270c209db29b6e1fae3f42cc43926","ssdeep":"192:orr+adEQ6jh/2g8HURWIQvFidJUC/PM3OM:oraadJa7EPImK/PM3OM","tlshash":"14c18e2017c6f4f4a4ca33905da1686788d4e984df3969bab49ecd1c3475ead1b04f7c","first_seen":"2026-08-23T15:43:23.96683Z","last_seen":"2026-08-23T15:43:23.96683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/markdown.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.485Z","timestamp":1787499752485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/core/markdown.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-ywLoFWc350BXyrfy4sBW8g=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"189c-1a02e91309e\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FUn7VaAGoexwXZodkw1JdoNBnuQIr31IDn%2BlaH0veXpshWXLEm3DXL6vBFxpvuIAgCFdTEQN1qQHZ6WQyc4HnJKmQcRUP%2Fq732nzhbXCv%2BMMPehBberxsd4bgL2aaQmzLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4d0e8dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6300,"size_decoded":4899,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6300), with no line terminators","md5":"1f35a7a5d05c557fd936fe63ec3cb158","sha1":"25352b468f7e212949b8ee8842cc72cd5083e731","sha256":"e35d5af3d4ef0a6e4cc72603e321a8c7814e7d7bb8abf818da8556cd7f6781c7","sha512":"8d16c4ffd40d93112d77fe0d1ab5e50d52ed92732afe4f21eae68e90fbb0d68597a4e7bc016545bcf071e7ccebdff6e4bc73ffcbae39f5d2a4464af55e7fd77d","ssdeep":"192:O6yxrVJoCWQsyqJaW7BaLBPOinwSiehUFYFXIl:O6yxfoCWQxgNBkmCGFYFIl","tlshash":"45d15f843d8140c9a31b6ff6fb72a2b5e11f5849688954d6c088bcab7d3153c99b7b31","first_seen":"2026-08-23T15:43:23.968584Z","last_seen":"2026-08-23T15:43:23.968584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/members-virtual-scroller.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.367Z","timestamp":1787499753367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/members-virtual-scroller.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-90EbmNc1ZACAyo6bTX6xhQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:05 GMT\r\netag: W/\"5a8c-1a02e913e52\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEiD1L%2FiHvKGK0%2Bfi9ENryc8mfSA9y5GdbdYmnm3EMvzwLuXzEjSYGMyXb38jdy%2BsMLIYGv%2Bzhw%2FqoeHWrnEHfTIbC4vjFaNmHbIuNkyOo%2Bi6t%2BIT3iJJEfHDoE0O%2FYnFhE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a528f7dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23180,"size_decoded":9690,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23180), with no line terminators","md5":"3466be03931bfe308055f5747a16c28b","sha1":"fe7c290abbc01cfefadcd64b4e5c9fa76f9a52ab","sha256":"804ca3f64433e1a6a67f75b87069581f36adefda9f0a2b1ccba9cdc63b789429","sha512":"165d6fe0ba1b45606bee18cec846a57d3b7031e79d159cd1b6a2130fe6968ae966ab1275acb8dcf36adece69f675d832f2876e419fb3e7bf25a4370cb25bceb7","ssdeep":"384:rggSsIBO9LGi1adITJNiRvZR8MpJrj5pBvAsAI4TvLhyyJCz9ZycD1RJMyEEDHzW:p1SITJjarj5pBvjFKvLhyyJCZzR+yEE2","tlshash":"baa2a4543e802955774f4ff7b227bcd4e02a0a6f3984999bd014bca97e93a26f7c2530","first_seen":"2026-08-23T15:43:23.970276Z","last_seen":"2026-08-23T15:43:23.970276Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/scroll-button.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.053Z","timestamp":1787499754053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/scroll-button.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-LVhZCU5VIVW87z4OjQOMxA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"346a-1a02e91479c\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZj0AoVj0kcjiFmMVZ7qQxdA2vxMOa2Os8MNvVyO%2BEmBwQWppvm8Z3OlIds%2BmCKmKdEDhCTR0Y8YlVnQgbYfbHO7cJa5RDzWfHWx86I%2FnoA81uxVVsLskx3sqegQmyNsKwI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56cfeec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13418,"size_decoded":6983,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13414), with no line terminators","md5":"55e2620db3798803f68c8d5d00df9217","sha1":"fc25af685afeb13e61944fcec808802b55d908f3","sha256":"4cca018f403f0dfe5270dd5f766a5011f592b1b71025338147a16be33db20e78","sha512":"adad60da615e23ed0910458bcca4b04ddd367323f4d0bbc672d13295f23e880f9c9687abe6f7de33adcf97239e47455845e38bdbbf06bc8fc8e97b4186406c5a","ssdeep":"384:7CbRUN8y6qmHo6cR+vhunpoZfYy0ZVZy5hLSVw:7CbRUOyTmHrcR+vhEoZfYy0ZVZy5hLSK","tlshash":"5252939137c13d9063db9fbbb613b2e9e82a0d2a38499853c910bd587e73167f2d0974","first_seen":"2026-08-23T15:43:23.972161Z","last_seen":"2026-08-23T15:43:23.972161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/icon-180.png","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.954Z","timestamp":1787499750954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/icon-180.png HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-IQfgUs86oBHQCcOKyH+Ukg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Sun, 22 Feb 2026 02:49:12 GMT\r\netag: W/\"458-19c83404406\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZ2gomMEAHUsxpmhCtS1FrPuouXVrJXOkpFYDt5vPsvDYWi2dBFA8zR%2F%2Fd21moBpPldAV%2FciK6pAI1kgsiZXeGPo8CA8v%2F2nCVHL01IUJx5yqLOZwzRGG3m8bqtLXGClDdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a437cc0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1112\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1112,"size_decoded":3437,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"a8ced0094debea1aa12197c6cf71fa02","sha1":"846d1293584a9f2f44e22a9e821a706c039bee84","sha256":"601946bc76f1f8ee2f8c555ec6a2b2400d3c0007d628705774c1fe0e4ffdb493","sha512":"0b804cbffb261b13e0b0b9fc0618f6ae7f94d3d1351a4d1a831c874ab2eeda06473dae7f1e3a93fe2be2207cd068c1de91c46928dbe62c231cbaf8778a7a1494","ssdeep":"","tlshash":"ed21869719ac0af86887aab6308d4741eebf783ce5998423a299485061f1f0cb2c12e0","first_seen":"2026-08-23T15:43:23.974216Z","last_seen":"2026-08-23T15:43:23.974216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.019Z","timestamp":1787499752019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbowbets.win\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:41 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354711\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-23T19:40:02.266973Z","times_seen":264812,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/helpers.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.488Z","timestamp":1787499752488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/core/helpers.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-2CtNhBOHjItBWSMeMWzvbA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"5ed2-1a02e91306a\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FuyI85BcH6cHfEuVKmIShmKTWfuZ80z4cWo04mQ88xCJ5n03ZZTU7gAJAPl7NxvHvbE7p6vIJ75%2FhZDz3ujwNrlcKcd7yIeXycMpWTT5%2BDbaJUvJIpWKyv3pd5k01yyjm8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4d0e8fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24274,"size_decoded":11409,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24267), with no line terminators","md5":"40ed551caf250fc1f05782ed6569ab0a","sha1":"85b99197add6b94ff6c44a4a69d5bc6a8c0aa8f9","sha256":"4e81622bc0f3e9a5548c6c39b6e0cb2ec6f13039a7805e72ce227942744f2f70","sha512":"f44d2a0367fdfdff05fdf555e67ba0f46ccd4dc559a4f6c5e40eb00d7e51b5fe9e853087a97093509d618e794789c1f2f5a08df6c54d4830e7962607d3a8e35a","ssdeep":"384:zYJVAe+fHTX8DzkA5ZvvN5Kb+JfU3HwMKhzf4r0p1B3FR55o0+RFdQkLLzfnK6Iz:EJOX8Dzkkvl5Kb+JfU3HwMur4wpX3/5f","tlshash":"60b297587a5063bb53435eeffb23f3eee48518023916d8e2ead06ccc2a7111ae1e5535","first_seen":"2026-08-23T15:43:23.97638Z","last_seen":"2026-08-23T15:43:23.97638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/channel-drag-drop.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.059Z","timestamp":1787499754059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/channel-drag-drop.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-JfVZ9QNcua6p9QKlUk3Fig=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:04 GMT\r\netag: W/\"5d8f-1a02e9137bf\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYrQZL6lQ%2BpW4R0mOYb5sDmuGNJcPg18W22CTjZyneJKLjEOZnGb%2F52K6U0hbmDD4IFu0o11qhlukYsHB%2BAC1drX1pOdeaoi2WHhW5PyS2w4xttBCQwVvM02ncTBqBVHtxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56dff4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23951,"size_decoded":9431,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23933), with no line terminators","md5":"1470854934981002f6f4def62fb7707f","sha1":"4477e2c9c5720e8dd1d7f6c986a6481b4e8dc1c2","sha256":"370ec0f6bc295d86810fd3154589161d704505d61f5ac884074d80251ef346e8","sha512":"9ceb8374ffaa290a2636656d99305859206c5a2b4c1d090428e28176d709f2da72afb5bcfe71367bee18d84e79885e98d70910cf91eb5411de1fb773b28f0b5c","ssdeep":"384:6GJTzMP8AW+B2MyfuUAKX1exkMiJhRUCWygCCu3OurB9r1j52igU7aCpyyMguLtb:6kT4P8AW+BSfhAKX1exkMiJhRUCWHCCt","tlshash":"78b2b6a43ea81db85b6b2efbf34275d0da0c5e4f74944c8e91157c06b9f2017ead26b0","first_seen":"2026-08-23T15:43:23.978003Z","last_seen":"2026-08-23T15:43:23.978003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/pwa-install-guide/pwa-install-guide.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.069Z","timestamp":1787499754069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /pwa-install-guide/pwa-install-guide.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-5iIM17yx862BilDYOeEMvQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEye%2FWDpaNabTpNxIXb2YZjHbnZcKA3Call2Dh0JqZ30xMBP5f491il4Cd99IDnz8QRQeK9vFlK2PVLom%2FgI973QmiSTMXh7iqX8xfygASsTPG3Zs9lKqso8xSjY5lWcdV4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56effcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15355,"size_decoded":7516,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15353), with no line terminators","md5":"a7ac967b5b1bd461b969d5c76f7c988e","sha1":"06560e09f15ba86d12f97a2f61bbea6e291cb78c","sha256":"4e5af2e0cbf5c109b17c01e4ae19edc2df8c8c18236402ec0fb2e83a8554be85","sha512":"3855f41a02aca4974251ee54f939644fe3a42eedd818c33708e18e531df6ef8278e931a773d8e78d3b292dc2a8b5ba3d2c3a97e0b2ca9336ad93506533178dcd","ssdeep":"384:sPeN6Pun9QeYWfYhkcV3CQ1kXJSWM4jp7D00ovHRwdsIIyTkjFkbfZBsRjq/l:sPZGnCeYWfYhkcV3CQ1kZSW5jHovHRwZ","tlshash":"8f6276043e90e6ac278a8ff7773761e9e01e17cab894468bd418fd887d92117f2da470","first_seen":"2026-08-23T15:43:23.979789Z","last_seen":"2026-08-23T15:43:23.979789Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499755186\u0026channelId=1538347168400674898","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.193Z","timestamp":1787499755193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499755186\u0026channelId=1538347168400674898 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-OVS9ihaFlkrDF1Sipph7zQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxcO9erPER%2BXxO059B%2F1RaXzmxr474e700txh4YLI6AfD%2B9Cwd%2BcXppTICNWfMr8auaI6YyNrJfwl3i0KE%2BqCz60l%2B0MMIOajW7rPrSYCN%2F4sxHSupbktGaeR43fy82pgKc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5de95fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":2490,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:42:30.404Z","timestamp":1787499750404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-hAxTC2ghiN6PehUeyXWX2A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:30 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpx%2B%2BX1jpTKnXx64I2Fb06PXBKZXuMPJqLVv7Q7dx%2B3ECuLepBto1cdA4zIQK%2BGGi%2FW1Bl6pXxSXb1r%2F3wDJrWAWnL17XiMcMfAkTpTanP8dvbL%2B%2FjjZ94sTUPR%2BHj0fJXc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a2fb3a405c5fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:30Z","raw_expires":"Mon, 23 Aug 2027 15:42:30 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:30 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463375,"size_decoded":83072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (60145)","md5":"3a7581db86b821a7cc86e04cc8dc61bd","sha1":"fa690df652558ca7c2c9d62b848e322b1f40b138","sha256":"c68763f9f921bdb3e455bb6673fd162141b7d2ad17241c7eb1b9ddaaffca1d1e","sha512":"65459371c9b584b3e304b9d40dde682103856c46e1d63681a6cff170beedaf69032acde740055264979becaa8e38819a257dce99963962bc4027efb6ef0b8e42","ssdeep":"12288:4/vMOSkxAhChnScm/XIfmfjGgarH9b+M60VyVjU4UiVYQT0soSzWwHdEwZpt889B:4/xSmt96","tlshash":"4ca4f770e114593ea053c2b6fba0b35f32ad9245cb1787189bf993395ec7ce6cd22588","first_seen":"2026-08-23T15:43:23.982006Z","last_seen":"2026-08-23T15:43:23.982006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":42,"connect":14,"send":0,"wait":292,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/instances-channel.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.936Z","timestamp":1787499750936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/instances-channel.