{"report_id":"cdd80ab5-a7d5-402a-8515-08a52b32791f","version":0,"status":"done","tags":[],"date":"2026-08-13T18:17:47Z","url":{"schema":"http","addr":"rainbett.uk/","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbett.uk/","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"title":"Rainbet Casino | Rainbet Uk Bonus 250% up to €2,100 + 60 FS","dom":{"size":55654,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (898)","md5":"02a7348c394c9862207be8d2096e6484","sha1":"c3ddc78fa86ff7b716bbf93bd17457af050ec03b","sha256":"9df035cb2c59aab3c855f8195c69e722f5808a2f51b1643032d6e9e2150aa3de","sha512":"ffd37e96becfbfe9b9d1bbbd7c6d034d2a2560aa8821326a5cb6cf424bee29496bf7d18f87cee0202bb16507e7503b6ba71c67322591768e63cdde7eafb035c2","ssdeep":"384:AVFABGwEWE3IpbFtCe7DBxdpkT4oNJ/n3zjFVHLmGbt0oDIKOcAA2JGepXjaiA/8:crwEWpOGj3Si4fJ3nEPIBa0De/uy","tlshash":"be430032b5f1257301a391caaa35bf5abed5c423cb0a1940767d8e9ddf87de2881360d","dom_hash":"domhash38bb903ac223ae22d2e5cd09cce11f49","first_seen":"2026-08-13T18:05:32.884518Z","last_seen":"2026-08-13T18:17:48.829543Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbett.uk/","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T18:17:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":5,"received_data":192845,"sent_data":2825,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rainbett.uk","ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-08-13T18:05:29.945674Z","last_seen":"2026-08-13T18:05:29.945674Z","alert_count":9,"request_count":9,"received_data":312700,"sent_data":4361,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":12246,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbett.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T05:43:29.97298Z","times_seen":419373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/js/script.js?v=1786027011906","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dea7b401a191490827bb6787c707ca66","sha1":"7ad5f9fbe466cae62667bc750192d9ef83a73112","sha256":"432a3610636a5b2c3b365d69788e9d2072545dd43775bc2b5ba0cc9067cf4827","sha512":"3a9abbe6fc874626902b22822f3d1f5ea3055d40d91b9d1448bdd8d71d2a13e75558fb10c1bd76eaa4c037d2257f25cfe0ee64d570718970268360dee5ea6843","ssdeep":"192:MHSimHc2CRVyMdocliEgC6Mbrit5BDsO54OGAez+lw2k6IXoFQqYFIeb+stWSwTt:MHy86YojFZsO5r3vFNYZbDk","tlshash":"a342012845b3253641b765b667db61883320904b7246cd5a3e6ec74d0fc3e50abf2bfa","size":12174,"data":"","first_seen":"2026-02-11T12:32:39.912127Z","last_seen":"2026-08-13T18:17:48.834198Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.313Z","timestamp":1786645040313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519011\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T05:44:16.029401Z","times_seen":549197,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":24,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/assets/img/banner.png","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.142Z","timestamp":1786645040142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /assets/img/banner.png HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:36:56 GMT\r\netag: \"22868-65861d1e81de8\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdeCSNqfydbI%2BVaY%2FqfW1qVDzLUJJq0FKqUbPrXRnsQNpU%2FyVHvI6kfgg%2FuPZs34zZQJ%2B9O55fNy0PQUedBBnq0NKwj3LLlJ0x72DGZurZRP75LkeRKZzvUouyp3YQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a2a9b74cdbd623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 141416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141416,"size_decoded":142123,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1110x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15578dabcf43b6d01659d8018c16dcf0","sha1":"8a39c81bde3e92505a362048e36e4c81d00ec08c","sha256":"b78cdcf4df3f7f1b32b1459f526a56500c50c181ba7000428d0ca90447dc6fc7","sha512":"97c18f1c3dc069bf14c4ed4f29a4d4ae68537c64317eb37cf6d90da7fd772edf85fc381021e4201fd9c3825841531a45e0503b41d10ccdb9ef27570828edc4bd","ssdeep":"3072:w3z4zERjBEZDXkaDqxXcmOa7T9apcMjWfoIauVHMYDJlhNjxcP:w3MzbDXbDqxsmOanc+aGoIaI/tdg","tlshash":"c4d312b8c9680845e71302a7d6e040d7c0fed3876934207e7f87fa662f296586271b67","first_seen":"2026-08-13T18:05:32.889481Z","last_seen":"2026-08-13T18:17:48.831239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/assets/img/favicon.png","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.420Z","timestamp":1786645040420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:02 