{"report_id":"db93008f-285f-459b-a2f4-8c084a96a987","version":0,"status":"done","tags":[],"date":"2026-07-28T16:36:50Z","url":{"schema":"http","addr":"rainbetindia.info","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":0,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"rainbetindia.info/","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"title":"rainbet-rainbet - India's Premier Online Casino \u0026 Betting Platform","dom":{"size":121636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26888)","md5":"8670e5513b719b97cde73d9448bc23ec","sha1":"a8ce77043ab54d1e0ab24a61fdefdb2301b399c6","sha256":"a5b94f80b0152b98f1d5d9f5e1d262a3122e6fb569ce090041356cf843b072ed","sha512":"0e9f724e4bf5d47fcc168f4bbb0774e726b50c8a87ba06db4e794702b02a5c6fec109bc9b8b95c6404f916efb30c2c7e8e8de0efd93b9ae442186c359c6380ac","ssdeep":"768:PbUVehnllCQpR9ad+WbQIYV6ASYowfkyC2hgL25c2cE82r42U12px2i0KxvhBGaI:IshlAtYVxLowG2O202s2y2H2kwDZ","tlshash":"58c3f96452f2047b58d391f1e6e16b2dfda9d397ce278498b2ec8101afc3da24c97358","dom_hash":"domhashf5b948232ff0466752176a63a6469a7c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbetindia.info","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":0,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T16:36:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"in.analyti.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-26T23:00:42.445991Z","alert_count":0,"request_count":3,"received_data":286916,"sent_data":1511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-27T08:40:23.885085Z","alert_count":0,"request_count":2,"received_data":408703,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"c4.maxcloudlink.com","ip":{"addr":"104.26.11.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-11-21T17:37:14.603463Z","last_seen":"2026-07-22T04:06:41.429808Z","alert_count":0,"request_count":1,"received_data":894,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"in.analyti.top","ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-22","domain_rank":0,"first_seen":"2025-11-09T05:48:32.985702Z","last_seen":"2026-07-25T07:04:19.701197Z","alert_count":4,"request_count":4,"received_data":13472,"sent_data":2011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"papi.maxcloudlink.com","ip":{"addr":"104.26.11.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-13","domain_rank":0,"first_seen":"2025-11-12T04:52:17.164013Z","last_seen":"2026-07-28T03:34:02.146274Z","alert_count":0,"request_count":1,"received_data":924,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"rainbetindia.info","ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":26,"request_count":26,"received_data":806272,"sent_data":13961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-31T07:25:22.130199Z","times_seen":47535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/js/global.js","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"18d7ce499f290070fd36fb2b1247e726","sha1":"4f817fd8f67481de4a5b996c3cd239456963b653","sha256":"42a339d5fd8eb7cfdc0c53c101c0b433bbc54b9b547215fbf410451581763503","sha512":"d6166c942be8e985f375af3a741be523eb3f0eaf13674bb72760c8070edcb3db65ee8ee7f43d80522179c530767157288524906495383ec07d197f3007662cb6","ssdeep":"1536:kEOK1KH7KKFwfrqvb96pwmNv/k8o1u+zBsLDvYoDIZxBK+zdJGc:zsCTMUEVqMo8003","tlshash":"a17319ad7a867cd1c56261b72d21a073f8d94ed87e4d8058f6ce7c3cb87027d8878629","size":78299,"data":"","first_seen":"2025-12-07T22:33:46.196719Z","last_seen":"2026-07-28T16:37:43.37472Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/js/rainbetindia-infoSwitchLanguage.js","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3078962c425825168a7ea77b982650f","sha1":"c5603f4fc32498e397bb69e05b8c24b3f43a1243","sha256":"690d74bcfb6315f94adae63414f433debc3998b0251e57bbe968d1af17f67778","sha512":"8684369a2bd0b42a6b853aed23c999feb97eabd7224aac6a07d78e3203a4930f160090be885cbe18f300ed11cec61f4ae5ae9c125f4383295ca533459d439d88","ssdeep":"384:LtGi+fSwHGoF7G1a0tHwTgZuj8MLuAfPuDuz:UimSwHGoF7G1a0tHKgZuj8Q","tlshash":"cd9254b1c120e3fc6b0ccd919f79ad18d2261781e29d6fd4228ded44afda907891c5dc","size":20472,"data":"","first_seen":"2025-11-29T07:43:49.998306Z","last_seen":"2026-07-28T16:37:43.37528Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"413eefca6b31629ff6b72ac385feab1e","sha1":"65d652676a98465ae1bbc2c2d602152f2e8d330c","sha256":"d34ace6eb49858be1468776d7b98303ac236447e96acca5651b7f0a0b2877fcb","sha512":"bec7fb1a4de758693e1e624bd2433ce9d19bd296efc9d2d2a2b8786c38cca5abef86434a030fde33d2b8c83df285b5ad07b203bcffc84e9dc7b9b4ca7bf981a7","ssdeep":"","tlshash":"37d0920e5af5aa330a1fe425468d8064b66ab487380d6c3f7e8c0101cf0c649ccf8798","size":228,"data":"","first_seen":"2026-06-14T19:08:39.937552Z","last_seen":"2026-07-28T16:37:43.388818Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4182e571d5cbb915dc3dc96b97b26e6a","sha1":"e33c1c60c063c46c47a1a3ae0798e8bd7d757014","sha256":"f7210403393106a60e2c06c13981180974923de7d600f5120059a2a64a96c555","sha512":"d2a3c927122e1dd9e3b556f8f53c8157513b72997ef5e6d3089f4fbadc5386311518b2bf57970e408e7822b71659d883c7bb98caf75db7976478b9f07ef14e78","ssdeep":"","tlshash":"27e02b1966b1303162bbfc24095f7105aa314043245bdc7db58c4e99df5d23c41fafd8","size":436,"data":"","first_seen":"2026-07-28T16:32:40.445182Z","last_seen":"2026-07-28T16:37:13.342234Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-07-31T06:05:42.66674Z","times_seen":4647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-07-31T07:22:17.114144Z","times_seen":14799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"in.