{"report_id":"f874f994-8685-4718-8686-dcd5d5d82af8","version":0,"status":"done","tags":[],"date":"2026-09-15T13:27:03Z","url":{"schema":"http","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"104.21.43.247","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"title":"rainbowfn.net/","dom":{"size":14931,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4202)","md5":"968e8863dabe59e420b3fe555ec30417","sha1":"c315a43e987f1ed4030ec4401a699fb3eadc53b3","sha256":"8d72d76de675eccd42dfbbca033a8ec9b2a19d5a88f95df4dd6808805f297949","sha512":"3a59d7a208fb519a9378a91eedaf15b425619270310cf37edb964780e90087561abcc7194726c22e6491bf2ff12812ac7ac0b06099a1f86a021224ed83e288d2","ssdeep":"384:xGgmXLdKJ93bK4EQIF9S36SZCxV2iY1xI:xGg8LFxbF9S3zQxV2iY1xI","tlshash":"26627ce315f4c798b296d366fae1b405bd222173d146cd90b1ce24e84f60ee388cb962","dom_hash":"domhash7e106bfe085bb58fce128d483217b230","first_seen":"2026-09-15T13:27:02.13322Z","last_seen":"2026-09-15T13:27:04.412655Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"104.21.43.247","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:27:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rainbowfn.net","ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-09-15T13:26:55.489357Z","last_seen":"2026-09-15T13:26:55.489357Z","alert_count":10,"request_count":10,"received_data":600951,"sent_data":5281,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rainbowfn.net/assets/index-4bf9dcb5.js","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb55e800c0fe1f801fd7915e0256c67a","sha1":"f1bfd328f6769b37ea8ba0e80d40eed6be1ad499","sha256":"a910bf0ee13b6ae8b84f074f1c24813c0ead3dc4895ac10ec568db2567b78f94","sha512":"ca6de2f82965ed6385d9841df121e7782440a9dab5ea476f3d246eb18d12586f9db450d2cefbe5ba92b17e4b408c92174bf98637b6d19a29a6114d07bf3e16a6","ssdeep":"3072:leDat6cDsU7qKTcDM4Qn8LMS9urXpqJDRnh:ovcDsU7qKT0MP8oS9urXIJDRh","tlshash":"dbd33cd9e50a4fff58f94c54a989001031a81fd7a48ccca3f7f96e5a27bacd42389b15","size":132827,"data":"","first_seen":"2026-03-13T03:10:01.766856Z","last_seen":"2026-09-15T13:38:37.912447Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/charting_library/charting_library.min.js","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-15T14:41:05.975123Z","times_seen":1464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a82aa9f800317f1e1010d4e4c6dfc7e7","sha1":"88ce107361200920effb79786e62c74ce47c2081","sha256":"ba7af16fd7224d7af888221a8603bd34aaf170334be7a17a44ad6cd4645a7722","sha512":"63606e456be9a8219c0577c76af064ac2f1a081fbca074d7cb6714adce7e23ca86dff2cae392fb279890ebb0bcce9ac3119fca71dc1e33193cf363bffdc02e66","ssdeep":"","tlshash":"cb11abfe191aa0296303404e976b7801642250a9400a184173cc9b9dbb9abbde0cbb8c","size":1034,"data":"","first_seen":"2026-08-10T18:17:20.948152Z","last_seen":"2026-09-15T13:38:37.956623Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-15T15:01:10.735463Z","times_seen":42822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-15T15:01:10.736282Z","times_seen":44155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rainbowfn.net/resource/fonts/Arial.ttf","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.573Z","timestamp":1789478788573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rainbowfn.net/assets/index-3d6c385f.css\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:28 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 08:54:05 GMT\r\npriority: u=3,i=?0\r\netag: \"69a5502d-ff9e4\"\r\naccept-ranges: bytes\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvBmvtGnclbw0NUFcp0soS80%2F6NOfBxrcFD8enGPsWAW7P7igBN40RImxMpGtZgC8JFHbBzZN5ON5ozmbiG8fe53iiB86BCijv18Vh2h93m0uSYoiM%2BDb2HcR%2BnANsAe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69ca930c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:26:25.073Z","timestamp":1789478785073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:26 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 02 Mar 2026 08:54:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nR%2F7wdk%2FjLSrczet5ppcFLwRRzboGANoZu2uAnk7mX%2FC7QcJU8dxuB1ohvXJ5qG22xKHhKJiP3nOGKq65Sigo34LibcpsQO454jP1BikdLgih6qXsR8QynyAG2x62pAn\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nset-cookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4; path=/; expires=Tue, 15-Sep-26 16:00:00 GMT; HttpOnly\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b7f6871fe1c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"p_uv_id","value":"2b58adfa2c8be32657d3d56d661be9e4","quoted":false,"path":"/","raw_expires":"Tue, 15-Sep-26 16:00:00 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"p_uv_id=2b58adfa2c8be32657d3d56d661be9e4; path=/; expires=Tue, 15-Sep-26 16:00:00 GMT; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15160,"size_decoded":8396,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4168)","md5":"2ae965b16c34a2580d65c0bfb033b9e2","sha1":"46ece088c5f6b6bdc2a8e3e77b2a093ccdcf30e5","sha256":"e94533352f04ba3e43ea70c93860ccdf11660cee485848de9442c9358b0d9aa0","sha512":"21dd25d5275e5f6e53e7d7341cc298e6ec91d2c42b343f45485e55749fd366a02e148a76398b3f2f1cf704fc8adf8040305ff31f3b8389ea3318def6582aa8e0","ssdeep":"384:sYSKmXLdKJ93bxEQIF9S3qPZCxy2LiHxo:sxK8LxbF9S3QQxy2LiHxo","tlshash":"b1625ce755f4c7d4729ad336bae1b0057d2221b3d646cd8871de24e84f50ed2c8cbaa2","first_seen":"2026-03-13T03:10:01.790099Z","last_seen":"2026-09-15T13:38:37.933307Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3388,"timings":{"blocked":-1,"dns":4,"connect":43,"send":0,"wait":1876,"receive":1465,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/favicon.ico","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.447Z","timestamp":1789478788447,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/assets/vendor-25bf8d9e.js","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.477Z","timestamp":1789478788477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /assets/vendor-25bf8d9e.js HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 08:54:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO7Zw3stRoCPGqvD7TkfMae3sbtbqXckLniEo%2BN05WRjhv%2Ba7lWcZCgepIeU6FqfvGfbguN6HFWtss8OPn6g6TrkD759T%2BF4XesnRpevud0IgoP%2F27ioSarc%2Bj9KtRRE\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5502d-f86ba\"\r\ncontent-encoding: gzip\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69c0928c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T15:51:40.641539Z","times_seen":18478194,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/assets/index-3d6c385f.css","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.480Z","timestamp":1789478788480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /assets/index-3d6c385f.css HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 08:54:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uer6sjEbMssaunm80S0nUEEQ0RTyzu8vKltTlg2UDpTNADGoyqwOGzFMWwt2H42kCLhsqSLvHjgXWPMaUqdQc2d9aj5ZlanWRvysmWumHOPQ8zHXmYAlzQsa68YQw%2BZk\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69a5502d-4e344\"\r\ncontent-encoding: gzip\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69c092ac8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320324,"size_decoded":78755,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"606dd01077ea74747b4bade47c92ab1b","sha1":"23f50dae11ec854313e1ac7c0fb19a8590730b33","sha256":"3d6c385f32683f8c89b68375513bf8bdb2657b2ead7da623ea8bee00f84e68c7","sha512":"7bb293f9403cc2bfebdbe583558920b0af72aef2e37baca8ce511048dea232a3030e67cac08e18c85b05617aa94d72b3114d572f852de7a50bafd65ba49bb447","ssdeep":"6144:nevxsalDWgEkZ8w71ZACkFDS3vyf58rBeV05T4:ev10gdZ8w71ZACkFDS3vyf58rBeV05T4","tlshash":"aa64d7a9a590117c6f27aa759bce5ad8f23ce6719c018de8f20150094fc7ffa2363617","first_seen":"2026-03-09T21:57:36.396383Z","last_seen":"2026-09-15T13:38:37.892151Z","times_seen":25,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/platform/dev/logo_144.png?2.0.1772439726270","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:30.984Z","timestamp":1789478790984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1772439726270 HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 08:54:04 GMT\r\npriority: u=6,i=?0\r\netag: \"69a5502c-2200\"\r\naccept-ranges: bytes\r\nage: 7\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BQKFvLOky11ttoBH93BBYs3ySRQahWtrgHPx%2BcpoxZwQj1w%2Buvb5uajPQrsPe22uAhHDrTicsaA%2BqB7aCyx2ARyoHJ0DBE8jRfv21Zvm79ggmMbJQp08sIN9SKky%2FIo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f6abbab1c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8704,"size_decoded":9400,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"d95e73753b2f0af7b6cc618274c2344b","sha1":"041bbb05cfc88c83b81963c509a0f4dc4a143b40","sha256":"2be32ebf37e4704833b7d293657cc754f7f4b39c43c618717acadf6c9d9eba1c","sha512":"64320a175eadd1cf658506d82f7bc8cc9e82cf560cad1e3b61b3dfa837566d5bb63f817254ba25046f6c0db08c3fef845a3795cd31686c62dab3707a9bc2eb89","ssdeep":"192:tRW6RkmGXTvSR2FR9O/k57k7xDByF+SOrXZnuwpasunxwWGFt8vXVz:LWIdKTuYR9byJBHSiuBNxlUU","tlshash":"f702afde12e43789490ecb512910bf50ada698d4b5a39db5c332e146c829e9c1637f2b","first_seen":"2025-06-05T02:32:06.437936Z","last_seen":"2026-09-15T13:38:37.900644Z","times_seen":104,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/platform/dev/favicon.ico?2.0.1772439726270","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:30.986Z","timestamp":1789478790986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1772439726270 HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:31 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEfxZKVqMwf7m0CPCWrmvpyvp%2FGAgYqMupBk3t8JVb%2FG%2FB3ksIuC5ZmhyoVUCJ7Osz1mTW3hmCzJYtqaySaApJtUPrNj8x4B3Y8XVaUvv%2FWMB6M3U45ruRQ6Hh%2FXkQ4w\"}]}\r\nlast-modified: Mon, 02 Mar 2026 08:54:04 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69a5502c-34ca\"\r\nage: 7\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b7f6abbab0c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13514,"size_decoded":3098,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 57x57, 32 bits/pixel","md5":"ec586768dce16790f7056909d45f0f46","sha1":"d026d8be78cea01b9395f44d5fc56d71aa649699","sha256":"34bf3b1776cb9aab67f92cd312a575de1b028c8831c31c613b3530e43738f3d8","sha512":"0554039bad35bd47f9adfd651feb75e4761a30276c91a2202132e75861e0411e132ce38f37952d7bee32a86959ed8ce998ebc3ada16a2aa5340d50c7de85cc64","ssdeep":"192:qX+k4ik9E9KK+mUcCfBUyBm1ivuech4Psx:W+k4ik9E9KK+YCpUyE1ivuec5x","tlshash":"2052adc16f7e14a1d20947ff87796ac6c009acf5b7c2a4a393f37314a139e1e7a25605","first_seen":"2025-06-05T02:32:06.409871Z","last_seen":"2026-09-15T13:38:37.924063Z","times_seen":58,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/charting_library/charting_library.min.js","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:27.195Z","timestamp":1789478787195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 