GMT\r\netag: \"294-65861d243908a\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvwh87b9mYevVGQ8PAvWEW7JFoRO63o9GxbyYDYa%2Bxh0UzUPHIemnRMfs%2Bya2Q1bXvmbbIWMQigQDA6UzLXNmTEg7hTYmt2A70QVRABiP3zpatSrLhYEYGY9VilpNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2a9b74e9c3923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660,"size_decoded":1359,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e30a5f05925d8730ace73730be3abdd6","sha1":"4eb23ca9db20a16177d990fdc8b55bcd47688482","sha256":"bdfbe3ffdac18611aeaf809344ddb5b5d8bd9a2f3045c744303b88652f18c964","sha512":"2981a8899b271b99281af18c8bcb6ac47ceb07acbc5ac8396f622e38a5ecd3c6e62e5ed60ac8b73a1a72f5a0b75d2eb5f829af4cc2af6d5df24fe83237e8cf1a","ssdeep":"","tlshash":"900123e4f21e73b81f42b4c3a6946c506e638808ba78223887fd7aa32b045152d73704","first_seen":"2025-03-19T03:41:09.576541Z","last_seen":"2026-08-13T18:17:48.831908Z","times_seen":43,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/assets/img/favicon.png","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.422Z","timestamp":1786645040422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:02 GMT\r\netag: \"294-65861d243908a\"\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKG1Chwc3ABlX5jwKEV7zkqG7tVe%2BLjQSL4xQ%2BjWH9WTV65SisA8poVu20%2BiV%2Fpc7Osu1Jt6xlUxxLWIhHS0BRYtoDVxLTt6JOSFxLRKu5XzqoF9uemECNVPUo7tlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2a9b74e9c3a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":660,"size_decoded":1363,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e30a5f05925d8730ace73730be3abdd6","sha1":"4eb23ca9db20a16177d990fdc8b55bcd47688482","sha256":"bdfbe3ffdac18611aeaf809344ddb5b5d8bd9a2f3045c744303b88652f18c964","sha512":"2981a8899b271b99281af18c8bcb6ac47ceb07acbc5ac8396f622e38a5ecd3c6e62e5ed60ac8b73a1a72f5a0b75d2eb5f829af4cc2af6d5df24fe83237e8cf1a","ssdeep":"","tlshash":"900123e4f21e73b81f42b4c3a6946c506e638808ba78223887fd7aa32b045152d73704","first_seen":"2025-03-19T03:41:09.576541Z","last_seen":"2026-08-13T18:17:48.831908Z","times_seen":43,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T18:17:19.589Z","timestamp":1786645039589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:19 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HP2j2sdYAX774i6XRwMFxZ5dRTBFpZivF14vt0j7frDGnKQAqdamP1yEUUWaS6fyDjWLxVc3GOPsh%2FCntwardxNHul1vldg%2BA6VoYXyhpwoaBbnfOzHzsIHGLOUi8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2a9b749ab4c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56879,"size_decoded":10861,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (898)","md5":"3593e742b5492df8ff8bb736b9458ba2","sha1":"18f3fe45bbf34bc7c17b34b206a66153ebfc8aeb","sha256":"0d05aaf3ae2074c73ffb08995c6049e5f705157dfddb13ff75cc7d002b288653","sha512":"26a96dc9193f17243331375510ad6aa384b081456f767ba59dea86a726865e614b7acf84e0b3cfa4392515080a49e3f4e9f8f940104fa2aa87b1919798b3944b","ssdeep":"384:s+3BGwEWCZ4pNa0Iu9DPnvbuJGAviCfWqrdf3LQcl9coDIKOcAA2JGepXjaiA/fv:IwEWJwuj3Si4fJ3nEP8BahWD2/ud","tlshash":"07430132a5f1257301a391caaa35bf6abed5c423cb061940767d8edddf87de2881360d","first_seen":"2026-08-13T18:17:48.832533Z","last_seen":"2026-08-13T18:17:48.832533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.143Z","timestamp":1786645040143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 15 Aug 2026 18:17:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOj14MwYcZHZ1bU%2Fpm2Cr66sFHS7Hs4JI6wACE%2BmjzbttFNuJVpNplFdr7j%2BVsNlPfJ9GMOFp8tbi%2F573%2FUOJZ9DGWraS7PmTcqEc6aRtxL7M5C0iwIKxxpSKbHJ2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\ncf-ray: a2a9b74cebd723eb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1292,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-14T05:43:29.97298Z","times_seen":419373,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/js/script.js?v=1786027011906","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.145Z","timestamp":1786645040145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /js/script.js?v=1786027011906 HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:37 GMT\r\netag: \"2f8e-65861d44bf207-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/javascript\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKMcJFuj4dCYpT0euW8uPTTEUqmWoCPOqxlxq4QM%2BSJkgosm228uiviXNOUvftub9Qin%2BCjJBf14dr1fbBlmyiwFTTqtAeVyU9fHp9OFsSmfdEIZVo9%2BqQYdJ1sr0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2a9b74cebda23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12174,"size_decoded":3545,"mime_type":"text/javascript","magic":"ASCII text","md5":"dea7b401a191490827bb6787c707ca66","sha1":"7ad5f9fbe466cae62667bc750192d9ef83a73112","sha256":"432a3610636a5b2c3b365d69788e9d2072545dd43775bc2b5ba0cc9067cf4827","sha512":"3a9abbe6fc874626902b22822f3d1f5ea3055d40d91b9d1448bdd8d71d2a13e75558fb10c1bd76eaa4c037d2257f25cfe0ee64d570718970268360dee5ea6843","ssdeep":"192:MHSimHc2CRVyMdocliEgC6Mbrit5BDsO54OGAez+lw2k6IXoFQqYFIeb+stWSwTt:MHy86YojFZsO5r3vFNYZbDk","tlshash":"a342012845b3253641b765b667db61883320904b7246cd5a3e6ec74d0fc3e50abf2bfa","first_seen":"2026-02-11T12:32:39.912127Z","last_seen":"2026-08-13T18:17:48.834198Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.315Z","timestamp":1786645040315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519011\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T05:44:16.029401Z","times_seen":549197,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.319Z","timestamp":1786645040319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519011\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T05:44:16.029401Z","times_seen":549197,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":44,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.137Z","timestamp":1786645040137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 13 Aug 2026 18:17:20 GMT\r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11562,"size_decoded":1397,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2c2f658c6c4aa7f9c74ec9eddba6314e","sha1":"47e9dc1163a015e89dd3a14cb82dc3e0e77b5b1c","sha256":"01758188035c63f724b9ab5222cf55d7d3bce15f046e54ed33a2b31ecf3c5551","sha512":"c04365bc33a1740266775847ff7468088ccef6725c9c3b6149bf0aabd4706fb8701bb140a849c7a0bf49b8629a1516dcf373472dfa2561b13a2eb200077152be","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuTRU7XPOKu8:zRPQPTzajdfMh","tlshash":"f432ad91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac224325b3d","first_seen":"2025-09-05T07:15:58.331555Z","last_seen":"2026-08-13T18:17:48.835115Z","times_seen":2065,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/assets/img/logo.svg","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.140Z","timestamp":1786645040140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4uX9b9nflW7%2BE1R3LXPpkFVl3N3f%2BtEuE2WHSXNB5Gq9Lh7ulHav76weih6PDJBckODQhaQeRyZGozy%2BZTL3%2FYrNwfK7s3nez%2F7IkPVYs76p2GAwIdzM3fWRHxXRjQ%3D%3D\"}]}\r\ncontent-type: image/svg+xml\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"2ae6-65861d274c28b\"\r\ncf-ray: a2a9b74cdbd423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10982,"size_decoded":9016,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7789ea602de54ea313b0f2da86a4ee8","sha1":"7d7b883c3b10b3e49dd5b517aaf5b66e784c778c","sha256":"e092c02c2794eae7c954976db1018c54d889b0e0f031f6f2e8e8a35d251c2d88","sha512":"300a184b42b51db258502a6dd68d51ffbbf198344fdf889357749398a9591112f36d8a125e393a896d7498e99f3617554e08e33a678e48f94f5f37c1231656a4","ssdeep":"192:1oZ8ZFA3F/BjJCvydegoJ8Jxdb4cz1pavTDOdu9OHDWueauUwObMh21Tu0f5:1ouZFA3FJtoyYXGSEpm/OdbDHjwOohqB","tlshash":"b432ae998479ed3ddb00e469eae9d05e05f304e12696820a2d903d52f0f54cbaff3e96","first_seen":"2026-08-13T18:05:32.913051Z","last_seen":"2026-08-13T18:17:48.836145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.317Z","timestamp":1786645040317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519011\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T05:44:16.029401Z","times_seen":549197,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":36,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/css/style.css?v=1786027011906","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.139Z","timestamp":1786645040139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /css/style.css?v=1786027011906 HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:33 GMT\r\netag: \"4c8-65861d417417c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atJsytiOL%2FulaT2XlRfxN1YTEpvAblrt8%2FIxvXFn1PM3EFwWks7%2BS8EQSwYxoghGNCTRSvYc4tG485VJL5mUJodrsXdKxIvUIG0mAm7gNK0D1rkJ5GGwIt%2F7PkMACw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2a9b74cdbd323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 497\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224,"size_decoded":1251,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"30bbc125b5774aecc614815b4b114bc1","sha1":"58b3b9a621eb9e783f225e44b92da3ffcdea65c6","sha256":"47f74b87f11535204b461e4e2d4b40db06c81b23701a607ef6890513ea2bdc92","sha512":"899eb311a76d3ca028e5150bc60375213a253698629b70a1489b632c78274a27bfd5f999b3ab83771c37a75a4884094e07f80478a0f8421b7ae766e262daafa7","ssdeep":"","tlshash":"8f21381228883e7e1314323bf89499572526d1be3b6e3af278e11c79bfd0014c298144","first_seen":"2026-08-13T18:05:32.894039Z","last_seen":"2026-08-13T18:17:48.836691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbett.uk/css/black_style.css","fqdn":"rainbett.uk","domain":"rainbett.uk","tld":"uk"},"ip":{"addr":"104.21.26.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.171Z","timestamp":1786645040171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbett.uk","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 13:53:02 GMT","end":"Fri, 09 Oct 2026 13:53:01 GMT"},"fingerprint":{"sha1":"E1:45:99:2E:C1:DD:3D:84:4D:41:21:79:22:1E:73:2A:76:FD:5D:BA","sha256":"C0:94:F5:93:4E:CC:9C:18:19:11:25:B1:31:B0:18:19:FA:B4:01:E5:75:AC:F7:7A:F6:4A:E3:30:36:7E:2D:9E"}}},"request":{"raw":"GET /css/black_style.css HTTP/1.1\r\nHost: rainbett.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbett.uk/css/style.css?v=1786027011906\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 18:17:20 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Aug 2026 14:37:33 GMT\r\netag: \"13ce6-65861d40e6bb8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\nage: 739\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBLfyg9vYTlvT4q7rz%2BU1%2BmlOhbY9kpC9YVghpefI7JpaOzTzwvEsk0HY%2BezksDbjOfHxFtTjN1YB9WsvY5Z34IBNFvKHLvCQ0TItgidC2%2FaUg7xgSM7QYj0xdxBxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2a9b74d0be623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81126,"size_decoded":11536,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"2f98d0872bfb5788857e6ba2887b53b7","sha1":"a4804dd92e915958d1cd94e60b59c8c4c973a7ca","sha256":"24754fe2174f2d764b6709b0d341942911a98ed14a67fe7a991a10cb9f9bdf05","sha512":"013afe983abc486036d789205cd10d800d4f4a2d99d2ded0c0ec065094f1c4b4f6228b1dbc6d8f4dea8244954ff741628a1f05ebffc0896e8c89ddf8d1ac8bb9","ssdeep":"1536:6b5gFmO8i8am9FQvpzZ/IXq5WMddocpxpKgDsAFb:6bN6","tlshash":"e883025aaaa32575a81ba52d6bef9745333cd043cd0ecd387e9d61088fc53f49192b4c","first_seen":"2026-06-12T06:15:37.788844Z","last_seen":"2026-08-13T18:17:48.837248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"rainbett.uk","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbett.uk/","date":"2026-08-13T18:17:20.311Z","timestamp":1786645040311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rainbett.uk\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 519011\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-14T05:44:16.029401Z","times_seen":549197,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":19,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}