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-07-29T01:00:42.692787Z","times_seen":370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"rainbetindia.info/static/js/rainbetindia-infoSwitchLanguage.js","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.220Z","timestamp":1785256575220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/js/rainbetindia-infoSwitchLanguage.js HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 03:39:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68246c-4ffc\"\r\nexpires: Wed, 29 Jul 2026 04:36:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20476,"size_decoded":4322,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (20462), with no line terminators","md5":"c3078962c425825168a7ea77b982650f","sha1":"c5603f4fc32498e397bb69e05b8c24b3f43a1243","sha256":"690d74bcfb6315f94adae63414f433debc3998b0251e57bbe968d1af17f67778","sha512":"8684369a2bd0b42a6b853aed23c999feb97eabd7224aac6a07d78e3203a4930f160090be885cbe18f300ed11cec61f4ae5ae9c125f4383295ca533459d439d88","ssdeep":"384:LtGi+fSwHGoF7G1a0tHwTgZuj8MLuAfPuDuz:UimSwHGoF7G1a0tHKgZuj8Q","tlshash":"cd9254b1c120e3fc6b0ccd919f79ad18d2261781e29d6fd4228ded44afda907891c5dc","first_seen":"2025-11-29T07:43:49.998306Z","last_seen":"2026-07-28T16:37:43.37528Z","times_seen":17,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b837169b811.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.238Z","timestamp":1785256575238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b837169b811.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682465-8bfb\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35835,"size_decoded":36383,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"074f1b8608a11e8fed9c3d4d0ec939bc","sha1":"67482a979eb5bec1197498076c888aa3e74ef59a","sha256":"8d2de73d397bba56f447bcc4514778499c4b08f62de0b9a3b04768f5de00c048","sha512":"6139fc5192922099adf401213fa04d6097d5727dfd69ec2b92eee93e1d7d79bd3b8c31e2e7d1fcbf71d9141752b1aa2d799f458beae814af59fdc8a1e2ae0034","ssdeep":"768:EIGNKdL3+CnhO4AjtCLYBGPBF2pJF08dC9+rTTwVoYWLi:TGk3+grAcL2p9dC9qTOoFW","tlshash":"1bf202bb20f6154089b94757fbd7ef6e6454e4bc5da27108193167eca2eb83784113c2","first_seen":"2026-07-28T16:32:40.388355Z","last_seen":"2026-07-28T16:37:13.32183Z","times_seen":3,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b8298510132.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.245Z","timestamp":1785256575245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b8298510132.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682464-4ef2\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20210,"size_decoded":20656,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 300x300, components 3","md5":"9d32d1990489572844189beec5ab7047","sha1":"377b1e4c2e7882514d78ce02de03d6b94aee0650","sha256":"c82bccdbac3fd923e0163f5740c7c8d94893667af80bcb4f9c2bc95d5a819859","sha512":"60192efc69c316f74d2abad2f1799b75f90fabfe57a9e5366d72c6183d28ea8b2a32dd895ff8c03a9002e23e0bdd7724887706cd30ad602254110713d783d641","ssdeep":"384:aFGgs7Mx7l7NVvCVTNGxUQVafESrNV8DelrLc98aIO2mD5fcpNpt4/m2yRYcTfzU:aFGgPVuF4SQVa8A+w4IO2mlfc5t2cflG","tlshash":"ed92e15337408c67adb2ab3ab698ba176fa1fb00d3704e411d045bb1e9cef88d6525dc","first_seen":"2026-07-28T16:32:40.439081Z","last_seen":"2026-07-28T16:37:13.315934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/ico.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:17.620Z","timestamp":1785256577620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/ico.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682460-1b2f\"\r\nexpires: Thu, 27 Aug 2026 16:36:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6959,"size_decoded":7502,"mime_type":"image/png","magic":"PNG image data, 198 x 66, 8-bit/color RGBA, non-interlaced","md5":"52cb0532cb37ddcae5b48bb30b2fd0e9","sha1":"5be0e0fc9d61544f15510578eb24d1d119222851","sha256":"e19db07b7a9aa29714eaef0109be8874b7bdcd4a725dfa12afa6e960a4f2fedc","sha512":"828964f981a1e7a925c54630649e0541fb8b8f5ce8426606302503cf02be40d98cac7e31640a0954487fa2edf25cdf110be20ba8e1eab5eb979902db5f34a5fd","ssdeep":"192:W7K/xtMQsTVxRtdkltgYFirzzw0TdkrheqW7:QYfyTVpd0tKdOcqu","tlshash":"ebe1c02c01fe32152b576201f9717f501b3ab6bb9120488b6137a195dbfffab8647244","first_seen":"2026-07-08T12:05:50.73792Z","last_seen":"2026-07-28T16:37:43.372453Z","times_seen":10,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c087ac0.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.347Z","timestamp":1785256582347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c087ac0.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-b8db\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47323,"size_decoded":47860,"mime_type":"image/png","magic":"PNG image data, 543 x 222, 8-bit colormap, non-interlaced","md5":"5b20160ba558f0302eba6af906e893a8","sha1":"8a348a24caeadf7e8f6a113cab99cc0cb425375f","sha256":"67eb3444eafbd806f622472cf074a512c7d9c385b3226d3a53f5371b2546f929","sha512":"8163c3f9e13cb200d00f60bef9ffd7eaf396d108100e510bc8433f82b645fec43f4234a3367e8ec2d265d864290f33f1d7b9c95938a9f752963c2b9e4348280f","ssdeep":"768:vIDZyOr7+6P7BM4MDGkJ0SwJSbKOFIwFJ71lnvBzGMxZWIKsEmcqN8+dnhSChoMd:vpAfoGA5b9FJf1lvJfJEmcqNRdn0Cho6","tlshash":"bf2302fcbe3ddb6d0d790820a2981ae16c3d52b4739b470a72da7299e706114733caa1","first_seen":"2026-06-02T03:20:01.087846Z","last_seen":"2026-07-28T16:37:13.333478Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T16:36:13.649Z","timestamp":1785256573649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 28 Jul 2026 