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-mai8pEZyFCG8mDg8t8QYqQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6Skjm4DjPOqaiT%2BNBxU26cwGO0J0ru11GOYw31dJz%2BqoW%2Bvy0gCQCGAxP33JdF2IX9Tr3xITiltkEniZ7xwM9tG%2B%2BYVFitjTnfO51GG5jdJmhl5BxQc1p5P9NDnEiDzwEo%3D\"}]}\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"117-1a02e91e92d\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435cb0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":2736,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2e25e4a5dfd54996c82304c6762f7e7b","sha1":"03b93432275873c5140d048d981c5a3aa822272f","sha256":"16942ac82bcaa5aab777e4a94ed23284b4d8e78f353e7324546c5b52eb3b05e1","sha512":"db2bb68ca6288e917e2a1a512a0077d735090d5602b144104cd52555d1873a3ad1e145b61354491f2254c323449fdae65588b0600d03eacf5c2998bf9c6f163c","ssdeep":"","tlshash":"b6d0cda987668131dd5a952596826b5fd7de9211d100110cda3ce410ce1f007a853849","first_seen":"2026-08-23T15:43:23.98372Z","last_seen":"2026-08-23T15:43:23.98372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/he/pwa-icon/inst-he-1786842729427.png","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.941Z","timestamp":1787499750941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/he/pwa-icon/inst-he-1786842729427.png HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-ohNMQm6WJeMgvjjSSFx4hw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: \"inst-he-1786842729427.png\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFksUh7J1livJp8bPePNOEoRTZZrMh3h16f5uZLIm2f0D3T6vO9exAOy%2FssjzoP%2BCmlOOcMxBFB6v9H5CsgleQAO90vIEEn7jnRsvGBy9mMcPjIK4pQ6vqvFIUHTCOr%2BhLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a2fb3a435cb5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6149\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6149,"size_decoded":8458,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"1126c8a21cb36cacb81c1021059a20d7","sha1":"5c10edacde0055a00f3a44f9f950a488c6c9ed1f","sha256":"824e9107ea512db3e8cf457488233ca5cbaf4367995508f2d198f1047076d377","sha512":"540923221a8818483fcd67d4c5fd1edc484e9aa0a020e5538dd3f36d49abdc499b3126034c7a91b15d575469cd106651634270c209db29b6e1fae3f42cc43926","ssdeep":"192:orr+adEQ6jh/2g8HURWIQvFidJUC/PM3OM:oraadJa7EPImK/PM3OM","tlshash":"14c18e2017c6f4f4a4ca33905da1686788d4e984df3969bab49ecd1c3475ead1b04f7c","first_seen":"2026-08-23T15:43:23.96683Z","last_seen":"2026-08-23T15:43:23.96683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/default-avatars-v5/0.webp","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.953Z","timestamp":1787499750953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/default-avatars-v5/0.webp HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-BgHYnpVzq53/OPJ16oc6tA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Sat, 04 Jul 2026 10:00:43 GMT\r\netag: W/\"824-19f2c92c210\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMrpvqS%2BuHOM%2FAiM1%2BEU4Kz8uED7BClHtVMjR7vM%2Fnlzy0143MqsKU6%2FuQg1WcHjC5oJDGHR0r3IOYqYKoclIhd%2FQVOO5L%2F95HQ2y1UP%2B90VZaBZnPIPuePySlE7TdQYmUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a436cbec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2084\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2084,"size_decoded":4601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b96fae5ccd5d82967dcd60ae4e4f2c9f","sha1":"3b8729609fe24b2c470628b94d4e5397703387b0","sha256":"bbfbfea73b24eaa70cfc695897b3dd8912590e52da81dd720d89810fbf8e3e1d","sha512":"2cc969329a76c06e39d69974fca50b75df7d3ab7b182a60d5133df71ac8962d3fd6fe39a4eeaab1be6472350b8aac9ee76436e9d85c7884873429c9b0d878bcc","ssdeep":"","tlshash":"29413e93b8b44077c533640e1a8d1908541da7605bd1fdf77b6441ddd74ba853f70356","first_seen":"2026-08-23T15:43:23.985443Z","last_seen":"2026-08-23T15:43:23.985443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.838Z","timestamp":1787499751838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 15:42:31 GMT\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":1362,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1a1622f39e9f351ab38999670ba20059","sha1":"4406222602ad0faf8e26423edf040c533bf72b82","sha256":"f0287112ce33d05a0d208d75dd84334092c60e78efbe859c3042c942edad764a","sha512":"1a652ecb2a0ed226e3e3b97c38aac37698b59d5ddee47265aee94c639388cca8fa8737892e94e70bc1415107f572c07585696c77c0f0903dfda9f814a82ca8e2","ssdeep":"96:aOEaNqOEaXFZHOEamOEaO3vOEaBOEaBJc+uTOEaNcNDOxMaNqOxMaXFZHOxMamOQ:9NNIxO34OxDNNryfO3iExlx","tlshash":"b1a18992002ba400ab971dc273cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:23:42.312671Z","last_seen":"2026-08-23T19:36:47.602415Z","times_seen":5270,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/char-counter.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.702Z","timestamp":1787499752702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/char-counter.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-BVoBQukX+StJvIIbXlpkSA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"a12-1a02e91d2ea\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvpPZWjLIpVu6AGlW6oDhj7CbOpdD94V9DZWZqpXBpeqXImmkFZL7RCKcYcCC4L8BkrHgl7bAqMuAf%2FpwmfC%2BqpRN6vFnz%2BSly1DURTyUyiKZ04gEVnoCCT9q5UIxBhq0ps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5ed0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2578,"size_decoded":3595,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2578), with no line terminators","md5":"2a67c604822654d31a37be929a33d3d5","sha1":"5e056da01ea932a251d4b1e431575b526439df40","sha256":"206c8bae8157067d631a943b9f75d933aef76e667467b17bfe7bfacec5526f2f","sha512":"80d0e1949f7455bd27d663297367c154a5ca6050d6bfa49932a203620d947fa98969ba2fdb4fe2624388e273ebee6dd134282eb0cbf2b2ff11133aafb3513000","ssdeep":"","tlshash":"55512f16bd8019ed279a9eaf362b62f1c625c48cec100c89850478c4eaed534f7e6b35","first_seen":"2026-08-23T15:43:23.987823Z","last_seen":"2026-08-23T15:43:23.987823Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/version-gate.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.926Z","timestamp":1787499750926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /js/version-gate.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-jeqakTIhZ93gcE2jhEwrVw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"2700-1a02e91d689\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKLQPiDPmvKrVBzfU1G5Hq7HZX2TYsCx3bGqe%2B%2Bzn3h2u8bpnK1ZZhzBRiiS1ys4DKtPmKQCJEwgvlQ1Ib8JwBWlj1ks5NHy6xWVkyaBNDuCCSvDo6RtHSSu5y3FS37HYx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a434caac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9984,"size_decoded":6445,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9982), with no line terminators","md5":"dba9918bfc0a602d697905ca24c8c700","sha1":"6c816e0eb889e2c09d26d1a5777604dab3a8e214","sha256":"6103b7ea1b76f6e305eade78b3aec8435575b7d1e2537fd7058c508714fea0fa","sha512":"ef09e7abbec1360760dfc68eed1cf5a9f5cc3a38768d891fb9ed0e05d3410508a5c6ef9677abdf17192533b944c1118e0716b36999a22fa03638d43c18f9c490","ssdeep":"192:qMzYznzhcT0O2XmnyFlHq5QNwFtCpEmqp9PiiuZpHMC8MJASJdJuYbGGpyY3J22Q:XTDyFxalt0ER+/lJZS0VZ2vViPrsaF0x","tlshash":"ee22ca567ad0745d03d34fbb253f7187e1764abe688d8c41f112bd802ea860aee93e35","first_seen":"2026-08-23T15:43:23.989271Z","last_seen":"2026-08-23T15:43:23.989271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/pwa-install-guide/pwa-install-guide.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.940Z","timestamp":1787499750940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /pwa-install-guide/pwa-install-guide.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-6SGrMVjGzMbse8PCfoJX1A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"824a-1a02e91e780\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDDaStQMfmMRtS0j%2F7uG2hdwPqdIbCTQlbFYECAPUJK14x9OUSVFAV4Gzt08GKWq4jDyxN%2Fu8p5YEsVO%2BGx567Q1sf%2FSbZlXRlWVJiKdUeJo%2B0Tq54GHaAaVxHK4Qgfx0Xo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435cb4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33354,"size_decoded":8558,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (33354), with no line terminators","md5":"56a90a87527f0afb84cb001f6b267adb","sha1":"76d74ab4fca1688cabf8cde07726684f1f7a15ad","sha256":"77362aa754b8ba38809cd02bfdc4d6793da2eb96e99c3c646e71d7f96cf2d023","sha512":"bc90c0a785eae1d5c142af7a662b8e0cfda4180deb47ec6ba95335f4eb9b2ba8366d2363f3a4786ae96778592487b01a34836c647ccec7cf7154f8fa8578c3c6","ssdeep":"768:1Ex1/gN75DG0+gwcniYmq/ZmU+EaZ98QteP4fT9kJ:1w47zrwSMUTOMskJ","tlshash":"35e297608a52151d70a7c6d26ef2ba4e7034c2c3e7330b9ef2a764d58fc22dfa295745","first_seen":"2026-08-23T15:43:23.990971Z","last_seen":"2026-08-23T15:43:23.990971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.944Z","timestamp":1787499750944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 25 Aug 2026 15:42:30 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5ro79RivecQV%2FIIWdRISCOZ4qsIatpugPEGifa6uITj%2Fe4v%2BKURN1HVeLK9yQvZaGcK9uN3Jg2IQsUNWN2gXQt9TGfNswVbiGV7aPHgZhqg%2B6MVsLhozZI6t84fqUxMJwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 23 Aug 2026 15:42:30 GMT\r\nserver: cloudflare\r\ncf-ray: a2fb3a436cb6c272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-23T19:36:44.299708Z","times_seen":424654,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/config.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.122Z","timestamp":1787499752122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /config.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-3jw//hK5h+EL+EIsKJGTYA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\netag: W/\"134-DZCyIFO7EL3NImGu++pxbuXGYlI\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkBJGf9iWAJmlXQQsZKrqx%2BceoqtgBp5z%2B93yCwV8AUHchCi9zC1MhnrXAAU%2ByeBrAzXxZhYE1XQF35tn%2FD9BieMEDoLLuPIri0Psiur7YAo04SvkUwB334BRaomDwa%2FCAQ%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4abe52c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":308,"size_decoded":2763,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"37641279b851d9a087f8e4af5abc5004","sha1":"0d90b22053bb10bdcd2261aefbea716ee5c66252","sha256":"7103b0cdb4032e6f0b9847877c0244293e044ce84c50ba7d236c87fd930b61b7","sha512":"cb88d13d64477c7d7f6f52d56831816340fd1fe88e7ca484154ed402bd0e1d7c5d9dbb99aaeb5a5686e66f29d9f7345a74372cf7e63045c067258f0148e39810","ssdeep":"","tlshash":"a9e0862b15911531003e15e6841e7106395b463b930d96c0c5107f78ebe5f2b075ef99","first_seen":"2026-08-23T15:43:23.993466Z","last_seen":"2026-08-23T15:43:23.993466Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/webhook-tester.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.373Z","timestamp":1787499753373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/webhook-tester.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-algUJord8Noy0vtnbFw+IQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:09 GMT\r\netag: W/\"efc4-1a02e914dc5\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUOklVO8aQ48jSeSen599quHqwDZ%2FSL1O353BKhVtnPy2ZwR2dk4lu1CqYFXvja%2BjR0mPYMNGlQJvk1z%2Fv5gRroj4n5hAgrumLRvhDd3h6hGhstBCe887L8UMBXqrS47Hrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a528f7fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61380,"size_decoded":15969,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61377), with no line terminators","md5":"f01e530a56e7e6b4b109523d0dba65d5","sha1":"3c44fb9c7a3a8229970720cd2e3ed0c6d177842c","sha256":"921dcdbbb6b55950523fc78e5507393010fbcba3f62f4610089c44480e18d60b","sha512":"e8209a05f7a39f2ab3a684560bb7d98decea0c6f87dbf04803ad31878927d254bba04f8e23e7d173c7c03f60821a321d5efed456a9fc2794997ee0bf94a8e54b","ssdeep":"1536:wF/5MD4jaFTJyzDv64ZKrtQbKoDSZCNbizcB5UUrCgOO9xcgXUbSzt1L82aY3dEH:gVNDy5bSt3dajNR","tlshash":"e4537281a640eafc6306cef7ae3594cdf1140b16b54087d6d898ed2c69c6d23f4ee5b8","first_seen":"2026-08-23T15:43:23.99507Z","last_seen":"2026-08-23T15:43:23.99507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/notifications.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.375Z","timestamp":1787499753375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/notifications.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-bTPcu//Z8WpKFhCPYOKG0g=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:07 GMT\r\netag: W/\"130d5-1a02e914566\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMCR68d1VwX8KPiWgLQT9USsF65%2Byr9WVpjCLi39JVt9l5qrlocvb0Z85ZDbUiIMlCfmqfTXe9dBD30fVv8a2EV9Q6eL8slCA6jbnTQUhU%2BwYTqpocQnPi3FtgVLjV%2FxIfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f82c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78037,"size_decoded":23583,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"37377d1e7b288feb3bceea2274123cb1","sha1":"3475e070d8ef1d2b7e3110981e2d841daaabe792","sha256":"61e4c23e7542b388ccde98170bc30ebc330f3e8e968d2308c4a7ad2f61f3ee01","sha512":"feb2e5b9938aac942de9f337445bfb7d721a3d98062943b3d6d0376708b26517bbc6251eb7b8d7f9547f6cda7fcbe6c408cd794372f50723229259f06fb5b38a","ssdeep":"1536:+OZF4uot/xHhYdBrAuB5Z5WfQlp8XrYDgTkdkHfy:+AoXhornBj5WfQlp8bYDgTkdk/y","tlshash":"4173c8803be064892bdb5fb7b317b9d2f16e1a995840848bc206fd287665613fff1670","first_seen":"2026-08-23T15:43:23.996698Z","last_seen":"2026-08-23T15:43:23.996698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/members-list.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.382Z","timestamp":1787499753382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/members-list.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-0wXISBMaiuiA4IlYuixFfg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:05 GMT\r\netag: W/\"23298-1a02e913de1\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMJ4xOYCfP0Ru%2FfapzEu0TCIH7X6cGHIwvnu4fMzqNyCasG8GEy%2Fjad5lSlTTqiP7OkfXukYDxE5c0KbyxDdfkJfKftFGePKmw9ueXQm4LPYqA3UqRfDIOhEsIrdmq%2F7Lt0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f88c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144024,"size_decoded":40223,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1d59e2c32e2c2e858c95c8a8749c7ce3","sha1":"1851a970a3e94a64de4069448b5f1637967570b8","sha256":"e73bef8dcdc509fc51e7aba0a402164db21035f57b6e12858155d40c8037d7ed","sha512":"8466a4af5cf4b845aaa60ba8075be428dc8941c25b4ca342d016ca73b146b275fbc6067fdd62145a85d4c9b3cc50622f39c0d6399c8969cebd8df202bef5737e","ssdeep":"3072:nHi6A0dCTPgdMMXtpfv3uWwgag5xQuHVvaM2Bz/Z8:nHi6A0dmPw3pX3uWwgag5xQuHVvaM2By","tlshash":"f4e3c6406ac0a9bc67839efba72375e4e01a1b1e794085ebc024fd19b5d3523f1fa670","first_seen":"2026-08-23T15:43:23.998452Z","last_seen":"2026-08-23T15:43:23.998452Z","times_seen":1,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/fp-init.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.928Z","timestamp":1787499750928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /js/fp-init.