03:39:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68245e-150d0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":86224,"size_decoded":14956,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"be69ba06c6f6d6c42c653b587dd7be92","sha1":"a80649f01a199ccb45fdb68bad87dca658deb77f","sha256":"cd58d67eae3387ff0c84e6e40606b94ef5b3b9f715872f88ca3a69e123af52aa","sha512":"de55d494fe63dc1d678a679597e2a5619eb81ecbb9bd5ee8de49c3074cc0acfded31fc1e9453832f9dc38735d1cba6dab4e9293538930ef15776c30602d57963","ssdeep":"768:bbUVxF6USYowfkyC2hgL25c2cE82r42U12px2i0KxvhBGal:UfFZLowG2O202s2y2H2C","tlshash":"1a83c66461f215bb40d791b2b6e26f2aeed8d713c617c488b2fc81566fc7c424da3368","first_seen":"2026-07-28T16:32:40.410499Z","last_seen":"2026-07-28T16:37:13.33949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":4,"connect":298,"send":0,"wait":295,"receive":0,"ssl":307},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.212Z","timestamp":1785256575212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 16:36:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4570\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"406d-rwCOh5O6dcNGNg6U6W482jFM4n8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 4841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FL%2FkMfuRKtCaTLszMQO6n0azFpQOKna5KlLFjuxRHAlsqLWXlQho4M2VrV%2FP1JGyHQMpBDleLmDhB%2FFuj2grur5Ph3ZRPWbOdXs2Ou2fWUar75ay2hVi%2BIvESEgopxrCqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a2254d647ca3712a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16493,"size_decoded":5680,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-07-31T07:22:17.097248Z","times_seen":12545,"resource_available":false,"data":null}},"time_used":6633,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.214Z","timestamp":1785256575214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hhs79-1785256259349-674d265315bb\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 315\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf6e%2BKUxtdXoE6APEv5diaakImoC1z6vADBz9cbmS%2FytfrQcbvzBY1SCxpvbvomujdwc6gUpFiBgjOW0fzf2Zn1ESLlKVoyzXHg%2B%2Fp2NHSCucXWQv6mtqjtc1AqfCNPN%2FH9X5pk%3D\"}]}\r\ncf-ray: a2254d3b4923b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T07:29:36.190104Z","times_seen":17630838,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":8,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.217Z","timestamp":1785256575217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 40660\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"2315a-9NyNRghnOcWBIRhbLQ9OGQcQ8Rs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230022-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 32354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3kT3Ld0b%2F0OGhDqsinGOLUZnk0ux75AubOAxabEd6G0aTWddEJUG6Q9ehoyU%2FzJXKsN2nhwrhUGJj4czpo2mii3BYtAb7HXPSCb69y34bzL1CpaqCxxG1YoxLk7kKFKGhA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2254d3b38c28be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143706,"size_decoded":41756,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-07-31T07:22:17.114144Z","times_seen":14799,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":6,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b84e0964e18.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.231Z","timestamp":1785256575231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b84e0964e18.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68246b-2bb6\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11190,"size_decoded":11733,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d9c6f82e22a2a32fe2dce3bbd5cc3b0","sha1":"52d2494abf4792754ee39ddc4dba56d8b0a9fdf0","sha256":"e9864dfc5ea1eab703bdc9206b6ad6f824c4daf36826809161505712b2876f50","sha512":"0ee557959561e8c528d76cdf90cafa55046fac3e2121350f6d527ae72505a20670de9bf640e3befde0f67816042bd5cb7cf91304024d7483d552d5590f088c22","ssdeep":"192:YCi6fgQrA/9+pZr0Vv9y5u6JsW/1WnuTOrF3TBsLR8fVqsc+p7/yxfcyxBfehWJ:RiEg0AUpZ4Vv9qDiW/E5tqCfAscs/yxH","tlshash":"af32cf0478bcff459e980b9d39f907d2fa5840822ca47d6473bea178483bbb6b54523d","first_seen":"2026-07-28T16:32:40.3968Z","last_seen":"2026-07-28T16:37:13.331881Z","times_seen":3,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b837169527e.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.236Z","timestamp":1785256575236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b837169527e.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682465-5295\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21141,"size_decoded":21684,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"7921d2e8a925a3d2e53fa57d5e5824a9","sha1":"dfd28d8e10ebdcad609453dd1e94db0ebfa8688e","sha256":"f6f690a8c27408c06f312f60d23c8177cd857833c2ddbfe48e8b1653c85a7643","sha512":"dc53268a887280efe033bc1f61749e2316a29d10e786bc85287b24e30ee2d6770df3cbde9763ef594f8d75ef1288ab2621c6974df824c673457b5930d6e34b9a","ssdeep":"384:UKKxtNx8ZaHW6aOzVuvYTakj5dpttUID8Wc/foI1x2cW6UdVKOa3Pc:UlxtN5zaOzVuQekrFDsxRkuXk","tlshash":"9092d121b08d6f1ac74720626caf6d03ecf2ac45d1f41bd6469838ee1988651bd647ff","first_seen":"2026-07-28T16:31:03.889915Z","last_seen":"2026-07-28T16:37:13.326529Z","times_seen":6,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b82985129c4.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.246Z","timestamp":1785256575246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b82985129c4.