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-RK0TZuQyWctwl1L6lgkkVw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"955-1a02e91d55f\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjEtgc82XcxOGm9fC4%2FY11aL8iTDniMYk9tpblN4uz%2FC%2Bu%2Bw6Xznq0KpaA44Cf2%2BZCwOU64v%2FukEVsm6qDYED0SElAcYveb8O9BpHMNfT3Xpgtmf65Ycl82Q%2BlCWeuY629A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a434cabc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2389,"size_decoded":3687,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2389), with no line terminators","md5":"450d107f6f44b347892279d1e2592fb0","sha1":"c27c0218058ef146dbac6ccb056679265530c34b","sha256":"d53fe375a598fb58ee3276ec465c1292113463bf055765ccc869e16fdebfdf38","sha512":"6ef9e59ed67320c7dfb1254ce07639612eaaa248d37f85386c053b3172dc03b40d915c9a72be4fc2ffa42f59a88503e2632336fef43504e7f0c06235914fa665","ssdeep":"","tlshash":"6a4142a87f803a60231346d7f2375089d127ecd975f0c889e124acd9be32639c3c2639","first_seen":"2026-08-23T15:43:24.000233Z","last_seen":"2026-08-23T15:43:24.000233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/theme.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.933Z","timestamp":1787499750933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/theme.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-P4gu5vqWSUC266sCtDBCmg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"4d725-1a02e91ea74\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IySBLsXeNjaw5Cu4JiEVZQyeWw4%2B4oZYknlTMbX3Ar%2BeOpeqYBNoZOygMhnOVVWT9%2FFkmbSF%2F3MtbGTC8xUWhRMcedj2zlJRokaMLw13R5LFBZtnWwisSeWnUyoFQ%2BHh9ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435caec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317221,"size_decoded":54350,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (62627)","md5":"e393409472fe1044cd691f1f2613e872","sha1":"7a34aef4766edf45e3591f9e5f122c4d9638e270","sha256":"bfdbc7f58b9233b7f186d928826e92656929f68938d06da575d6e1ede0d81723","sha512":"632a1df2b984fe623393f3c7ab0c0e8388b940b6db24d851769295a2e57f26b68d6ed4290abc224e3190f08ac544814a8facf8cf6317f8407ffed58ab39269ac","ssdeep":"1536:9kckZ2sSWWFV82zFHVzGu+RpI6LMVDHawIYvLqX4PRXqmB17yKZDS0AOUXfImRR5:QWFV82zFHVCuU2cY+j4+nhDmh+2yxi52","tlshash":"0364d671d654113db827e17bb6c0a78e7138d043ea334baeee7961398fc75ea0722644","first_seen":"2026-08-23T15:43:24.002327Z","last_seen":"2026-08-23T15:43:24.002327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/application-acceptance.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.946Z","timestamp":1787499750946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/application-acceptance.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-n5LzbPE4l+DIjy1czGcLbg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:39 GMT\r\netag: W/\"27cd-1a02e91c34b\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ro%2BiiLVYOkNcGEiiav0i%2BAchyWo%2FRfap0xIBSD2FSbAczG%2F2y5AiVzXrjWUuyQaa%2BHw%2Fig8oudLcuQx%2BHUgqWlHVybT7pF9poY6Z1SS%2F45AGHq7lLVpQl0rkpTFSImtJyno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a436cb7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10189,"size_decoded":6038,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10189), with no line terminators","md5":"1c468c220717aa9e5ea9f6ebd9305720","sha1":"1ac7040b521c6f2d7da07f4bed39261fae65cdba","sha256":"d9304d8fe718f59acf5ba0f04551010c65ef45d857ba951fa58a4e1b66e04d24","sha512":"dc424656351fbac1e1bbcb5d1478702159c06a9bda90942bb7f0e7ddee24a52af3fdccbddcab45bca8c21d5537a175249be03a396e96265b9efbc0ecead2ac99","ssdeep":"192:Yi63SRYLwUX1b3inJD3AX00Ti++y5Gc7+8WYh2D9T/m7OODKLa5gxtaUioZBOE96:163TLwUh3uD3e5Gc7+vBwKbVf6","tlshash":"0b22d7883f409ab9179f0ebbf327bcd0d7270a54b881a885c824fc565d63701e5976ba","first_seen":"2026-08-23T15:43:24.004113Z","last_seen":"2026-08-23T15:43:24.004113Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/floating-corner-physics.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.703Z","timestamp":1787499752703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/floating-corner-physics.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-9JGQefr17eJtRTuG8wcSsw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"1353-1a02e91d391\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=odoGHZC0Duhjm0kIQif6hoCRkjn5fXs1g%2FNu8YOJ6bXF4IaZaUQTBIfciVDydG5QgnBwCnxqoXo9bvDgg7%2FXK7vnAE4ppKtFHv5aPBKWKMjjFgz1W9inCEKxx19FVoE45zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5ed1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4947,"size_decoded":4488,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4947), with no line terminators","md5":"0e64f19d17291413ac01d81d4191489c","sha1":"ed928a6565cdfb300d590bc45e0be02a7ae8961c","sha256":"5c0516e06d98b35e274a0e3a3b0576ec94bc548db9216d4c6048b070ee407064","sha512":"9de44d1ca428d62c1bbb92786927ea78b8c2534fb77fc6202a417ea138396454c8c3cd61eae052676855674f22cbe119b1d37b659467b2f167d7edbe74a7fe71","ssdeep":"96:K56JmDj9O0+1XtQGwg8Q+GyZP3+C8PsMUzqE1ZsZ0ZIrpXslyVsEcg8fUAMe:K56JKO0+1XtQGwg3+Gy1+P7UzqkE0ZIk","tlshash":"dda142547384b4d0139b4fb6b437a0e6e32add5f3bc94817d100bda06699a2def89731","first_seen":"2026-08-23T15:43:24.005686Z","last_seen":"2026-08-23T15:43:24.005686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/pwa-visibility.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.388Z","timestamp":1787499753388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/pwa-visibility.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-zqlm7i7h37J9dF3VMsMrQQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:40 GMT\r\netag: W/\"3b3f-1a02e91c54d\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMWoaxC5yME7wVwqKke6zuJTLYGIp37XXx6kEeiG4XOPTXSsdmSBzV5%2FN5YI%2Bt1APQ0%2Bn34jfCFQQ3dUg4HUUIooIqT6VS%2FRxMl3Q1878%2BY%2BCPgyuaW0YlReTm%2FZ9MDFEHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15167,"size_decoded":7579,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15147), with no line terminators","md5":"ef04c328d7ef65b8ad49d4009e855141","sha1":"a3d090fa098538698900741c4e95df8cd051375f","sha256":"caf1055a48dda2bc1eb62ecd79913fac3e9a390e824b0e16497c1b99f3fd595e","sha512":"43b466ad95f624b7f2f54f99e9109153cb857d39489c25cc9d8950667e86fdec31aaacd7ca240f002d830713165b8f99a23774a97e197d9b2f25bccc5f30e538","ssdeep":"384:R1GsYJLa9DESTbEc99TgRZolRdOlSstnUvQMMT1bdvrA1gJ6oioX9b119MbB//md:R1GsKOxwR119MNHaHqbsc+","tlshash":"3862c5e25e84163d77d36bb3f3233290e49f0d9b3e01ec4291ac6f64a86260bd1d9675","first_seen":"2026-08-23T15:43:24.007428Z","last_seen":"2026-08-23T15:43:24.007428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/virtual-scroller.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.366Z","timestamp":1787499753366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/virtual-scroller.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-cTNc50r58cXcNgZctroQbA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:09 GMT\r\netag: W/\"b96c-1a02e914b76\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cy9zydf8viuN0M6%2FRjC6dqNl6ae2SHHGipgA9tNGQ072nKasxnMOjjV0cFoRCUtKxxUT%2BojLDZldansPHIHGafWeYxsB03KTSs4KztyZsSxfxRgjmkWjNd36xqplSfKvkIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a528f7cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47468,"size_decoded":16429,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47466), with no line terminators","md5":"bb931982ad09d32a1538b9dca0d9c19c","sha1":"fa9f82cd822de33c4db783d38cb83f282660b22a","sha256":"e6db0cf7b25fbd5692f3edf2b1d717853b7792eb3cd5995f8a9719166cb958d3","sha512":"9f11a4eff672b5291894880b113c0718a09a271115593743e95ca7c1edb8abdf37591da5f74de5c3d8a0ae756e2e18c6678d05c0a55f8d9ff9107ebe963ebec6","ssdeep":"768:1c5kYIT3rdJws1b5+kw8xMqtoSqxFJpWWTvHyO+QJzC70IUIfFJaQH98RG0i3ddH:n68xTmFqWL+Tcxayq9Xc/bg","tlshash":"5f2392503bd025d5238b9ffbb327b1e6e41a0d5b3895588bc1047c29abd222bf7e5931","first_seen":"2026-08-23T15:43:24.009144Z","last_seen":"2026-08-23T15:43:24.009144Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/launch-app-generator-mobile-welcome.webp","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.957Z","timestamp":1787499750957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/launch-app-generator-mobile-welcome.webp HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-RrFXRup9LtdgyiQbzp3C/w=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Thu, 13 Aug 2026 19:52:35 GMT\r\netag: W/\"be3a-19ffcaf0275\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQiISr%2FOot%2B4I2pe6wzDZm5C9shuAoRFIGghsrmg47zCJrj7OlYfmfIQ72og52KiFBByr9x8s3LNmEvoPeGaVQc8IX1GSKfwNmfjMt%2F498eeTOOGYHhIM2esy4HvbyORyx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a437cc4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48698\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48698,"size_decoded":51207,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 945x2048, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50a7850ed49662e3bc59a71b39dafc45","sha1":"2987d4d561e418f369638d91785ec997ad5c2f42","sha256":"bf2c2a067a1febe4d3616d26b946a6daec2ca5bafdf8b8c25a9ecba50ba56ca0","sha512":"5954d30cc9e87d601e625995b1208fe9f3ab840f8f1dc5aba95c4e6a81a29003c5db3726ade455e93f10433ff93432c8599d642a47dafd8fde6ded1f714027e4","ssdeep":"768:heVBQjj7SCPY52/OV0zJSMRNBzGX2uLyQ/84ZmDdG7Q0HMkB5zQFRAdVBVcTLl:hqyjjlY5f2dS0iXdk7Q7wkvKAzsl","tlshash":"6623f19f2eed9530f2b5f238344c53145f2b4a5aaf12988ef2b448952de4bf1077a631","first_seen":"2026-08-23T15:43:24.01077Z","last_seen":"2026-08-23T15:43:24.01077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/he/legal/public","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.844Z","timestamp":1787499751844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/he/legal/public HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6zp4r6%2BJ3F0JskhlJSrl1NPMTFe2J2%2BgMu07mEq%2Bx5Dexi0Mf7iyiv24yYJMiEMdUtknli24upNx1ptrcCoK9dctcbQH24JprgusUCPPWvY%2F9K07kUgR58D9PvA%2BZJvVL0%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-SpdQYAoooHOvvWjN7tUimQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"4d-4HZ7B6BbVCWSTiX8FCFIionRqNQ\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a490e10c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":2537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"364c14e3e203b88de32842c43364d5c8","sha1":"e0767b07a05b5425924e25fc1421488a89d1a8d4","sha256":"d1ec0e4229030391553e2cfa889205c6c215f14f97ab4dc5e264e4a10f222951","sha512":"c1d85215329f5fdac262dad0c2a3d02b4220975c454fcdfdfe526e9acd0eea6a830da14ea701ee18d6ba221d7f75db548bb18546cb33cda87119cf6d7f2725d5","ssdeep":"","tlshash":"f5a0222c82330e3cc880a00823838e2c30c0008338cc0ce2c2082f2002c3b0b03032c3","first_seen":"2026-08-23T15:43:24.012378Z","last_seen":"2026-08-23T15:43:24.012378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/storefront-overview.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.704Z","timestamp":1787499752704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/storefront-overview.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-T5gKJSYNa3CptioqAdwAhA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"11ff-1a02e91d435\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQrAimbFWcw1uch0daZMMrZJbi610b0NedDYwTZZZrynGDR78mMQfBXbNjgbq9j%2FXzR2Q%2FA5UY772AFmo8Ws%2Fa5L4w3CAOmuij7GdwOy%2BbryjIkHIwcWjSS0f%2B3DXAXumWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e6ed2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4607,"size_decoded":4330,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4607), with no line terminators","md5":"801de2f7bddce7ab478d28df55353cd5","sha1":"f1f5e7755e3345815887c00e9b1a989c48d6034c","sha256":"4e2b9f23061a865d656cf743081705ba710615cc155a89a15cdffd6fabc06036","sha512":"3062a185eb03a608d5862ae8e50fac23b2832edab3966f825c602952f29ecd26c428876bc5e9226b16b6f9bf468d07d9b4c80e7cce9ca2bb7a7bddf646a0c3da","ssdeep":"96:zr7ND9EREI9WbWmkys33AMr055a5rf//Xtaq/yigR44MtchvkYlWyc:zrhdIuWryK3AMI5U5rn/XtLyijasyc","tlshash":"1091415c3e82b1d21b578937bb26a48ff6f2f15aa08040459110bcd03eb7b17ea57ab0","first_seen":"2026-08-23T15:43:24.014Z","last_seen":"2026-08-23T15:43:24.014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/tooltips.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.710Z","timestamp":1787499752710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /js/tooltips.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-VG75hIQOleslbxuBzwoDTg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"372c-1a02e91d653\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIIPoZUxaltLeh8AztElE%2FMYv0O0TojuL4MgKo1wTHThLwUyBHIYlG5d%2BzNd89k8y7azoxElP5TAEOUkFr5mPDQ1N7NUgbJYGApfXiYmqjnMCuDV8sGKQzH2BdmImpfFIms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e6ed8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14124,"size_decoded":6055,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14124), with no line terminators","md5":"3d84fc271adb834f5251bed74e8d5c6e","sha1":"ea850170481a7875b334c1b359888e618570cbba","sha256":"d5ff2ec51d654404482983321067875f88ee58fe3e4116410c6de1c7064ce34d","sha512":"45cc14a7ac86271a88b65931f1fd728a17a4d7ac4eb06faa804010d09a85aac39f225f578832648fe3512e8596c8c26bbb03d8cb1b3293e2abc8a04c4cdac135","ssdeep":"384:VEqttXfCnw/UolHPJQpMn8t6O61wJ1dvCLtpfJhSJl1XbUqT6FsG2w:VEqtxfC5Of8t6O0wJrO2trw","tlshash":"fc5232f2eaa1f37c7107d81789bef2c8c724670271c14b74a58de8d92a4d50bea9c478","first_seen":"2026-08-23T15:43:24.015499Z","last_seen":"2026-08-23T15:43:24.015499Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/direct-messages.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.376Z","timestamp":1787499753376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/direct-messages.