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682464-1727\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5927,"size_decoded":6451,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"84598420b59e3433a356dedb11c07d0c","sha1":"82c2c082aa4d9715e93c93c96c1ad1396c3f201d","sha256":"cdbfbce421a9ad40ebc6b7973379ae10b6df3c69b465a6cc334caf76f588ed48","sha512":"793c35be09ae7e02158fe2c61235c7245bd09c2f9cfad35aa2a750c99c9c38a80f4839db52e492f9d7fbb69b91bd141c9e0640d65e1931b13b9022bc3d97fa4f","ssdeep":"96:ySyXz9yer1IMvcMTK4XpWNTX4w7rgu6CKeNoJJ70uicMPdEL6XGBufOjONkMCt:hwxr1FcMhW/l6JJQyoOUkrt","tlshash":"50c19d5b2b4c10a57dd13b7a450c6f79d309ae0f8533139b2aea50b9c518087ebae426","first_seen":"2025-12-27T02:28:52.028769Z","last_seen":"2026-07-28T16:37:43.386346Z","times_seen":10,"resource_available":false,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/js/global.js","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.218Z","timestamp":1785256575218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/js/global.js HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Jul 2026 03:39:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68246c-131db\"\r\nexpires: Wed, 29 Jul 2026 04:36:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78299,"size_decoded":34906,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65498), with no line terminators","md5":"18d7ce499f290070fd36fb2b1247e726","sha1":"4f817fd8f67481de4a5b996c3cd239456963b653","sha256":"42a339d5fd8eb7cfdc0c53c101c0b433bbc54b9b547215fbf410451581763503","sha512":"d6166c942be8e985f375af3a741be523eb3f0eaf13674bb72760c8070edcb3db65ee8ee7f43d80522179c530767157288524906495383ec07d197f3007662cb6","ssdeep":"1536:kEOK1KH7KKFwfrqvb96pwmNv/k8o1u+zBsLDvYoDIZxBK+zdJGc:zsCTMUEVqMo8003","tlshash":"a17319ad7a867cd1c56261b72d21a073f8d94ed87e4d8058f6ce7c3cb87027d8878629","first_seen":"2025-12-07T22:33:46.196719Z","last_seen":"2026-07-28T16:37:43.37472Z","times_seen":37,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b84e095bebe.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.229Z","timestamp":1785256575229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b84e095bebe.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68246a-2dda\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11738,"size_decoded":12281,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8205a689cf068560e44c96df4fbc1104","sha1":"4267c1eb88efaea56d6bfcc623b06e61f8bea850","sha256":"cb8d99555a6dab7812052a60e4cda6fda3192f73d2d8bcf2f3899a95bf9d7171","sha512":"79ce982b1349f9822c532fc0ab9006407dda4c6ce5a1f74f188f11f62f2657215aab84d6a0276a5de8ad948d66bae787c28d7d01a1fd5b088da5d8432f9b0c1f","ssdeep":"192:1HC4CwUtuHBkJ6oswZL/Uc0KhLMlb4p5z6gY1H0hcraupE8En6r9kbsCgRIhy/Rh:PHkP3/zda4p5A1H0WrLC8E6rUsdRPRRz","tlshash":"f532cff5c2a06d81b8802607dbd593389b427f0e42e77c0b9da870ae59c6a758585fb3","first_seen":"2026-07-28T16:32:40.434654Z","last_seen":"2026-07-28T16:37:13.318783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c095cef.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.344Z","timestamp":1785256582344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c095cef.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-606e\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24686,"size_decoded":25054,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 543x222, components 3","md5":"602a4f19b1eec84fd9b4f423631fd69c","sha1":"423b3f9ea279bd8cf2c7496b3189da4a82ade6f8","sha256":"44fd18cc6d53eab3747465de3399ceb581800eabc579098a8ec94ae31b7f31d3","sha512":"76b4fa2059775e81d6823379342437a45127e64246fb171a82959473a7e8220ae7c656f9fb8dce0d75bf117f9b172c316be98bdbea3b6e6224c5b216d295fb32","ssdeep":"768:aFROzE8n1RD+v8LQGnhJn19Roe3dtzUFlZq9r:aFwEW1IOQSJnRoe3dtzoQ1","tlshash":"c2b2f17ab17444fb12e3ea32f2603af0d6d05df919d1a6494ca0625a52f79cc18a37d3","first_seen":"2026-07-28T16:32:40.392847Z","last_seen":"2026-07-28T16:37:13.320278Z","times_seen":3,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c4.maxcloudlink.com/?ch=4CVQH\u0026status=1","fqdn":"c4.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"104.26.11.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.404Z","timestamp":1785256582404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:18:42 GMT","end":"Tue, 29 Sep 2026 07:18:36 GMT"},"fingerprint":{"sha1":"7A:38:6F:4A:2F:A8:BC:EA:D9:DA:43:4C:55:48:83:E5:FC:33:1A:77","sha256":"DF:B4:E6:A2:F7:4D:64:FA:6C:AC:2F:C4:16:1E:F7:6A:F0:D5:45:E1:4A:C5:0C:88:CA:6F:FC:71:1C:05:03:74"}}},"request":{"raw":"HEAD /?ch=4CVQH\u0026status=1 HTTP/1.1\r\nHost: c4.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetindia.info/\r\nOrigin: https://rainbetindia.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=q3btmtlolv3n983r5hst8924gk; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dY%2BR01bua60hcGE4LcPQmWoh7vi%2BsMOjNpHJh6bXqJAeLyQecP3vCNUTp7foBWRmKYTIP08yytRPi6UQ8wlZWu9f%2BMqEJd7j5JwMKAvbam164covIrRG0RJNKMtRNf2OGS8QnNU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2254d682abf56c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-31T07:29:36.190104Z","times_seen":17630838,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":380,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b829850f123.webp","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.241Z","timestamp":1785256575241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b829850f123.webp HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20650\r\nlast-modified: Tue, 28 Jul 2026 03:39:16 GMT\r\netag: \"6a682464-50aa\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20650,"size_decoded":21090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a72d5e044d6b65dd87375aff01d1408f","sha1":"ce886860a5136bc709e8aec0d29b4cf1ed886eb4","sha256":"60a2042720ee869d2f35848159c4246308f649e674099737c25776a304524832","sha512":"82c0ab504d57008dca93d49a6bdc2ac8a428a136916424866e5627256fd925d785aff66c7e5f6690b94db54665e528d32ff8cf5890eb137a9eb8ed17370c087e","ssdeep":"384:1/Cac2pNRHLdEKbMmw1410x9AJJnsLk/3QByqARky7ljzIEB0shgG2RnOz:1/CabJZEKbMSXvsW3QByqzAnZ2ROz","tlshash":"6292d1ea6be112e02586cee025d544a70631f18a4238defe7f079c67e614db1324b653","first_seen":"2026-06-02T03:20:01.082305Z","last_seen":"2026-07-28T16:37:13.340301Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.300Z","timestamp":1785256575300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 4109946\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pybc%2FHtost%2FVd5m4Pe4MXBsuwVwKGyxqVcQVT9Dw8OO0VhbxXL7TLYunLBZjvphpLDLRYCCB3X5s4xqaCUkw4ZoyLA25sv4Zxe4ohZjZA9TD1B87I294zHEKIrm3lCubNwstDOA%3D\"}]}\r\ncf-ray: a2254d3ba991b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127118,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-31T07:25:22.130199Z","times_seen":47535,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"in.