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-qRSUhU7HzAqYOIPmtc7nwA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:05 GMT\r\netag: W/\"1149f-1a02e913bc6\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mYwapf9xfVHvhWbXcL7hEdwe0HPB9JvtECeHyLglg2vHIad%2BMc7bMOW9GeeFhUCBt46w6jF8jqlimX2gbhWZndL7XSwRDZ9%2F7V3r5w3fwqQXwTbLzKVlaif%2F6AEUXx7JFA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f83c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":21008,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"e43f005c60bc95880c30fb851bf1a896","sha1":"889a3f09f1dbdedc86593e0dfeab47626aa70185","sha256":"6f55f17b66de3f24be7b931a3d68456d180686c660516925a8ce8779cf57c143","sha512":"15450f23152196b3ffd4066ab21da38fc539ab6974c556230548b102c6202394190529d7f25bf7e7f1ad89aae5e90d555f48153bd2092dacd008e1501bfd9965","ssdeep":"1536:sPIa1pJjpF2KJopYO6gw4Jo1NZkawDwKJkwJfIIJczAS1qXYgKTdP:kIywDwezJ7czASVgKTdP","tlshash":"bb6387632ad0dafce78b5ea7ba396185d006070e6509cfdb9149fd18bd92103e5ccab1","first_seen":"2026-08-23T15:43:24.017093Z","last_seen":"2026-08-23T15:43:24.017093Z","times_seen":1,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/keep-alive.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.391Z","timestamp":1787499753391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/keep-alive.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-76GiFJIuuFi1LyQwGM9TXg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:39 GMT\r\netag: W/\"1389-1a02e91c365\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BDn%2BxX0zz3ILUICkLtRM7jvCIPBGkD5B2Gfse1Nry28wvrVq08AYZ6BXhqpBQph1uCADrrqm08nCwrSHjmlVAZaxkCCWsa6ZD4MysT%2BYYzI419uAXfw5boiXsQfAj53B%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5001,"size_decoded":4460,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5001), with no line terminators","md5":"f025542ef4c289a7514de207b7de9b97","sha1":"0f29947741af19b04a20c623edfda6ddf52b2acd","sha256":"d5146c9a707353863ea91eeb9e1044728932ca5f7d9f3bba553a0c162eee625d","sha512":"971cab3f4754460cbb3f21b75619f8afa919ab41917b3c7519d20f9a3cf2c90988cf64afcae2da9ec9c848ab56581475a01df4414a3f400e5569f6948a4bacac","ssdeep":"96:Z+X/c2n9Ju5STtFugjryTDrJTTOHVSW3EhfnSmG8uD2ks8WSckVd7h44hM:Z5293TtPrKxqQfF1N85dM","tlshash":"2ca1435322e12da8138193b7d62361c0c2666c573a58e81b60697d8d6e93b23f1f2b7d","first_seen":"2026-08-23T15:43:24.018715Z","last_seen":"2026-08-23T15:43:24.018715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.067Z","timestamp":1787499754067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/search.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-AwxBV4dwr7kz8D+B47QGVQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"1a51c-1a02e914891\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQj9WHUmV%2FFIY7TQlRWvLxia1O0%2Fx1iAbgUVM6Hg8j02IucB%2BsXVN5d3gaX4raaca2RrlfYlEthrVj8ZjiLo5k8PawWjpucFG4R4kL%2B3IEUovU%2Fo4tW1yD1CNivInHH6SUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56effac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107804,"size_decoded":25293,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"a4a758f59405b7aac5c267a2e8638f7c","sha1":"8222ad306c18633a9aa23cab5ca39e7c3c6145a8","sha256":"17d6f144e3158c2d20684b91e8e8f15342369ef1209bb556daed3bf3de53fb58","sha512":"b92d893d61309a343efe10cbd0d31c1f86a0e536679efdef1fdf503ec966cc027962fbf203d602f69032c40f27026a71c9e5e69d396932b3091391e76c8f0d33","ssdeep":"1536:dkxq7eDasJxgUwB2sM02y4UpU78RIQTkyDRmBQ:57eDasJDQ2y4UK8vDh","tlshash":"54b3b991e640d3bd3213de736b3fb9c8d2140716b9c44b8ad899fd95294ea0be1ad43c","first_seen":"2026-08-23T15:43:24.02026Z","last_seen":"2026-08-23T15:43:24.02026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/data/emoji-data.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.695Z","timestamp":1787499752695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/data/emoji-data.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-NdhgrHizKYq/5JrcfsgsqA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:03 GMT\r\netag: W/\"59098-1a02e9135af\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJbmkqa%2F%2FvqQjN%2FcWhhsoOzltJEDYn20frZOvdbhLGz%2ByqK118B%2FxR9YwxM0%2BRTi3SH4obAa9jL%2FRDxgSRSgXpc%2F7kbOW5CJ%2FjThzLB7QmyZR05DC0vJi9GU5Mcp%2Bjma0qU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5eccc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364696,"size_decoded":101198,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52638), with no line terminators","md5":"03e634216ce1377b7331a7153a88565b","sha1":"57eaa5ac151870e691ebce1835737152bbdbd3e6","sha256":"57a52a59e90ebb002c9985fc250e9088ae6a090531f091f6307b8d479bac183d","sha512":"559cdad54b014c323018b6b91d1ad346615942c31157217f3c90130af0234ca4ef7fff4032e7ffe10408774c10dff4021970ee526fa26c2a183e760a150994b9","ssdeep":"3072:iYIQF2hbhITX7+yer9rOdA/rGPwnOOwxdsgMaFMNkJFaMqTZmMEQr:iYQ5qr7erUdA/rGPwh4iAjY","tlshash":"6d744447be009ffd4373e257a708b6f054091c86b24be99ba48929ab9717065f13f738","first_seen":"2026-08-23T15:43:24.021938Z","last_seen":"2026-08-23T15:43:24.021938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/course-player.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.706Z","timestamp":1787499752706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/course-player.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-5F871fCp2U2qCXcfGhKNDA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"975f-1a02e91d373\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2Fvr7eSfybhn9e94cuu5cU3zCIg8HBykx0ixJJUsNsTOb%2F35GLIyulcHkCl36GY7zIi0qM6a4H0DLnDCt6peektyVb3qg7v2IMGbjE3kr8T6IHMpSbe3RnkpH6GV4hBG7ck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e6ed3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38751,"size_decoded":13318,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38751), with no line terminators","md5":"1cbf9ad37efb1966a7f6566b87cdf153","sha1":"beeab98b0b4e81bbed87fc3334a79145c263a1c6","sha256":"fa72950134556e9df3af4716d0d079c7744e0f3bb95ce4bd3c970b08bdf3feaa","sha512":"175f3d3771509c62bda6f5c9f08cc20aecf320d6b31a0eb020b977e5aeff02fdabd17dba308baa731ea7f23f4fce5899409647a4eb0bfd2d55db8288c5e6795e","ssdeep":"768:TJDLC+zYRbbXi5UTGfflMi8WWoc9LnMfsMOEhTeELy2je5EFbGWm4vj17XSuwAfX:8Xi5zgoRLNKsm6G2uCufVXjc","tlshash":"340383842fd0b8bd13cb8f77281f66e4f16a251e66404cced025f9d139a8722edca675","first_seen":"2026-08-23T15:43:24.023556Z","last_seen":"2026-08-23T15:43:24.023556Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/js/fingerprint.js","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.842Z","timestamp":1787499751842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /js/fingerprint.js HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-VBfR1UPKdJYnTTlkXWI22A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"121d9-1a02e91d552\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSa5JafiURAe56vZER69TTZU%2BtlPqoNS%2BkFFELTOkZqe9HHQf2sXlYQ7XyP5r%2FaNGHxP1VI%2Fu6VnhrQWvdsgzuR8OaiEDfqHyKGJ6n5jP2OF9PQGf2axKu1vZIgaXQZ2T3E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a48fe0fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74201,"size_decoded":27974,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"8688eaa4276ad5a44b28b4a602c1d348","sha1":"444ccc506734b44e6e13df70db474cf135d7b654","sha256":"a3ad7eec7e45dfa5e5f24dbfc15f3f6f1d0bf1e094444f81eaeb11a10b424457","sha512":"1e79521f6cb7c1ca0a1d155aa3d2c266baf93a99d5b94ade6495d85a5ea96966ab11d153867981a145c8f79962404388a460f576ee629d9d0bd42fc7628926c6","ssdeep":"1536:7wb6XtNM/cEUEaA1iBFhBC0ytkE5wVwAJe/hfYULjP8zc:kl/cEUEaA1iBFhBC0zG8z9ULj8zc","tlshash":"5d73b54077d07448d7a7ab77b72bb0c6f56a3c9a39c4994bd401bc807aa4a1bcef1931","first_seen":"2026-08-23T15:43:24.025091Z","last_seen":"2026-08-23T15:43:24.025091Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/activity-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.383Z","timestamp":1787499753383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/activity-tracker.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-rwoKColN7Q2f1+eIwZVQGQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:03 GMT\r\netag: W/\"117a-1a02e9135d4\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSZQ3USNJCmAxG%2B9OQot4nMXfHefDJHiOXLH1NyRSSNJBESBOEZmWyhVHWOCUyfEcE50HyreKRApFz6xG%2BnRQ%2FJbX7%2F4%2BLWzVZL6xQUeOuqg671nP%2FN9oQI0yPv9IbzXd%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f89c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4474,"size_decoded":4257,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4474), with no line terminators","md5":"16e8d3ab11173d3ec6586f92cddd80f7","sha1":"5a3be9b724ff2b887075a394617183045534ffe7","sha256":"8bcae727a625ec1a4d15a9b5cfae846e23cc7af1179abdbd23fc3ccc23814492","sha512":"74f74f5aaa0c539b598d0557826c04e5b13b109d78e0ce648c9e01923ff5e373b926235f3df2cc74c143836013c577ef5855b00741bc54f063ebe26e11daa0d7","ssdeep":"96:bNDU2zujA+92C7qXV6i2ICBFqVNfLIq1000IbKwnZxWAnd:bxYX92zXI/if19nvnd","tlshash":"0f9174a43dd0317c26a34776a223e1d6e5465de63a13d883e270bf483b67a23c1c5679","first_seen":"2026-08-23T15:43:24.026743Z","last_seen":"2026-08-23T15:43:24.026743Z","times_seen":1,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/smart-search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.054Z","timestamp":1787499754054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/smart-search.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-vMYB5yjgouxxQRuDXzofjA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"4fbd-1a02e91d41e\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FghkAgjWTizlJEVOkZnuUgq%2BVCy1jSqDqsZAJey74TTT79PYEn879RDwOFgSyX8B1%2FO1my5SV%2FWNXZG%2BzSAV9oIRSLiUTas9sVhNvANH6Qx8A1HcJ3rmg4b7KLXPLc%2BK7Tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56dff0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20413,"size_decoded":8107,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20413), with no line terminators","md5":"402fe0d2e5741363e67bda41fc6373c9","sha1":"8f5a172604987b62c82377e2bc4470a339a85db0","sha256":"5a7fc82fe731f8ac84a2a108b706f5289d151cf4bff236ab778d724f01091436","sha512":"af9f0507bb1244d68bc8fb808407459d52050a7307bdc2807bb41477a595c3bf34f76bc44f0b2b3898b30dd640bbddca2d35911536103086e7e17343d38f380b","ssdeep":"384:psSs6h0zGvDXcUd3bTRKurGhWs9uQBmxu:pts6h0z4DXlhTRKurGss9uym4","tlshash":"a79271148e40d3bc2b09cfbbb971a49ad64a0b1a540d979ef178fc1925c9903f1fe2b1","first_seen":"2026-08-23T15:43:24.028214Z","last_seen":"2026-08-23T15:43:24.028214Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/mentions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.064Z","timestamp":1787499754064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/mentions.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Kzpiuzdj3o1PnuySI8SYpw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:06 GMT\r\netag: W/\"1176a-1a02e913f61\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=avKYHcLWkeDh10KFvy5SaXA6CjGcrvY7HaXuYd2YFpwq0O5h%2BNXcl%2FtjaThhgqC2juHl37sCvJbSdibY3Y1pl2JHGFchYAe16GpDAsr2nuMxJ5cY%2BbaDhhRK2Ang8%2FpnZTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56eff8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71530,"size_decoded":22173,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"8b4d37e1ab1705bdc74efe7b9a1817f1","sha1":"ae3c08bb6c121ffa5bfd96dd569fcbfc5f5dbe82","sha256":"224981f8a0109518830d65e28716295bff9c6705f6d3602acb3a949e6a36b109","sha512":"cfd357f593f610d55c60932c8a5b4da526fdf31e97e4ece9ac5e19f253295137a803500b8f73be6a90a5f7a3abc42c428f66a0d1b5a0f47cb7c5bf90ba2c8292","ssdeep":"1536:FyQPj2il84TTJvrrMUo7cV/XnfHij34DTPCSgQh7QDU2LhblfKm:h6ixJiotXn/ij34DTPRh7p8d","tlshash":"2863c6407bf0a4dd53eb2f76b717b0d9f46e199a584048cbc012fc547aa3526fab6930","first_seen":"2026-08-23T15:43:24.030044Z","last_seen":"2026-08-23T15:43:24.030044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/message-attachments.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.066Z","timestamp":1787499754066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/message-attachments.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-NPp6JAs095tNshNmMqZmZA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:06 GMT\r\netag: W/\"cc7e-1a02e914034\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9KyM7aWxhV5pchJ2jUHWfFN1vdZHLRBbZlOKCOlzKK8ISdlblfOyWVbfy2OF2MuCbyqFXXkT%2BSyS66ekpnTvSNt4fy5gbzuVEjnylmLIYURc2dv3mKEJHmdWIWXYUB8rwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56eff9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52350,"size_decoded":18231,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52348), with no line terminators","md5":"424f5390c3dbf7305da7d17353b465e2","sha1":"458df1c66a299d682f884c83345bd7daf8a457e8","sha256":"b04ff9adfe24556efcfc6e6fab01849322af2d48e655f70bf77b0543d2a4f4b0","sha512":"d8bd19dfec096298e4a518d1542675d0fa8670012007d1f4c704da5f6921a48765a887f9bdf0066a968055164701f3ee6b7b65246896d33ca323d82cadf65c87","ssdeep":"768:OMxpUMaLfRF5Tn+LKccZL4b4negG2hZ/7hOMmZCpkgNFRQMTMQ+jrGGWSAxJ3/zp:tpU5jfXL84ntpNQ+ScGDAc/vxf1wqk","tlshash":"2333d6103bc095e973578fab7717f2e1e0060c6e78488d8bd00c7ca96e56623fada975","first_seen":"2026-08-23T15:43:24.031603Z","last_seen":"2026-08-23T15:43:24.031603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/data/api-client.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.130Z","timestamp":1787499753130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/data/api-client.