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.314Z","timestamp":1785256582314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 12:12:56 GMT","end":"Tue, 06 Oct 2026 13:10:41 GMT"},"fingerprint":{"sha1":"38:B5:55:3E:BA:C8:25:BE:BA:FE:67:3C:6D:47:22:2E:1A:57:E1:11","sha256":"2D:E7:76:35:7D:ED:EC:5A:DD:E0:7E:E0:94:61:BC:F1:C1:78:82:97:52:68:E6:FB:A7:3B:77:C9:86:D4:B6:51"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: in.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 33633\r\nlast-modified: Tue, 28 Jul 2026 07:15:49 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7tNhoNLR1ZLAeuxA9L4VYrtgnXnMeBTOrjo9ENbVjL8mjnDvsBsmIkOD04UyHiMxsCO%2Be3%2BQ1Tf78BUHWeruRE62gost4BAYko5BDECBkdM2Y71fY0eWFRw4MXb%2Bgp1HQ%3D%3D\"}]}\r\ncf-ray: a2254d6779e076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":3183,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-07-29T01:00:42.692787Z","times_seen":370,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"in.analyti.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in.analyti.top/api/event","fqdn":"in.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.337Z","timestamp":1785256582337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 12:12:56 GMT","end":"Tue, 06 Oct 2026 13:10:41 GMT"},"fingerprint":{"sha1":"38:B5:55:3E:BA:C8:25:BE:BA:FE:67:3C:6D:47:22:2E:1A:57:E1:11","sha256":"2D:E7:76:35:7D:ED:EC:5A:DD:E0:7E:E0:94:61:BC:F1:C1:78:82:97:52:68:E6:FB:A7:3B:77:C9:86:D4:B6:51"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: in.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://rainbetindia.info/\r\nContent-Length: 101\r\nOrigin: https://rainbetindia.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":101,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://rainbetindia.info/\",\"d\":\"rainbetindia.info\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GMaBZzgJS_-24vAHtQnC\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FR9ykqzD294fkFVfbolkxwIDD9Zd9K%2F%2BBmNxAPWDDakWgAs3znrto7gFjGnPuLvivmgTvHSi2TOgeZkfGwDtUpxT1OMHhYQxe%2Bk18RZoRbcnosKG4OOcRktQ7Z4DYItRHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254d6799e876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":785,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-31T07:28:32.469583Z","times_seen":444076,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"in.analyti.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/logo.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.343Z","timestamp":1785256582343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/logo.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682462-1b2f\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6959,"size_decoded":7502,"mime_type":"image/png","magic":"PNG image data, 198 x 66, 8-bit/color RGBA, non-interlaced","md5":"52cb0532cb37ddcae5b48bb30b2fd0e9","sha1":"5be0e0fc9d61544f15510578eb24d1d119222851","sha256":"e19db07b7a9aa29714eaef0109be8874b7bdcd4a725dfa12afa6e960a4f2fedc","sha512":"828964f981a1e7a925c54630649e0541fb8b8f5ce8426606302503cf02be40d98cac7e31640a0954487fa2edf25cdf110be20ba8e1eab5eb979902db5f34a5fd","ssdeep":"192:W7K/xtMQsTVxRtdkltgYFirzzw0TdkrheqW7:QYfyTVpd0tKdOcqu","tlshash":"ebe1c02c01fe32152b576201f9717f501b3ab6bb9120488b6137a195dbfffab8647244","first_seen":"2026-07-08T12:05:50.73792Z","last_seen":"2026-07-28T16:37:43.372453Z","times_seen":10,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c0922f2.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.378Z","timestamp":1785256582378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c0922f2.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-5bac\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23468,"size_decoded":23796,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 543x222, components 3","md5":"9dcc2b92aa896fc8a557ca75a845aca9","sha1":"a0db6778e0f0ed6ec79947b15b6b79390a2dd094","sha256":"37a51ec1c0116b373691bfd65f8bd198d8dfce9936e61fe705ad83a3dd423eef","sha512":"1ea3474bdd68f04d21876224e526de12d43c5f15e38e38cc179dc41856765fd664300cf4073edb87c7c2bfbed2ce84bed34c74970f6fe4916a487f5e1f8e6802","ssdeep":"384:aFhIyDLNR9F7VmZUtkRqZLPVefsWqYuJYsik9HQNG8a0nfuW3/stNWwod848nspk:aFhnDLNR9F7+UbLPQzqYuWsN9HQ4uBP+","tlshash":"99b2d0472fa0a070d5c813fd88ba61e2103b6ded61255a54ec44301cfeac99e7bae4e8","first_seen":"2026-07-28T16:32:40.405738Z","last_seen":"2026-07-28T16:37:13.334243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b83716a9b7e.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.233Z","timestamp":1785256575233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b83716a9b7e.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-d2f0\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54000,"size_decoded":54553,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"2ed2ba42e20d2c254d5f027c5a917df2","sha1":"8bc602d6c7ea4d867e2cdcefb28ddc21088acf54","sha256":"93f334c07c70d6b1a4c1c3bd5fad661e37c930c4e87d72ff5d6e28aaefa605c3","sha512":"99352d5c41adb57b50c99d55afeb1cd9a414e46a9945afcfdae80169df29fbf34bd3a5bf4e577b26e0fc7bfaf4d513aa1f7483330d98fdd7987500dd94505b95","ssdeep":"1536:NBSI2IHwct0GLhNwvFrysZo3w5/HAyFSTjYuqW:jSI2IHwMvLrwvlysmw5/HuP","tlshash":"ec33129bd7aec22dd19d6e2db7a8c42e6daf5ba40bf85204510c83835cf3091d29ed53","first_seen":"2026-07-28T16:32:40.422645Z","last_seen":"2026-07-28T16:37:13.325757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b82985160f7.