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Fua8ZhLmCcHLi6Upb75T9Q=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"d9d2-1a02e913221\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uIBUMV64Yh7zIRm6bqtz1NidcsXC1Ec1WRWHm%2FfPmsHlqdh4SXYpGDcTr72OU1VjKGcqmXxavWjUxnk4lItCcbTl%2FHqBjkk5E9RDYXIAAlrujXfVu34FBcZKrQ86z6%2BP%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a510f4ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55762,"size_decoded":17669,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55721), with no line terminators","md5":"38dab2136a7a772e267da2c4d02c105a","sha1":"1905731cf4c232206e2f65c48649d16d741d457a","sha256":"0f779a1fc4f32333d939d302f0812fc8e87307860e685591a4a824a6677ffb12","sha512":"229474b6a3b0249d43e000ee08fd2d500578bd0924878f806acbdd3ed51d89ae82973b3a0a91b07bd41072dd227a0c9301841cbc9ecf263ef4121db721e99904","ssdeep":"768:3wDZ4F98Bs+RwBfJSuXTuIWNDSs7Yg/JsoP1cod7ctKlXDck+rndPqi5UIQP0cWN:hcoa5zgtKF77RXQ7hXvDn9T","tlshash":"8243c770efe05aad37e64db7b713a6cdf0120f0a7901c49ad158ad18b193507d6faa70","first_seen":"2026-08-23T15:43:24.033459Z","last_seen":"2026-08-23T15:43:24.033459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/user-profile-modal.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.062Z","timestamp":1787499754062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/user-profile-modal.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-IBqcvFhdzgkJff4w+DonEQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"16499-1a02e914ab2\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0hQVIdAFltjYCfAeNkundgCeZmn1oqCLRW104TOWKoDlR9290CNVfSk%2F5nJwyEYjvG%2FO2N%2F2lnuirSPuRJnOFgN42x29CdYpR%2B8kN9DvePkrroStncdKUhyyiirxl84y7o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56dff6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91289,"size_decoded":25107,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"6c022bd97422f9ae104a969977f8ebe7","sha1":"6005616ada64127fc1f3889e1ae69074ac8d1c1f","sha256":"9321dfbdbd099e182ded1ab57e733c9e5d8e8a1575a38e59c26e23331ff599db","sha512":"0867808f93e6ddfcd5365916022e7ed123c365a88c1204379803ceb51aced64471786825416dd8e6b422dc92ec5d079f69d7edd38e6b74b280010c8efd7e311e","ssdeep":"1536:cwRB/DNmuUwBLh5OYclI/bXTdTmKIjDWrwhWzSqjIIk4Ve:1Bh/5/PdbcDWo4Y","tlshash":"b493b5509ad0eabd2347cfe7bb3669d9e10a0b1a748487d6c428fc087a93813f1ed575","first_seen":"2026-08-23T15:43:24.034921Z","last_seen":"2026-08-23T15:43:24.034921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/servers/1476772561583869959/icon?size=thumb","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.894Z","timestamp":1787499754894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/servers/1476772561583869959/icon?size=thumb HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-wF3CkH0G+P1c9Heqnw8dvQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nlocation: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev/server-icons/1476772561583869959-1786842780296.webp\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dedw18aJy6VE64oqSFdDojwSedvIoS2i7FTx5L2W9KeTxTeSX7KO32IuV5TATfiGHcmMcS8E8FMTAjIRNKcaLGQgM0gxvP2kufabei6HYZK7R4Rea1JZQG1NybfaSnrB8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a5c18bec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T19:40:42.141989Z","times_seen":18060300,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499755187\u0026channelId=1538347168400674898","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.195Z","timestamp":1787499755195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499755187\u0026channelId=1538347168400674898 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-aqYVcF3LDzlT2zgJt1Ga+w=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeWURvvGscvPzlqAa0%2BgHDRnUW3kmgfa49RYUuXHL6gxR6gAxz72oe2viZQ5DiqODCpjmT8fUbHYsCvZ5t%2F%2FAHtV7bOkkkwlXlCkjMCiFLrnvUP6%2BRb7RT2GS6nEvqAH9AU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5df961c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":2484,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/socket-handlers.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.378Z","timestamp":1787499753378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/socket-handlers.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-ShyxHoQJt44C8d7GqRJ4Pw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"1faab-1a02e91d2dc\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BtESn3WTzFvoaomUEyDruVtOp0j2c7%2FEHF1dMoxQ4E60HbYKuHyTORBD4Jo6IjT5pF%2FroIq2v02vJqhdEyRkyrQPMoj9dgMezKY5CpIHoXtUgr72fOXM8xLKdW7dCVsZYA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f85c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129707,"size_decoded":35340,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"7e19f28613d7995971543546a0d4da32","sha1":"cc9483149aece0367b0f5b301e0a5ff3386e9374","sha256":"50d97460b3862b84b4246c257f85db80ed017842fefd6a05ad669931acd7adff","sha512":"31317d8c6fe7a0aa2d86505d72d4f6aefc780a4f801b5ede6fcd0313e3e27aad6e621c2af1a5b6d29416d9e12bdcaf6eb4e40883ebfa6f2456aa480d70cb61b5","ssdeep":"3072:FbRyMsF5Ff4QHYChSF8JCwMbNrF7zbGywX:FbRyMu5FYChSF8JFMbNrZbGv","tlshash":"b9c371e0e290396daff316b7f313b3d1e166279a2c42945ac0097a14fba3507e5a17f1","first_seen":"2026-08-23T15:43:24.037099Z","last_seen":"2026-08-23T15:43:24.037099Z","times_seen":1,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/category-management.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.060Z","timestamp":1787499754060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/category-management.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-5/j7pLY+l7A16sH6Xuqj6A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:03 GMT\r\netag: W/\"6ce0-1a02e913768\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suSCVBElnEYoiMl3PcZwJC8L5ca0v%2BgQ9KbSct8XvAwaVG8zYdUhXT%2BRkdTHdfw%2BfmrbekanDeGyA8sw7oJsa1Ztl7tSJ4QJVDx3p5dJ%2BDNvB5i8uUVkSZch6rlwnbOPLck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56dff5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27872,"size_decoded":10969,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27806), with no line terminators","md5":"1521569bc38b782f570e7e053aa12507","sha1":"0e988edc6fb0abe30d678dedb9e0ef354f113c80","sha256":"b34198cd746d4c9fe11aa01453b67cb6b45a3d4f4bd3b8124904d3d8292f8d77","sha512":"1a2480be48fe1992f38634fbcb33b06abe9f95feec9b6a65a0fe9a6bef1139b24c54b75c9a6f984de3341704c97b279edc70aac000d104aa49e49864824a4323","ssdeep":"768:p+tsr9PKPhVrdVxg0E6jCxXRTiBoAAUut3CQS1l2CBc+NWUlduSl:h9PKPHzxg01mNJ+rQ6","tlshash":"6ac2a594abd429bd639b2ffbb343b5c8e4580d9d75029ccbe015be182a92013e7d9874","first_seen":"2026-08-23T15:43:24.038666Z","last_seen":"2026-08-23T15:43:24.038666Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/home.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.070Z","timestamp":1787499754070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/home.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-f9W3O+Oi3tFh6LiJkcAfEg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:10 GMT\r\netag: W/\"24b9c-1a02e914fbb\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mf9vyiC2D9cjX1ycBvJPIZEUqR5QtS0OqYm4UVug1lE%2Bu7Fp7MYUTPbvIaA6Y2lIpnSNlqZpe49SE09Cuu5ip04GoF0EXrnjYakv5UGFe9SdxjT2j9yLA0aYRQQ4vavMzso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56effec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150428,"size_decoded":42704,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"003466397c14ef00546469894e884035","sha1":"1a296e5dc8666f41fecff4d007deff31bfeb7d2c","sha256":"b4c825ae15795e62fbff43cfbadef65a5a1184b924bc62a5d2a587967cf0faab","sha512":"f2e1763f9b9f2fbdbed342ca8a37f6e3c1dfb5d536efbcf61ea1f3deb279f4c9282bbeb221e14b574c9573b6043c176569aa834aca1e344caeb339c637542a71","ssdeep":"3072:V2zj5sgO9122z/K+e85vveMyRNntYYFkc0nZwYEkln:8OgOSZHFkc0n+Z4","tlshash":"5ee3fa90abd0a5ac67979fbbb32375c8f01a165e68004ccbd008fd547e93613f6e66b4","first_seen":"2026-08-23T15:43:24.040213Z","last_seen":"2026-08-23T15:43:24.040213Z","times_seen":1,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/roles","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.553Z","timestamp":1787499754553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/roles HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-36B4muWT5M7KkXKKy+hFrg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLceRfn0psuwHlzhNvSm4EVgKOadDLaDZIo88gS1v%2FIN%2F5vBYoaLUBah9aRUMxv9lPDM1pnwqV01fqzqjw58YT8Ts%2FX1CbJ36UhExotiaOlqrINUi3UUz0MSc5%2F7ooeh7Ec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a59f86ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":2484,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/servers","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.557Z","timestamp":1787499754557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/servers HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViCs3e%2Fia9V2QK929367BlhBjDw3%2FOb%2FrH1YX8aFgmz9jphtxI%2ByM6xsX3%2BteTWy5jbvppeOglVofMMIMeBdd%2B0Hd%2F%2FnUSnw7oqQK5ipmF%2BvOa2u6wO2dLwcUUZo8se%2Bz%2F4%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-gyWLIjB+yRSJkN1qdNNGdw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"112-krj2UUeMooi+5/kkKvQkockxXmQ\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a59f86bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":2679,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0a3911129641e5cc126d834b0b15936b","sha1":"92b8f651478ca288bee7f9242af424a1c9315e64","sha256":"033c57125fe10362c1674a5b630fa0c9e716c1f866feff43f456ed3c6a48e71f","sha512":"2d1e09352eeb04d0325c227d6831de9f9ba124ffb42f01febae6639dc8ec5e98ef77e59af5c4c45381b3c3bc42d95429f808a8371767b45db92aff1ad50f6875","ssdeep":"","tlshash":"b1d02bc4533f09eb75d5a36220a57d9d00ae300f9d4c0e5a590d8127842f90a4bc6c8a","first_seen":"2026-08-23T15:43:24.041724Z","last_seen":"2026-08-23T15:43:24.041724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/channels?serverId=1476772561583869959","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.892Z","timestamp":1787499754892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/channels?serverId=1476772561583869959 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-1kN1YvjZeyiBsLFa3oLbcw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"1456-1WlDCJbNBz/TXJFW92WhYtUEiAU\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYKmYvOccy%2B70G1%2FsEh6RUjzExOdJijmSWJDOJg%2FlPr8Qi6OTEmUzmQj%2BGII5E28AXicX2LE9kEV9MV%2Fgq%2FdDcy8fouoS9XoylXu2sGQJDCot%2BrcrTfwV2vxx5283Pfhpq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a5c08bdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5206,"size_decoded":3131,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b19d6cda622a346ca213f291ffc51de9","sha1":"d569430896cd073fd35c9156f765a162d5048805","sha256":"f650e2eb75b301eae19a8bea26cf0c67a49dc820e5a2edf29d8773630f93e4ec","sha512":"8ece738fbe23d22659cc0bb0d6ce8013ca632ad4f6147fa33d6e2ca1cd530f46a7b52095037bda4402038b296f09d427ab20c0b7675f4a76eef1f89082e7145e","ssdeep":"48:YrPzHve1qbaA9DH1IqbaMJLH1Iu6tfDbakfaCH1v1qbaSEdH1uqbaSkH1C1qba25:qPzb5vbXJ2VtfDbVadb7Cbjub/ybl2bl","tlshash":"4ab1ad5e0f5c8c7945c761532c89fe4a13ac632379409e68ecbacd2964fa7f25313562","first_seen":"2026-08-23T15:43:24.043177Z","last_seen":"2026-08-23T15:43:24.043177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev/server-icons/1476772561583869959-1786842780296.webp","fqdn":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev","domain":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.066Z","timestamp":1787499755066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 06:13:24 GMT","end":"Thu, 08 Oct 2026 06:13:23 GMT"},"fingerprint":{"sha1":"9E:70:B7:6B:96:72:95:41:61:05:15:79:D4:F7:88:F6:53:62:AC:03","sha256":"AA:28:EB:1B:47:E6:BD:08:ED:82:D4:4B:2A:E3:D7:05:D7:3F:1F:6F:B7:CD:3E:18:A0:34:23:E3:53:D4:CA:6A"}}},"request":{"raw":"GET /server-icons/1476772561583869959-1786842780296.webp HTTP/1.1\r\nHost: pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Aug 2026 15:42:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 912\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nETag: \"91e459cbceec1a87e29edfc71a9fcbfd\"\r\nLast-Modified: Sun, 16 Aug 2026 01:13:01 GMT\r\nServer: cloudflare\r\nCF-RAY: a2fb3a853cc856ab-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":912,"size_decoded":1251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"91e459cbceec1a87e29edfc71a9fcbfd","sha1":"5511445089e43612462a45e34f101a4893c647d7","sha256":"dc64c4f22e4c7c00f0a5f8a490b82ffea2e62314bf4f46dee3c6765a360e74e8","sha512":"06f3438d2c0fe1f99227ed47cca839340db0b0354432a57814ed311f4dfb2c6ace78bf20cccb623b41a30365145f3dbc8d5c50205729e9fc766342e097f4a688","ssdeep":"","tlshash":"431184355992aacce6586889024af3607308252caa9036d6e4ca70a0ab941a9a3f023d","first_seen":"2026-08-23T15:43:24.044644Z","last_seen":"2026-08-23T15:43:24.044644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6655,"timings":{"blocked":-1,"dns":9,"connect":3,"send":0,"wait":206,"receive":41,"ssl":6396},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/onboarding-checklist.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.387Z","timestamp":1787499753387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/onboarding-checklist.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-xivlGwHqvDAA9GOjmBI5tg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:07 GMT\r\netag: W/\"9269-1a02e9145c4\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCs1S8cD7J2W32WH2j%2Fzx6seleJyf%2BgS04sUn%2BlKaaCIVHkauBS8673UOf0zUiR0WHY6NV2Pbh0q0%2FO%2FDJv%2FgmKZdSO2BFRTii6Qrl1tZqqjwcHfG4bUvJ4s%2FR%2BjTuA42u8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8cc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37481,"size_decoded":13161,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37481), with no line terminators","md5":"a3f95c018ee1f26c18443486e393cb89","sha1":"12ed0fdcd5e468f599df58f5b47136c4fb65a668","sha256":"1335341e753ee3f5052ef29f7c9545327a7fec127c78eda3ee8a3c3fd6d090cc","sha512":"fd92c653c0316010667122576ea4e680e228a09f49e9a60a88df5c30cb759bf18721bfd058296dc482a594ba2de366f2ba60dc641f78c30cc8259cbee4371949","ssdeep":"768:L9QCRoPXzloBGoGeJQsfus2Mx3VKDEJ/dyXPZzmMQiJKagcDiJKWXJMdWYstD:L9Ol1Vs2Mx3VKWVyXRztJpGJK6","tlshash":"c8f2a7406a80e7be72938b77b732f2f9e1260b0681018bc9d5c5e9425d95167df6f2b0","first_seen":"2026-08-23T15:43:24.04619Z","last_seen":"2026-08-23T15:43:24.04619Z","times_seen":1,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/settings-search.