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.240Z","timestamp":1785256575240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b82985160f7.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682464-35b0\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13744,"size_decoded":14218,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 400x400, components 3","md5":"dad87ca84119802d00d2f272a8faad4b","sha1":"9b239082f25c42a438482b5c58d422d89a3a13eb","sha256":"3a7cbc0dd26279ccacaa274e2dc6a4af69ee54c81ab0cb64001850433238bb3c","sha512":"e074ef9671915dd95988e2e40cabaf1c9e66812f85c8046f437682bdb476368a02d35f81100485637a028b63adf958e2cea2ba62b5adbbdc4f10bc38025d0609","ssdeep":"192:aFyCSFl2/oZZW7RU4Q8hWL4l7oLnUYBaFcNKyDBIyO+Wg7k5eQIoL4GJYEIorOG4:aFyCO0U4Q+WLBREudIyXkuslH4","tlshash":"e352d09f6f57a43c82a3c82e285941228e58f3d95beb840e51a4bc7a5f6a404cfe2d00","first_seen":"2026-07-28T16:32:40.414995Z","last_seen":"2026-07-28T16:37:13.314948Z","times_seen":3,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b82984c6835.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.244Z","timestamp":1785256575244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b82984c6835.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682462-7e69\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32361,"size_decoded":32849,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x500, components 3","md5":"d4ed439ee32c00b03ce6caf6e14bbec7","sha1":"1b115513db7e01129527d0ed40063f420ec2e1a2","sha256":"f9730a796ba85c25e349ad05a3e7a3470879a031e783265ac839c90bbe3d304b","sha512":"6aa7bf49492609ee55c9cb65433d99463c262ed0a9b52c522ed5379ba1f86e1719f399e27e0d167e7526e4337f6b40b7d0cb581a15215a16a911204ec36af5ba","ssdeep":"768:fmEnzcghepKkoYG/0PsU+E7ycQoLSD1yPkD0LewbysFlop/:fmezrkoYGMP1+E7ycgYsIL8s3oR","tlshash":"a4e2f13b6cfcd042d6a101e279a55a85461b6ecee55c837c062207a4dfb6d32f2f624f","first_seen":"2026-07-28T16:32:34.343081Z","last_seen":"2026-07-28T16:37:43.386996Z","times_seen":6,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c093755.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.377Z","timestamp":1785256582377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c093755.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-bdd3\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48595,"size_decoded":49143,"mime_type":"image/png","magic":"PNG image data, 543 x 222, 8-bit colormap, non-interlaced","md5":"4541d3afe760034efc61e8c301e6a5dd","sha1":"d77018bae119c4b28a21ce1181001a44ace24c8c","sha256":"2685ef47c8b8668ff36f7cae75258e47887b573a6ba33cfec1a61e97d652e050","sha512":"b34bbd6d8708f13ac429586c94e53afadac12c64f5384ae8f682a6a8b02c7f195c15edeb11e3dc28e55edfe12a1b1b1a02d7c9e7d72493f090e9a0be2e0dc29c","ssdeep":"768:MYmf1gTHa6Azp69uJmjaVoBm/CQFXCtxjSV2hQqXHlrkx3nqvVEKqTOXJ7qdoYX:M1f1ctI1cBmrXCtxjM2rVgxkVEFSXJQZ","tlshash":"412302ec01e9c191abd1a975fdee3a700669e02c0ff751e5dd31d05c892bc0486ad5bb","first_seen":"2026-06-08T20:56:25.840795Z","last_seen":"2026-07-28T16:37:13.328893Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papi.maxcloudlink.com/getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=rainbetindia.info","fqdn":"papi.maxcloudlink.com","domain":"maxcloudlink.com","tld":"com"},"ip":{"addr":"104.26.11.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.412Z","timestamp":1785256582412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxcloudlink.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:18:42 GMT","end":"Tue, 29 Sep 2026 07:18:36 GMT"},"fingerprint":{"sha1":"7A:38:6F:4A:2F:A8:BC:EA:D9:DA:43:4C:55:48:83:E5:FC:33:1A:77","sha256":"DF:B4:E6:A2:F7:4D:64:FA:6C:AC:2F:C4:16:1E:F7:6A:F0:D5:45:E1:4A:C5:0C:88:CA:6F:FC:71:1C:05:03:74"}}},"request":{"raw":"GET /getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=rainbetindia.info HTTP/1.1\r\nHost: papi.maxcloudlink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rainbetindia.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=pavn8sb6eqp5gdp0o7jfkgik3r; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLuHh1YV%2FtOvQtJ7tM4JmcDPaYtRzY%2FL1nIIbCCrDhhOukTqw2wyIS%2BXAMVry6jWoESTFsBz5IB4TKTlE88qIngZ7JNDcS%2FAx%2Bvbgq5Zc1wNaujo0BeodYJATzrLMi%2FL%2BSRj2GH1lQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2254d682ac456c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":32,"size_decoded":928,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"dadaa162352da434105854abc704453e","sha1":"ee297962e938ba92c096ab03dacfe0e8689962c7","sha256":"6fc0b4ac53117dfa68da3c83a3f8466a438db5e4f871a1eaacb6e29b77958e51","sha512":"74e91bf44989ae3e1b095690a894919726c637528f3687c5eb532708c680e34d217757faf092b35d1cff9ce365176b78bd2cff0fb180480ed83c2280e9d1f9a5","ssdeep":"","tlshash":"6d8000e0283c0223a2820008208e02880028288c2cb00b088e0c0a2c830b0a0a200032","first_seen":"2026-07-28T16:32:40.408041Z","last_seen":"2026-07-28T16:37:13.335009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":5,"connect":3,"send":0,"wait":393,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b837168552c.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.237Z","timestamp":1785256575237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b837168552c.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682465-9085\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36997,"size_decoded":37545,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"c50bf6173e638567ec19908019d6b11a","sha1":"d53ec5ab55e9f930eb3d2d49bea71efa0d309d0b","sha256":"ea31f1667dbccd86bce4acf2f6965f6e5903c79d237e1d6c85961a2cdec155f2","sha512":"ffb76fb519752dc010d49ed85c41666fdea22f81e8cf85770ea00a24ef84d16175b8e9c9253dcc99d84c7a8f20391407c6f137618ea44f0634f49d2c9fded062","ssdeep":"768:dvFgdp5al6HUI8I+M6fx83XvosGpdh9Z8xEsnrPdL+UwoOLmlvLqN:dvG4lDIb+M6f6gbh1AxL+UOSi","tlshash":"21f202c3c26094b957b15badeb8bbb8fd47d22528c51d07887c54412bd496d19a2fa0c","first_seen":"2026-07-28T16:32:40.385953Z","last_seen":"2026-07-28T16:37:13.313781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"in.analyti.top/api/event","fqdn":"in.