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.968Z","timestamp":1787499753968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/settings-search.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-0kyZ6T51ERjSIVyXfEl3JQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"3518-1a02e91d3ea\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBMgPSFe2JsOpYUObpk0ogJtYtx1l7UopPcIUVhNAdH7cAsDly8caoYL%2BEVxrlN5H4xr5ylDPYNIHuNJZmrC%2FhrZHXF8sFFHsC%2BxukswM8OOqEgyJk19yjtBx5UjI%2B3gWug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a564fe0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13592,"size_decoded":7168,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13592), with no line terminators","md5":"1382f7179a526794751cc437317c7723","sha1":"bb0830e14c6f2898363c19ac08fe6bc62da749a8","sha256":"ed7d51373150df7b5d684516010735bda73c031734e81839551c378041929c34","sha512":"07523e90befbbea1cda0f519d1ea325f164273453c6146466dd32a30d68863cf0f19f44aac6a8cb5e81383c017085a8b7ebd8bdfcae6eb2496471c76e40533d0","ssdeep":"384:pw5JfZgw0jDKcT6GthL1wH/CFZLaBgngDmMpNLxWcZ6oZ:pw5JOw03KcT6IhL1wH/OaBgngDzpNM/K","tlshash":"3e5294853ac025b553876fbb3727fcd4e0291c5e388446c7c5007c986ea3a1afaf6979","first_seen":"2026-08-23T15:43:24.047663Z","last_seen":"2026-08-23T15:43:24.047663Z","times_seen":1,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/channels/1538347168400674898/messages?limit=50","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.191Z","timestamp":1787499755191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/channels/1538347168400674898/messages?limit=50 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-NGGnNKnvqh2TSSPlFMzhbA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"1ae1-cQObRc9ZjnTU3MweY3CMKXVo5XI\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNmef0FlKG3bxCMOU%2FRqrL1IRV%2FnDItaudGkgKt83vKBw3x8eTTlJaLnMGHE7hWkpqEqz6jS66tg7OpMU6bKJPtOxkXcRiSa3YDXFO7exIR%2Fil0X7eQcHBiXEtix11CJjgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a5de95ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6881,"size_decoded":5132,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a8dcba08cd9fc9be6d18a766b1219e07","sha1":"71039b45cf598e74d4dccc1e63708c297568e572","sha256":"8e6d8f5ec8a5bc577d38bee1bc047756ed67d0c25523001477c815490b1a9e1c","sha512":"78d7109926564d0772ad874d156fae8084ab18755bf436e9845b862aef9182e809777b8a209462863ae9cd827957be44fe2b90c8767c060d79c3697abe2dbfec","ssdeep":"192:3W7CgElzA0z+AK5gejtzq0a/qCmt72DuHmxKwKmKJz6L4zN4x:m7mldlADjtjjNmkj6Mmx","tlshash":"e4e1fa6bdb1316beeac70251348c37e2df2d86356241e5709cbe495e3363017b1b64d1","first_seen":"2026-08-23T15:43:24.049178Z","last_seen":"2026-08-23T15:43:24.049178Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev/plan-icons/product-744001022980005888-1786842873555.webp","fqdn":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev","domain":"pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.678Z","timestamp":1787499755678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Jul 2026 06:13:24 GMT","end":"Thu, 08 Oct 2026 06:13:23 GMT"},"fingerprint":{"sha1":"9E:70:B7:6B:96:72:95:41:61:05:15:79:D4:F7:88:F6:53:62:AC:03","sha256":"AA:28:EB:1B:47:E6:BD:08:ED:82:D4:4B:2A:E3:D7:05:D7:3F:1F:6F:B7:CD:3E:18:A0:34:23:E3:53:D4:CA:6A"}}},"request":{"raw":"GET /plan-icons/product-744001022980005888-1786842873555.webp HTTP/1.1\r\nHost: pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Aug 2026 15:42:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1232\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000, immutable\r\nETag: \"a5c06151ece27b0f24ac3376c9e53744\"\r\nLast-Modified: Sun, 16 Aug 2026 01:14:34 GMT\r\nServer: cloudflare\r\nCF-RAY: a2fb3a61191ac272-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":1572,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5c06151ece27b0f24ac3376c9e53744","sha1":"2bee6809f300cc0c14d714e3770e07f88b475544","sha256":"220750d52984dbe95ada28926debbabe131552d2edb85a41c269c1f90fee7cfb","sha512":"cda17be5feb25995742063385812533e03cc15bd2b60924bdc0a4946a3067a2243d384161ec4386f7204a4f5b6d01553ed808958cdffc09e6bdc9adcb683046b","ssdeep":"","tlshash":"e6211a1cecb3e6ea89505bab303d4768a39688401a03cac88c28317397442c0d2892f3","first_seen":"2026-08-23T15:43:24.050655Z","last_seen":"2026-08-23T15:43:24.050655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":644,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/version?lastUpdate=0","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.216Z","timestamp":1787499751216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/version?lastUpdate=0 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLYUCAgoGAqV9CKgcRKUhj%2BjphMlgcdkBR3DDF%2FUa1azV2Ci75Ge5CEYrPxZXKlAKtiqH5OAWOZZfbUkxnQXlt6aoMtAIBrLe6lS8qlMyQwjfXG6xvDR90C36vjsUc853%2Bo%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-ve5rg2W/bytHWQO5L5Qpbg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"65-ptKDAiXjsQ+xRl4EHODQFVxZ5KE\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a2fb3a451d7ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101,"size_decoded":2610,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a24032e87a940a60fb50e75fcf828c02","sha1":"a6d2830225e3b10fb1465e041ce0d0155c59e4a1","sha256":"54a9627378a8ad0cb70e1780eda88f7ed346e088c32ce7414fc0f3adac01f9f6","sha512":"c9409a280b025662ebbda15744ee360c6543a66283263ef385582da3520fbd72764e8bb5d393085d1ac6988d5071a729441baf164dbce445a8b7f9d6b8b4c813","ssdeep":"","tlshash":"e6b00246190099e7248a53dcd05169c1435cd70fbd0ed4564543ef441aa955d3d2d412","first_seen":"2026-08-23T15:43:24.052003Z","last_seen":"2026-08-23T15:43:24.052003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/channel-rendering.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.381Z","timestamp":1787499753381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/channel-rendering.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-RMg+UwOd303aqXNtGy8l6w=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:04 GMT\r\netag: W/\"12319-1a02e9138e0\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzOxbo7WLZ2ROglIXRGrvQMvk9wd5bwEYv3sguwxCM2cEdooIG9GqkcyL6XHiMCyBlrCcMPSQGROdr8VtjO9QliVmlcZvNQ4uMa7S7PnQGsMj5pCE1jUVBmnrzFLUWmwdfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f87c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74521,"size_decoded":21976,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c8fe84a8cc7b76a43f7d002fe1c92144","sha1":"975359c8046f7399dc072766f7f57a0f3071c1fd","sha256":"38430daa530877025cdc1470d7714c4780a24713dfc014ab075528551d06df16","sha512":"e35d1d5f440d8b9fce9d851e2eb5e0631cd5eb13af289705cdfd53df01efef7288002ffa1ec8bcb48993e1126ffe0e71d4412b6a4b4ad20d0ef0c1a21e4def63","ssdeep":"1536:p0p3lj1iiPGwLoUBEWzYNop1ZLwdrtLgvFV+lqD3F5Kt0SnmkOQc5ZgsFTbjbxYa:pnEF5Kt0SnmkbsJ7ge7","tlshash":"7473d8c0e584d29c27825ff7b763a5c8e42a1a8af94155dbc00dfc187ea3503eade974","first_seen":"2026-08-23T15:43:24.053529Z","last_seen":"2026-08-23T15:43:24.053529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/proxy/image?url=https%3A%2F%2Fpub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev%2Fserver-icons%2F1476772561583869959-1786841680420.webp","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.356Z","timestamp":1787499755356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/proxy/image?url=https%3A%2F%2Fpub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev%2Fserver-icons%2F1476772561583869959-1786841680420.webp HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 502 \r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a2fb3a5ef97ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6408\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6408,"size_decoded":6859,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"65609749ebd76a68754b92297813cf64","sha1":"6d522881df195f7a2fbbcf198a5e421697306dc7","sha256":"782f7b7622fe795ba6fb15bbaac84cbfe269c6ae20688f451a928358851021e3","sha512":"d2d36742e072b09ee590e1b693fa2a618a935df4b43fdc3d79111cbfb52c1e4d791a1f15f2ce3521efdbaafa2b078cd9d297bb26378b25398dd81f69893bb47a","ssdeep":"96:1j9jwIjYj95DK/D9KUnqcSG4Fh8/G4FL5D424Fb+skKmtmniN7RJlVaQxP:1j9jhjYj9dK/BrCe/0pVMnN7vlgeP","tlshash":"61d16371b1f512b610a382937595fb1a79e0c613cbef4484b3dcc2732f9ee82a903295","first_seen":"2026-08-23T15:43:24.054916Z","last_seen":"2026-08-23T15:43:24.054916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/utils/settings-change-tracker.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.708Z","timestamp":1787499752708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/utils/settings-change-tracker.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-eIkDSPgM2jvffHypNJlnyg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:44 GMT\r\netag: W/\"1f36-1a02e91d3c0\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJH%2FdYGeyKW1QNFI7RZ%2BU5eYxJy5Knu07sEbam7TVuRqE%2FMKIiCWAvkDe0hasGfS5%2BnOp8u7JM%2FJwSqa9SxGNMVw%2F6UMZWGv%2FqHT1iXSI5Ek7CHcdKD3EZnnRMz0ENnsa1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e6ed6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7990,"size_decoded":5215,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7990), with no line terminators","md5":"31e47d915059d3bc6922cfb0997354dd","sha1":"74633fa50b4d751f6d8b458089aa1290ebc15137","sha256":"1edce3375738d80b634353e3b35e34d7af51b398c53b785f390b3b3f699ddbb1","sha512":"f90ee716afb4d0cb7cbcbb265d552a3f74000235d7ef9a34666c7ba3fa8c70d115d6272b7978e91d96bd7722fc2424c2bcd9edf557891673e58179ec66781d4e","ssdeep":"192:sNN1kxMIRiWmOhbFayzgc6TEpZprYYzbbwu1fKsk76KlPpNfNoVrxYagK:sNNexMIRRmOdoyG+pr/wu1isk76UPpVw","tlshash":"25f1322596d11f60738bdffb632325e4d11d0c8db4588887b16c3c683aa5a0ee1ead74","first_seen":"2026-08-23T15:43:24.056719Z","last_seen":"2026-08-23T15:43:24.056719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/application-channel.css?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.937Z","timestamp":1787499750937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/application-channel.css?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-zo9CFwuTTKjpxivCLEvHVA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF9hLJhX6VG3sdvKFV8Y1XdnPU1PLbzZ%2Fr54RW%2BKx2u5jJ3tt2wL1BVp0A1%2FuCtKS0xvM4vohORzAHnoCla87AFhv73qlrfsmdG8BYfABHoxd651BIqso7gBOjYBdlEeKEc%3D\"}]}\r\nlast-modified: Sun, 23 Aug 2026 12:21:49 GMT\r\netag: W/\"1f6-1a02e91e87a\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a435cb2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502,"size_decoded":2851,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (502), with no line terminators","md5":"d4a6b91de1df4ca045bd25407db065a8","sha1":"9d57dbde73fa58e7c5923155f0ecbbc7681a9707","sha256":"d050c2f10f419045661ede14ec1cdf89c3fbcb37bbc4dd8105b32ec00f0df411","sha512":"c980fc65352a7a00a35a3cd671f53d3184c70b2d3b1329e289ac4b3da9159a4d157d589f8f1b8cdbf36bb3ec0747381ae182bbbc4c3facb2df6495d1d50115a8","ssdeep":"","tlshash":"aff050f3869e41f95233f03e9682a69dc27ee65dad800724662cb8904f5f10654138c4","first_seen":"2026-08-23T15:43:24.058285Z","last_seen":"2026-08-23T15:43:24.058285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/theme/launch-app-generator-desktop.png","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:30.955Z","timestamp":1787499750955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /theme/launch-app-generator-desktop.png HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-shBTTD1jiTHVe889/4X6uA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, public, immutable\r\nlast-modified: Thu, 13 Aug 2026 19:52:35 GMT\r\netag: W/\"9cf85-19ffcaf0271\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax\r\nexpires: Mon, 23 Aug 2027 15:42:31 GMT\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7CrhTbWUj%2Ba6OHu%2B3lHyLIGPvaf7QYXFfW2Ww%2FZN0hrjNHFELLjIPbLgVVb5h%2F4VL5yLfBR%2F%2FpAJYcbR3zUkdzeTGmyxZUN3Ahy73vn0KZeoV3iwcZvvEbv7B1pwhvko724%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a437cc1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 642949\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:31Z","raw_expires":"Mon, 23 Aug 2027 15:42:31 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:31 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642949,"size_decoded":645465,"mime_type":"image/png","magic":"PNG image data, 1688 x 921, 8-bit/color RGBA, non-interlaced","md5":"c1f711b4bbf782063179cac3a9b9052a","sha1":"bbce4c414c394e714ff559d6e09bd32adc737e3b","sha256":"c2a252f3682c8be64965f63dac5586127f7cfa22af8003d09169034ff4ef7b7a","sha512":"2b07fb4223f41cf703058f581596ff10596df49ec5cfa577dad6eb68d7584ba1d3ebc8611ac61ac4ad397d511b8d1559957e43cf9d86a37532b93622073c1ba3","ssdeep":"12288:uFyYMWNmNJ/BDLk5EE/2ZPWgCGw9jXKAPVI/R8MPlZKOIEafBaCRl4uTXvRkw3N8:LYMWN46/2AGwp6APV4FPCO+fka6wCw32","tlshash":"e3d423f46ef3db981fd2b22ee4076b24662c311b369692f150d2d54b80e1daac64f14f","first_seen":"2026-08-23T15:43:24.059736Z","last_seen":"2026-08-23T15:43:24.059736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/he/pwa-icon/inst-he-1786842729427.png?size=192","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.285Z","timestamp":1787499752285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/he/pwa-icon/inst-he-1786842729427.png?size=192 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-5ubXtms5tyR5PQtGbl63wQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: \"inst-he-1786842729427.png\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTuM%2FPnAGS751ST3jdwOolENQgVqMufRZHdjNYXeiVcXnpcIOpFhFw4%2BThnVHZF%2FN%2B4CmtL%2Bn%2FaqybvZdyu8RPDDXIzg1BqGv4VjVSSAroL5QaFPepE8XF1CANFIFzG1%2B1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2fb3a4bce67c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10885\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10885,"size_decoded":13206,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"df6a74d821e7aa6d52cc10f293e4028e","sha1":"1d3c3f28da553a00304397acb464c2fc0b574312","sha256":"1aa1e3098b816e9f320e71749defe6b46f0e41845c9ac0de1ead8d239c34b8c9","sha512":"d4c00fe9bc03429649233181cdd7d9b6c72c3c8d16ed3c6467ecb559189372052d87b2c40d4a2d5194a942e20f6c47488e144d0d70d17b495f4ccf96637d28c8","ssdeep":"192:Xo3BxCmY2a5lOU6mWH74opSpM6kYXuRdBcSjr19FlaaG2D9HrSxS/ec7Wen+wpW:ME2Agb7pT6kkuRncSlfpVZHrSA/l7ni","tlshash":"e922bf284acff290d95b39d65711f3d387f5ea687f30a13a4b0da7648c3186b5a106ac","first_seen":"2026-08-23T15:43:24.06152Z","last_seen":"2026-08-23T15:43:24.06152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/storage.