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.356Z","timestamp":1785256582356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 12:12:56 GMT","end":"Tue, 06 Oct 2026 13:10:41 GMT"},"fingerprint":{"sha1":"38:B5:55:3E:BA:C8:25:BE:BA:FE:67:3C:6D:47:22:2E:1A:57:E1:11","sha256":"2D:E7:76:35:7D:ED:EC:5A:DD:E0:7E:E0:94:61:BC:F1:C1:78:82:97:52:68:E6:FB:A7:3B:77:C9:86:D4:B6:51"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: in.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://rainbetindia.info/\r\nContent-Length: 90\r\nOrigin: https://rainbetindia.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://rainbetindia.info/\",\"d\":\"in-all\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GMaBZzjI2ODxG7YIPw5B\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=znt9CZDS77puKlDHlWnVvaVYIjWKrfaesxbRmDl%2FuQGuYfEpk7LJj0QbflZ%2F2llGdq3%2Fv5hIUqFTytFje9whLDKkPt0xk5Biaa5W8sFqJ7e6gxNA5qlic%2BS497jspcLXfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2254d67b9ee76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":785,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-31T07:28:32.469583Z","times_seen":444076,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"in.analyti.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c09a7ec.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.374Z","timestamp":1785256582374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c09a7ec.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682467-5b73\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23411,"size_decoded":23710,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 543x222, components 3","md5":"fcbe3f4a375c771c2586b535448c7f7b","sha1":"2b5f90c4747de4ca9e8cf254220a6e671bec540b","sha256":"8e90b2147e8b452c5631c6799797c45b68473a77d06c3684585d2b72a587ad30","sha512":"5b945313836fb410bcba3133b8970c2b976c0c3ebb24f170c399cc1c945cd60af08fcbc502d687117e8db921706d31d193e7c0fe1d30d4414dde9f4b23133f8c","ssdeep":"384:aFDXFeAK8zpDtJxSNZoVegwIz0sOrlag9l7T5pu7QS79Sno6Z9oulSO61rmG:aFDXFNDzpHxSNWVx0Nl/9l35lS79Snob","tlshash":"7fb2e1b2cbd5879ac39db8bf5df0f58a57c3096ab204034ac5c58ab8f0560e359196dc","first_seen":"2026-07-28T16:32:40.426179Z","last_seen":"2026-07-28T16:37:13.331125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b854861f88a.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.248Z","timestamp":1785256575248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b854861f88a.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a68246b-e622\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58914,"size_decoded":55912,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"dca95eab16eb1dc21b7b6170d38f5c8c","sha1":"a54854c17e1a45555932c2a1aaa3c2ce1788a2a9","sha256":"86c5710341999077dc3c0ef409c53bef489eeb3ae1f2349622379fc27aec4b30","sha512":"62018a15e49a9ebd01f59cb3d4a49d82b010ae22124584067c871b5e2b592907222122b5430bd865a2f91b4b62290a6b6ecfe31ffc0638191be15a2977812f56","ssdeep":"1536:KXRAqqFrK+Ixau4GCjqQP4jMFmIsYJ4Yls8rI:KXR4KDxl/Cjq0KMFmI5JXlHrI","tlshash":"9e43e15b8c8f3fa9bc1c29ba425217ae4137c677b0263cfb7f11e1e16cd556a1031a28","first_seen":"2026-07-28T16:32:40.442Z","last_seen":"2026-07-28T16:37:13.3169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838c09b90d.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.346Z","timestamp":1785256582346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838c09b90d.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682467-e438\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58424,"size_decoded":57701,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1087x444, components 3","md5":"65e6e3ed6ffb23b183e0a9cc805bd155","sha1":"af23d9acf0bc5b3fe421f0bf45e04e0f839331f6","sha256":"2759391bac06355e297c02b550b5858d2e31c11e5f78ca37f59421fa7d191b57","sha512":"4481e5d93dff388c830c70546a83dddb7cae4930a7c4afd1c78a1705a43123539b5977eeedc7b2bb21e630a48fbbb21ac4034d8993222b8981db9f858269f0f5","ssdeep":"1536:aFH4c+7NVbeS9eVHe/CMYLlgyyAsgckBHwCnO6DSc:s0VbeyyHe3KBVdOc","tlshash":"1643017caf5f550bed1802f54995016e5b9999b64b0786cf42c7762f8a202222fff348","first_seen":"2026-07-28T16:32:40.403227Z","last_seen":"2026-07-28T16:37:13.323343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":895,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b838236ce9e.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:22.348Z","timestamp":1785256582348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b838236ce9e.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682466-3e9e\"\r\nexpires: Thu, 27 Aug 2026 16:36:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16030,"size_decoded":16480,"mime_type":"image/png","magic":"PNG image data, 221 x 199, 8-bit colormap, non-interlaced","md5":"a30e0d9e19b31f8c9c906d905165b8f9","sha1":"6c98c08f60d46fbc4fe5e1a2338c5fc02694c29d","sha256":"b54dd9b7b198c04d8e7862e62b686aec2c0d94eecc2412bc063f36fb1397d3c5","sha512":"b1638d8a1f675f790cdb98fbf7fd621aaa6abdbf4df3ddc4d82bc0daa009b83bff448c5110b3d4d7f082c4e914ae0e421bf65d8b5d8854cdbe653c301e54162e","ssdeep":"384:VRc2j7LO2sH2fUlaJmorZH3HHBm/XcsDbL4DR1IwluHCElG61:f13OvMWImor9HHBQoV1nTCG61","tlshash":"a272b0e7d38e25eb25060e6dfc30184dad7e6d09b876f4bb2517b610aa3a054cd2f524","first_seen":"2025-06-20T20:07:47.507599Z","last_seen":"2026-07-28T16:37:13.324118Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@3.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.210Z","timestamp":1785256575210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/remixicon@3.