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.487Z","timestamp":1787499752487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/core/storage.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Qhqg6Ieli/hW8diVxRADYQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"3876-1a02e91312a\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xvV8hhF6WwIaR6%2BzcDG4F1xgFRjy9Cn02Vs1sNu6nk4rij1pzraSVIVKiT%2BLTnA0rFMw9d0Zj9qh3SBZCiOAkA6xPneyP2bCzfeNZgxCq6ulAqGitmkfLX%2By7UbvvYx0qs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4d0e8ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14454,"size_decoded":7227,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14454), with no line terminators","md5":"102107dbfe9b53761908ea8be9545506","sha1":"c596ad94dac1bca7ac0a67c4ae4e611ddee81df5","sha256":"23384b0f42531542fe1576ffed5ea3c7ffd0a753f9d56186ffcdb66f06d2b961","sha512":"6fa62da53c20e2aba8f94a98b0fbd7ca2fa7f598b6038d45dc2dc344b9b3533bd03ba97226a02a3c650e1ef239ad5c851ba6a93373d74c47b692d01a421cc3fc","ssdeep":"384:AGSxLK5EuQT3W99pP5IfhStQ9lJx/WhTaGrLDAqNkuWzJQ1j:IK5EuQSHpP5Iwtsl3B6DAqNkuWzJi","tlshash":"8452d7b1be605f2d1f690dffbb12b944d1a30e4e35809043e499ad06b9c2a17d3f16b9","first_seen":"2026-08-23T15:43:24.063111Z","last_seen":"2026-08-23T15:43:24.063111Z","times_seen":1,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/context-menus.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.386Z","timestamp":1787499753386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/context-menus.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-N0d/Fru0ZoPe4ya7kB5SOg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:04 GMT\r\netag: W/\"1b5d6-1a02e913ae3\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUvSO67YT0Lt34PjDFB2ceyGEV2D8G%2BkkRtpn%2Bj3Arofky5Jddo%2Fi7PELjiax3OEeJhbqCBjkg6JhPXyy54HtSxdLUlI51YSuuqviB9i2cgGptKqNNyGnysMprnm38OgZk8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112086,"size_decoded":29528,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b7d89313f002d7ec5fb08432aceb8a88","sha1":"d54bef3c58a4c87189b0de7198b20ed085ebfee3","sha256":"9fb03ce6b0a8324cb246e9b84da0194ebeacb345f012eef40b0240bed1a5528a","sha512":"a33ea955c672479b88dfa26ba55964761086b05a6ec4e0f281e7e9c67d61672ad83ac0364a02549b4c138837b9409ce6a833f7a89feb8546200c79c81306aebf","ssdeep":"3072:tQgrsERnvn255unu9yOwB/uS0hy0vUmH03QsuJI8I6vr:JrsERP255u5Q/JI8I6vr","tlshash":"1ab3d8526be1bea56bc7afb7b213b5c4f52a191a3901a447c00e3c6479f7153e2f2072","first_seen":"2026-08-23T15:43:24.064708Z","last_seen":"2026-08-23T15:43:24.064708Z","times_seen":1,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/typing-indicators.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.051Z","timestamp":1787499754051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/typing-indicators.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Dh4GZ0tTIpncH9ukDhBQRA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"1f62-1a02e91496a\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=724ImGPd1qN8zhqyYmYyat1wXxORxAxBcr%2BHS1EOyLzWw8k7ZG1aiITWsD%2B70PlxZ39eaqr0wACbcdfWuzSleiAo03WvbbJnTeSR%2FLffodN4yduuNUQ4M7HaovjofuiBjxg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56cfedc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8034,"size_decoded":5276,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8022), with no line terminators","md5":"b4567d2823a9987601366d1c7d3e6419","sha1":"64d7455078887d4df3e6f88d148f61017f822b75","sha256":"1f87508b7d98ab303de78aa341142520d6db584e422699c15e962ed615d4412f","sha512":"43558abb7a719a69f085938a07cb945853f06305221bfa1c65b366f33f112a6691c471578eb1794953df5bd452fb2afee5072aef80f040b0f52ff0f831dd388c","ssdeep":"192:iHfTeyXYBnupl6GjEf4N9ypL+yqc2fppuQF79F4dlJTfIjED:i/TeyXYBMlbE09NppVn4dDLIjED","tlshash":"08f15593ead076eeb2635fe364376084d94a1b263404abc9e064fc18bdf2557d2de630","first_seen":"2026-08-23T15:43:24.066354Z","last_seen":"2026-08-23T15:43:24.066354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/messages.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.370Z","timestamp":1787499753370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/messages.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-lVCQFLe8z6tc3O8X+BWSeg=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:07 GMT\r\netag: W/\"3a3d2-1a02e914429\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTjGFg61fWa7t%2BiLQhV1pISQot%2B671w8gmENY72YpTgYDAW04ceYaI%2BeBtL7%2B841vylEF3L7DTO7ZiHaI23ZuNnLD3lWgv5ix%2BlvBHNaJ6YRwaDTXW4t5bOi78H6FUhiYkI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a528f7ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238546,"size_decoded":65577,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65525), with no line terminators","md5":"d4e3e4369885f82f2da2c614fdc59e92","sha1":"287d7d1da4bb849658871801ef2f11b6c80caa3f","sha256":"097c2fb375ba17a2ac04b4fb7b84be56c31646fb29a1e8f19f4f048fae65972e","sha512":"04771e0ba71048fa2e05a6bc8262ecc906b26dc3464fa64539c51311b44e70c363141f172dcf0e2e6a8cb3f1d92fe857a5506506a9ce2bd610c7ed3fb57356ed","ssdeep":"6144:nRJLOSznOSbXTMxXtEbaK/Sbm8rdWBpuga4yFV9+:RJLO4nOSbXTMxXtEbavbhdWBp+4yX9+","tlshash":"5734c55077c029ad678b5fbbb313bad5e059099e79409c8bc10dbd587ae2213faf0631","first_seen":"2026-08-23T15:43:24.067831Z","last_seen":"2026-08-23T15:43:24.067831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/reactions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.385Z","timestamp":1787499753385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/reactions.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-r4MrwONQFJgpeIEmenzw2Q=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:08 GMT\r\netag: W/\"1b96c-1a02e914755\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHuWoX6bqSMCK2cdHK%2BTGgn0F8pgqxzb86%2FIQgqG0b5iIvV6dMRfwiKhoaqJpxXncmHymB3w2iV7o61m1LPt3Ul0%2F7UdiSPRZdkq%2FO7%2B19SXXES2bYIoEDOl88EDeXulOEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113004,"size_decoded":29775,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65397), with no line terminators","md5":"4742b0572f3531ade5ce8ea534c02992","sha1":"94b2f2d2bf5fb06f91569d9c85d049b7d5673601","sha256":"6d4b8afe04e1d5d4309db3a0152e1edc3fd0e5564c9ae5076fe66b5aefc35080","sha512":"73e80153e9a1ac6d3f242f9f1a6e3acb4f4a679fd1b94964e6c1f70b2a8b0f3c51fef0effe32f89842413dda6b4682c3e360fb1c8130818b47921c7ed22b546e","ssdeep":"1536:1yLhpdIYYiS88Hcz8p7Gqc6rWj8+NVT10y/SLPG4aoKQxRAp:1yRIYY588Hcz8p7Gqc6r6VT14fpAp","tlshash":"a0b3d5a0ba80e77d3643ce7ba73796cce019031576818b9ad189fc5c2bda54bdadd130","first_seen":"2026-08-23T15:43:24.069518Z","last_seen":"2026-08-23T15:43:24.069518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/automod.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.063Z","timestamp":1787499754063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/automod.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-DQe936tu5zPDvdQuQoiwRQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:03 GMT\r\netag: W/\"173c2-1a02e913704\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dVmcEPeXGXmmvBjznMz6qDWNqXop%2BjQZUfokdYo%2FigSYCnWSH2c3njiXC0XQsKt4AtvM%2FlHYsOVfAHTSeh16KN8OcV3kYyGdsob9j%2FFlFvBVqh%2BUdiGo%2BTJ%2FfL19tys6WU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56eff7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95170,"size_decoded":22523,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"0f223dcc5ae52f2598c6329b2ddcee81","sha1":"0ca10cc9ed4c7f112a2f58a4ba5d833203b8168f","sha256":"9c5b13cd6bce7e233a3c16d1ec4fdfbf8405785eb6be2dfc5d33ff9e6205e5cb","sha512":"8829f57fef498e2f84950de8175a2d54ccc62b15b831b376a92ac26571adf662781954e144e8db11b0de885f7372d7a405881df21c82c2ebcc68cca924a0fa52","ssdeep":"768:EzC49dbeHU7S90iaj0hvc/dfpvsjThr62GQv5FE0t/aakqcyVSWWSFktB6ybqFbx:B0zdabVSBRuRFf2bCT9zwNfvBxM","tlshash":"6d93c691ae90d6fc7247ceb7ab36b4cce1120b4af1804bd5818ced2879ca503e5ed5b5","first_seen":"2026-08-23T15:43:24.071105Z","last_seen":"2026-08-23T15:43:24.071105Z","times_seen":1,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/me","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.416Z","timestamp":1787499754416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /me HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qN6inKOMxDFqH5wIHniW19ZyOzxQJE%2FfUbN3iJGdo3cSbJuYkPpFfHMtnpl5jyKnCDN2fN7sDgucryofVUINVJFGTXt8GfZnpYkEHxAbFiHh1AiEmIMixhRnwh9flQ8C6VU%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-k2rH8Sy6UW5r4fCeiXTl6w=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\nratelimit-policy: 300;w=60\r\nratelimit-limit: 300\r\nratelimit-remaining: 299\r\nratelimit-reset: 60\r\ncache-control: no-store, no-cache, must-revalidate, private\r\npragma: no-cache\r\nexpires: 0\r\netag: W/\"15a-xREXYNC+IUrcJBSlX2iFh5W5YT4\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a591841c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346,"size_decoded":2834,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"20d8b29d710de9fbcd038db1fe22be82","sha1":"c5111760d0be214adc2414a55f68858795b9613e","sha256":"d51f2bce77a153f423c1b98694c70a128647590a2801b45d7db847a6b4a39685","sha512":"682bdfe70bca51ca1021f6fc860c80f316f97b6917dc31819fadd12b366a077f41a96767d33c0ba434d5d71bf422daed9a824100814e2e4ed527977bf07f3277","ssdeep":"","tlshash":"0ce0264c49fe48ad753621cac1aa795b775e3033a8413c49e97dc91030eb1a5eb7684b","first_seen":"2026-08-23T15:43:24.072464Z","last_seen":"2026-08-23T15:43:24.072464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499754549","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.551Z","timestamp":1787499754551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instances/inst-he-1772068506351/members?limit=200\u0026keyset=1\u0026_=1787499754549 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-9vYOq1pFWAi63Z1qmzSQ3A=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PF0YjwR9i%2B6scAd7y5pLM9UdwkJgniZQGwHQPL%2FZ%2FcBoN0%2FfIQntsI%2F9TK1XYmm%2BM5%2BrXyl1Y34VKKT6OcLqNVReV41asOJEdvAJldjFgh3QtZAHwl28xl57TjysVBjis8o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a59e869c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":2490,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/categories?serverId=1476772561583869959","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.016Z","timestamp":1787499755016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/categories?serverId=1476772561583869959 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gH7%2BcnYQGNgO0l7eiQwJdn%2BPfwJa65V0MThHUeyU9aWeooiYmRKgfb7bFgYL6ZByk7mgMdqnQ%2Bw685mr8mrzWLmBaxDOmuu2YqmLeEEVna3CHbArk6cFikcQHvCEjOHDZc%3D\"}]}\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-7F7u5Y6s7NjNeHqBbWXe3Q=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23f-i1gM+a0KuyaBBvXu4k06lMXEb0Q\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5cd928c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":575,"size_decoded":2685,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f701b767ef75306b78520ea8ac2f8ac9","sha1":"8b580cf9ad0abb268106f5eee24d3a94c5c46f44","sha256":"d3de69d9782280870488b7cb9104366b2a3487cd03b6f512fea30269bce0d221","sha512":"c03cf79c9d2e4f03b4170a6332b67e4a94f43c26d642337d3f336a39a6a44dbd882f7e71f524bd4e1851ddb4075b602ccf7ac0fd86fe4c48e3dfb7aaead119d5","ssdeep":"","tlshash":"e3f0ebe9b62c84f9a9cdf393048b8e885399320a6c2a413d6e42051f98cb82406c8ce3","first_seen":"2026-08-23T15:43:24.073983Z","last_seen":"2026-08-23T15:43:24.073983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/apply/status","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:31.846Z","timestamp":1787499751846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/apply/status HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-Yqzfa4PZ++kMTahhiSuERw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"15-bm7tJgu8FHlq5QU+Y6gDxOGPfRc\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RrgwHpdilwAKyUcjv2xETmzkdeIaus0OsG8GmRFaW1uTFbxpPSunfl3dYxVD4IcXF8qME3PwATp%2Fp2EVzi%2B1wnQLBVUnHfsRqh6Y%2Fq4uchpIsndTEvzQfFaKlZ1SPCZ2Oc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a490e11c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":2468,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2efae0e06cfdc3eacc743546ff595d74","sha1":"6e6eed260bbc14796ae5053e63a803c4e18f7d17","sha256":"c8d3eae160a892e32837db3dcae515e843e5383fef52b8141940c8bcf8b6d59f","sha512":"0041d86cee0352b6e8af8e9755fbe8ad6db1912b7bc2efd53d19ff60ce8f79a69bbac9bc2bbac25d9fa6d9e9e48d8bcc241fe04776c23c13ba5a2b2896643572","ssdeep":"","tlshash":"c57000082082020e0002e0e0088c283000880a8008308c2000008008800008f8800088","first_seen":"2023-05-16T10:31:07Z","last_seen":"2026-08-23T15:43:24.075319Z","times_seen":985,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/permissions.