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15663\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1e1f5-48QJs2Ev7WXpvZWlpyTMbKw/aZY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230037-FRA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4204992\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMe0ZVuY3y6eEWd21zY5T2vaxczs1tOTH3ukvlt1seUaErVZqsK%2FhjhKvBpMBkG7VGmIkuV20h4zcw1yauMKW0g80a7LugJGHVDQwNDQzzIDL0lM1pzR1DMJ0Vkf9qk7nJM%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a2254d3b38c98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123381,"size_decoded":16793,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1502679c4edcf458b19dce1380a0f79","sha1":"e3c409b3612fed65e9bd95a5a724cc6cac3f6996","sha256":"3319df8b9c28451700b6dc398868f64e5554b3cb164d188bf6f0cac6b6e39793","sha512":"1d75d1d25db23301c3ac3cb125bacc0fd78bbcf7b7cf7a8bdcf3dea33353b221c9104371c7c0c7d82c66574e62c06d1dc28cf99f8810650c982d436dd567607e","ssdeep":"1536:Ykcvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM2GSsRotP:Y58v4cYcKZ7clA","tlshash":"42c3c8beea4f45801702e8d66367278163b9b67dc9817c7ad413788df3c766883862dc","first_seen":"2023-09-03T13:15:01Z","last_seen":"2026-07-31T04:25:56.327685Z","times_seen":1954,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"in.analyti.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"in.analyti.top","domain":"analyti.top","tld":"top"},"ip":{"addr":"104.21.62.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.221Z","timestamp":1785256575221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analyti.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 12:12:56 GMT","end":"Tue, 06 Oct 2026 13:10:41 GMT"},"fingerprint":{"sha1":"38:B5:55:3E:BA:C8:25:BE:BA:FE:67:3C:6D:47:22:2E:1A:57:E1:11","sha256":"2D:E7:76:35:7D:ED:EC:5A:DD:E0:7E:E0:94:61:BC:F1:C1:78:82:97:52:68:E6:FB:A7:3B:77:C9:86:D4:B6:51"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: in.analyti.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 33625\r\nlast-modified: Tue, 28 Jul 2026 07:15:49 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FgIuguO64J93BONJQ7a%2FNFMYUsMyvRo6dbZhZRk1IMdAcioqrhl9LkyqobKZC5r5Fm%2F%2Fr7h%2FzBmLiAK%2F7jbgRlTMUA%2BZUgSyrKKmXYB9JMu19F7QI%2BCIGFcdwaeoRhKZQ%3D%3D\"}]}\r\ncf-ray: a2254d3b4a4b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":3193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-07-29T01:00:42.692787Z","times_seen":370,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":6,"connect":22,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"in.analyti.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b837168b60e.png","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.234Z","timestamp":1785256575234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b837168b60e.png HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Jul 2026 03:39:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682465-260b\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9739,"size_decoded":10282,"mime_type":"image/png","magic":"PNG image data, 107 x 107, 8-bit/color RGBA, non-interlaced","md5":"3d2eaef9fab1688dad0ad2f64d9a3a0e","sha1":"0197e5d2ed118b74c22a52b6ccd5dc1992d9c514","sha256":"58ba383d4d245b63a1e2be1090eadeb4a225b5d0799a35c008823cebd01bcd78","sha512":"95c6d0e90ec3867f2e60db38375b868985474b634e3cb788bec4d8effb7a1668246e5c252895652831c461b642daa43e117e9ac7e2d8a78d0c504ac357d75ea1","ssdeep":"192:SPSrEX3Rqeh0UTXHVkddFDm2eurvvME90waTorvo+Pq/aSKSHM:S6YHAe1TXiFDm2eWvvX0wCeoWCaSKH","tlshash":"3112af1a7183ed8d0d4ec18b029eef911883114c418d5277a8a9e4bfd71771e1eacdbb","first_seen":"2024-08-19T13:04:57.622846Z","last_seen":"2026-07-28T16:37:43.38543Z","times_seen":8,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":873,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbetindia.info/static/images/rainbetindiainfo68b8298518322.jpg","fqdn":"rainbetindia.info","domain":"rainbetindia.info","tld":"info"},"ip":{"addr":"69.165.75.129","port":443,"asn":55054,"as":"IPMEETIP","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbetindia.info/","date":"2026-07-28T16:36:15.242Z","timestamp":1785256575242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbetindia.info","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 03:41:53 GMT","end":"Mon, 26 Oct 2026 03:41:52 GMT"},"fingerprint":{"sha1":"02:FD:9B:25:CE:2A:29:68:CE:70:7E:C4:B6:94:C5:95:B1:DE:6B:C0","sha256":"8B:D6:70:FD:8F:C3:79:16:A4:CD:FF:D6:36:35:5E:15:53:85:75:07:3D:27:F9:2A:8A:46:0E:1D:12:EB:BF:EE"}}},"request":{"raw":"GET /static/images/rainbetindiainfo68b8298518322.jpg HTTP/1.1\r\nHost: rainbetindia.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbetindia.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 28 Jul 2026 16:36:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 28 Jul 2026 03:39:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a682464-4cf0\"\r\nexpires: Thu, 27 Aug 2026 16:36:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19696,"size_decoded":20133,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 400x400, components 3","md5":"f5efe5858e68c79267c6ed2bc9e54638","sha1":"8564197b14e5da5a36069959371b7269231931ac","sha256":"84f571e510718e465a9bb3d6c4267b3df5a88545d32f507089ff38520765f493","sha512":"23f7ad414393878357669302f88e2fedd1de461545eba4eb0aa5cceeca47a8a49ff4b8417bfd5937d48725eb63dd456851d50cee52432187d636222cab86cc06","ssdeep":"384:aFzBxPOcBM0UQUhM2gqBMUiI3WYFkY9zv9X8PmJdqvRs4n:aFPPOcBxkfgqBME3WUpz7rqvG4n","tlshash":"8792d004f7c81919bf6ab53deccda1a5ee245ff6c9434122f3f01859c52096a290c7eb","first_seen":"2026-07-28T16:32:40.399987Z","last_seen":"2026-07-28T16:37:13.338677Z","times_seen":3,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"rainbetindia.info","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}