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.700Z","timestamp":1787499752700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/core/permissions.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-VSJQ4OqiBwMpPu1bSz+7fQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"2491-1a02e9130df\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xIvWUazbaHd0x81ItFgKhPU%2FyvYJR%2BQ0gb0OQU5aGqO9YLoEdreK%2FNAsU2jYLWTETnnvFRRL4q%2Fll%2FnUQGPUnNi8gU5gvW8crex%2Bxs171bPJeFWv%2BXAQ3T6TX0%2Bskz4EBw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5ecfc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9361,"size_decoded":5723,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9361), with no line terminators","md5":"2a232e7640d420c5f747090a410178c2","sha1":"5027ec3dcf56831da225216333171a6d31771c3f","sha256":"ea13fca0054fb874c3f65f7164279156fd1e6ea78df9345b1c37be8d2d889549","sha512":"fd75e395f74325ba1c92c0f25f44572e927d3b0815d33808ab439969f12b61e25e793056a0ed297bfc308ba2f0fde21181d9f99ad4560efbb2540409b135c7be","ssdeep":"192:n89kX3Yd/QW61WGWXW1qTv8WrWuWvWCWtWOWnW2wNWQMPeJNSBGEJ+UevJ4AFxTY:n89kX3qIj11GlTv8iBwBKraVwNXMPrdF","tlshash":"ca1265586fc02ba45742bdd3b317f0e1e92f7a9ab499464ee3167d083ca2a03db61531","first_seen":"2026-08-23T15:43:24.076021Z","last_seen":"2026-08-23T15:43:24.076021Z","times_seen":1,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/features/push-notifications.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.378Z","timestamp":1787499753378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/features/push-notifications.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-UQtOTjfwbVUqVbLIgxUvgQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:07 GMT\r\netag: W/\"ad91-1a02e91464c\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aV2%2B26ElZpJeSg1eUMf6vw%2Fqjb84muJ1a8u9PWU0LmuqcGXfabhVIFdgaGSVjDK2g%2BU7o%2F5qoHYM5hUN9lbu%2Fvj9fD6sF1fHGB1oPYnaMn2pH36tpXB3XbPsXRYE89DLbDo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a529f84c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44433,"size_decoded":15710,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44391), with no line terminators","md5":"8d446fdbf097cc3aece7d5527566b282","sha1":"c222f0e3b9dc0344570d53145c6bda3994052f24","sha256":"b0846292859c1f3facf653d1ccc912a164e33b14ff179529961d603594d42b1b","sha512":"448d797631724454a4de095689525d72c5556384662e76f29ab51f36d969387d65910c03e43b3c0bcbcad09e7bf1376d2d31c9e400d47c264a237352f6882dc2","ssdeep":"768:6XQpcsUvq16WYFIVBUFuV3AHfSI2+ekvSDEj+U+M0kyRah9JK9oVvB3fxkMpvUT1:gHqUKTU+uI9Gv2","tlshash":"6113d8917ee0a3bc37838d77ba27b6dcd023056ab94848cbd209bd182e91617dbd3534","first_seen":"2026-08-23T15:43:24.077508Z","last_seen":"2026-08-23T15:43:24.077508Z","times_seen":1,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/mobile-navigation.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:33.390Z","timestamp":1787499753390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/mobile-navigation.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-bcF1B6jqK7sFof+WDwu5Xw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:33 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:40 GMT\r\netag: W/\"1a45d-1a02e91c50c\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKMgBcQ0%2FUa3eNKj5UmQTMk9YFvKfCNOJOMZWAkL3hB3R7kruGM7twGImlC7dUr7Q0%2FxXYO%2F8hzpXrMt0wmEbdD9AMcMFGz965WSFkHM1h9IUBO3eY4kNuy4fFUwUjlEj0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a52af8ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:33Z","raw_expires":"Mon, 23 Aug 2027 15:42:33 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:33 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107613,"size_decoded":30368,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"70a82b45e31f048ab0a871e07c99734c","sha1":"5124a2acbe1897bb600f98d6862b69871b25d060","sha256":"809521e38c2f20cfab9a03aa85c330c9c9e37549a5aeb568c6a9cdc1ed47f2f7","sha512":"7a04bf7bad2f0e7de3dc75f1e4cb2fff235c527b886b9d5e31fa01cc926e635671e222d14b9ba5e006d9a631e6e5a7910b54e50cabe1388d8e65747e01f127a0","ssdeep":"1536:CQ8bDz5Ni//p3fYSWlILd31TIEJwSDgOdY5UDbp3Vi4BTLAMLy1+8YUv664bTz7V:W1eKxyVBBnLTgLzJKEr1pSWep","tlshash":"0cb3a6916bd01aad278b9ffbb32375d4f429089e3980945bc1097c1c7a93617faf25b0","first_seen":"2026-08-23T15:43:24.079204Z","last_seen":"2026-08-23T15:43:24.079204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/platform/settings-modals.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.057Z","timestamp":1787499754057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/platform/settings-modals.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-moVCEreXSeyE4PVYaNPOHA=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:34 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:43 GMT\r\netag: W/\"daf2f-1a02e91d10e\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rz4v1HUK04PYDGcOmqhSt%2B8VfVgq1YgZl2%2BkceYCbCWU%2FkH8Vd3QBCzEiw5pFmuYSh4qRmvhEueFniKHH4SyB5PFbldm4ZalFJm0Bg6KBSpJhVDmCJ7KjotWX7enis9U4rI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a56dff2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":896815,"size_decoded":217692,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84f99e3b3feb5b934e49807cbf2c1b3f","sha1":"90017647d35ed05793c9345e442f19ad5d01f7bb","sha256":"625a5e8c2a7fbfa7fcb4c4797c8ad7fdeb933e1094acfcef59c979c6315bcf93","sha512":"f2c701cf30e4fb13bd3960e8f55f0942df825ab2fb1894517c91aafbe327924292fa6d619f7660eea5c4bcc1b248b8b1f501d0b64a66b08a2dfd4e6ce0939f70","ssdeep":"24576:9JpVMgpW4JAW+U/l1lzGRAr4oTZw3v2pEi0CFhZRkycUS0dy13hXjVtc5yFhfvin:9JpVMgpW4JAW+U/l1lzGRAr4oTZw3v2P","tlshash":"c615f95066d09aad33875ff7b73bb6d8e0060b4ab9408e96d15cfc28b692603f5ed170","first_seen":"2026-08-23T15:43:24.080539Z","last_seen":"2026-08-23T15:43:24.080539Z","times_seen":1,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/servers/1476772561583869959/unread","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.691Z","timestamp":1787499754691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/servers/1476772561583869959/unread HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-464V9c5TZO72Wm7Mv0Mv8g=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fE9ZGCYiQz51NqKcwgdadcZebNaAYACwJnGgcYUoqn%2FYcRTIO5DpCn5yQ7P14254NFG2Z%2BCBKGZdaZeUY6vaGPAxdZnJYYit9sPfRIBusubRGmtjXUrBw6OoPD7FQbdCsqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5ac88bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":2480,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instances/inst-he-1772068506351/support/unread","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:34.875Z","timestamp":1787499754875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instances/inst-he-1772068506351/support/unread HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Instance-Slug: he\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\ncache-control: no-store\r\nvary: Cookie, Accept-Encoding\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-tMk2a8TCEXCzp4MCiWoNtQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\netag: W/\"23-5acMW0iwqotvKDNixkkFKwa08HY\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwefRmBF7A%2BFCzab1h17rhRVU885ZJVBFWfJL0s7HrCfRLVMR6oc7exlkoRKqqF0iB%2FS53lR0ve6nQRkFlHb%2FK6UZbdhutvWdsZYdFUUXDMN%2BLGjNcnpljlj4V62s0vgxQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb3a5bf8bbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:34Z","raw_expires":"Mon, 23 Aug 2027 15:42:34 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:34 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35,"size_decoded":2484,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a5819a4d2c6fc4598e3cfc18aff96a4","sha1":"e5a70c5b48b0aa8b6f283362c649052b06b4f076","sha256":"ca730ec7fc2b7edb7277e5b8e58d6a474971ca59dafb499141a4856c06132638","sha512":"16156283f8e4bc34b60f95c8f62faa68b62840a8e845004dfc3db81e6dc339d70cf8e6effa4bcf3700b717f4124d9210711d5121fb37dec81cbbe66add893426","ssdeep":"","tlshash":"eb8004c743c4140f55430151450105400353d47405510c00c0f0747000c0c55c7410d5","first_seen":"2025-06-11T15:56:46.789566Z","last_seen":"2026-08-23T15:43:23.958589Z","times_seen":304,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/api/instance/he/pwa-icon","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:35.355Z","timestamp":1787499755355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /api/instance/he/pwa-icon HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\ncache-control: public, max-age=0\r\nvary: Cookie\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-U8fFjxgWW1oqND9Swmb6sw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\netag: \"inst-he-1786842729427.png\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnBdtdagVPkga5ZG%2BLQ%2F7%2BrE2OPe7YcEXh8j710kIYV15xaIPetsSEg%2FGPsMSdRkgWKG3CaRpJsXMU0PKEJx8jAQwB0eUUrYYMF%2FW5ebqBJym0ItOto46E9TpkvyxcJnBdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2fb3a5ef979c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6149\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:35Z","raw_expires":"Mon, 23 Aug 2027 15:42:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:35 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6149,"size_decoded":8414,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"1126c8a21cb36cacb81c1021059a20d7","sha1":"5c10edacde0055a00f3a44f9f950a488c6c9ed1f","sha256":"824e9107ea512db3e8cf457488233ca5cbaf4367995508f2d198f1047076d377","sha512":"540923221a8818483fcd67d4c5fd1edc484e9aa0a020e5538dd3f36d49abdc499b3126034c7a91b15d575469cd106651634270c209db29b6e1fae3f42cc43926","ssdeep":"192:orr+adEQ6jh/2g8HURWIQvFidJUC/PM3OM:oraadJa7EPImK/PM3OM","tlshash":"14c18e2017c6f4f4a4ca33905da1686788d4e984df3969bab49ecd1c3475ead1b04f7c","first_seen":"2026-08-23T15:43:23.96683Z","last_seen":"2026-08-23T15:43:23.96683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowbets.win/client/core/ui.js?v=1787487661690","fqdn":"rainbowbets.win","domain":"rainbowbets.win","tld":"win"},"ip":{"addr":"172.67.165.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowbets.win/","date":"2026-08-23T15:42:32.698Z","timestamp":1787499752698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowbets.win","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 01:38:20 GMT","end":"Sat, 14 Nov 2026 02:38:17 GMT"},"fingerprint":{"sha1":"7D:60:F8:C9:F9:7B:95:52:1D:8E:25:B1:4D:B3:C1:3A:2C:8B:BF:D0","sha256":"22:8A:33:A3:D6:F7:AF:7B:B0:60:66:55:5C:6A:85:BE:0B:57:A3:EB:4A:08:36:7F:2E:E0:C4:23:C0:F0:CA:4C"}}},"request":{"raw":"GET /client/core/ui.js?v=1787487661690 HTTP/1.1\r\nHost: rainbowbets.win\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; __dfp=8153c9a69d3105514a4084330169b5c1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:42:32 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: camera=(), microphone=(self), geolocation=(), payment=(self)\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'nonce-oivTYkPn6/WDFeDppQTSqw=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.discordapp.com https://*.r2.dev https://flagcdn.com data: blob: https://i.ytimg.com https://i.vimeocdn.com https://embed-ssl.wistia.com https://cdn.loom.com https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; media-src 'self' https://*.r2.dev data: blob: mediastream: https://pub-c1fbbd5a7b2a4f0baf264f4da5c7d26e.r2.dev; connect-src 'self' wss://tryinstance.com https://nominatim.openstreetmap.org https://api.stripe.com https://vimeo.com https://fast.wistia.com https://www.loom.com https://voice.tryinstance.com wss://voice.tryinstance.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' blob: https://js.stripe.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://fast.wistia.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'\r\ncache-control: max-age=31536000, public, immutable\r\npragma: no-cache\r\nexpires: Mon, 23 Aug 2027 15:42:32 GMT\r\nsurrogate-control: no-store\r\nx-app-version: 1787487661690\r\naccept-ranges: bytes\r\nlast-modified: Sun, 23 Aug 2026 12:21:02 GMT\r\netag: W/\"4108-1a02e913165\"\r\nset-cookie: hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EO6Wa%2FOePCzvvNo%2BaPq7Zgw1uf6Jea15%2BCGgdDCcXEdZTO6yfA%2FAtV27U8n9Z%2FdBXok9fwtqqh6lT%2Bj3qKjp1IRx84qpXPTXjhwx4PsoHtMVLEWShingI1LrzUSUibgpLtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb3a4e5ecdc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"hub.sid","value":"s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo","quoted":false,"path":"/","expires":"2027-08-23T15:42:32Z","raw_expires":"Mon, 23 Aug 2027 15:42:32 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"hub.sid=s%3A0Dlin7yu88OrWvQC2dmHEub7MQzhOwEI.k1f92ZxaV5nBriYnhb9pYPpjdCYdMjkHaG9dJ1La3xo; Path=/; Expires=Mon, 23 Aug 2027 15:42:32 GMT; HttpOnly; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16648,"size_decoded":7654,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16647), with no line terminators","md5":"65f16d8ba5dff6c7f22e8fa40fd34c53","sha1":"410f89eaededcd74bf28ad2bb00acf584692787e","sha256":"c6716de4c89e24681ce7e03b0232bf424253b7056f1d056dd71277e51c1d0749","sha512":"bb05a5ce818210d1bec861847323700db22043bf46df52c94792e7d30d05cd477cc626519b68888857bcc62b58f46bc854d28782e7224cf6371cce227576f8ea","ssdeep":"384:rcWA8PQgChU+SlLl1oD6WxTdZe/r6uEKkOZXOFj:rcWA8P8hU+c+ZxTd8/r6uEKkgOt","tlshash":"7a72b861a7d48a2c678b4a373577b0cce1261b41b5445f82911cfcc81ea1347f9eeabb","first_seen":"2026-08-23T15:43:24.082292Z","last_seen":"2026-08-23T15:43:24.082292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"rainbowbets.win","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}