08:54:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4c3thgbxzpsLtw2WQgkJREZ%2FMfYprBFGFvJitSbUtqjrpx%2BY9S%2BOeBHeSEt%2F0wWJgN9UrLPcGvPdfXsLE58IWIOVnRTKv%2BQBOlzNjwBbwMD5iqZiua6LVaWz5cVeNqd7\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69a5502c-2a6a\"\r\ncontent-encoding: gzip\r\nage: 8\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69408d0c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-15T14:41:05.975123Z","times_seen":1464,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/assets/index-4bf9dcb5.js","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.475Z","timestamp":1789478788475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /assets/index-4bf9dcb5.js HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 Mar 2026 08:54:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2F70H0FD21PxUlrFv51KfIJPAi5wcOEHpbACfFYhdWVgxH0wnjh4rLRR63jRwb8kZsm8FiIM3YzAG98kJM3R95YuzOOzoptQ1eYczHfaZY5tD7SJNo00Cbm%2FfP6uQbTm\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69a5502d-206db\"\r\ncontent-encoding: gzip\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69c0927c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132827,"size_decoded":40400,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"eb55e800c0fe1f801fd7915e0256c67a","sha1":"f1bfd328f6769b37ea8ba0e80d40eed6be1ad499","sha256":"a910bf0ee13b6ae8b84f074f1c24813c0ead3dc4895ac10ec568db2567b78f94","sha512":"ca6de2f82965ed6385d9841df121e7782440a9dab5ea476f3d246eb18d12586f9db450d2cefbe5ba92b17e4b408c92174bf98637b6d19a29a6114d07bf3e16a6","ssdeep":"3072:leDat6cDsU7qKTcDM4Qn8LMS9urXpqJDRnh:ovcDsU7qKT0MP8oS9urXIJDRh","tlshash":"dbd33cd9e50a4fff58f94c54a989001031a81fd7a48ccca3f7f96e5a27bacd42389b15","first_seen":"2026-03-13T03:10:01.766856Z","last_seen":"2026-09-15T13:38:37.912447Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":12501,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rainbowfn.net/assets/vendor-0926603b.css","fqdn":"rainbowfn.net","domain":"rainbowfn.net","tld":"net"},"ip":{"addr":"172.67.190.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rainbowfn.net/","date":"2026-09-15T13:26:28.479Z","timestamp":1789478788479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rainbowfn.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:32:34 GMT","end":"Sun, 29 Nov 2026 16:32:33 GMT"},"fingerprint":{"sha1":"18:88:45:E1:8F:E0:A2:8E:05:50:A6:4E:04:24:82:8D:8D:53:48:95","sha256":"37:8D:FB:F2:47:4E:13:03:A4:79:97:48:C5:E1:45:40:9C:7F:0C:D3:69:72:D6:60:6A:46:F4:7E:E2:3F:0F:A7"}}},"request":{"raw":"GET /assets/vendor-0926603b.css HTTP/1.1\r\nHost: rainbowfn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rainbowfn.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: p_uv_id=2b58adfa2c8be32657d3d56d661be9e4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:26:28 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 08:54:05 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bf%2FMgSKsYlKENDGzmsf6VVRGCtx1yHBJAbRtZSPmEAsxxxBGXaKSIon%2Bjpsy1kGhI5fvWWz5%2B8LqoEksBRBNsmnH8p0OzuoMhecpZmzT%2BSCM5AHL6iqZs2zafnnr5ZbH\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69a5502d-16c16\"\r\ncontent-encoding: gzip\r\nage: 7\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b7f69c0929c8a9-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93206,"size_decoded":40417,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"b7646ab2157bda9f87a85a136b0e10b7","sha1":"562dcb5834c8b11fa0b43167e43069facc9476a4","sha256":"0926603b8bb00ec6b9f2e371777d368bac932d0a8fbd8e8c6c9d8a123e5894e4","sha512":"1824a7e60d64715a509a04d661f04b776851e71f345e6bc4cbece5a8f217bfb6b5907867391b0162e162c6ec491cffa58d67e1cc46eb97295ec021de6e7b46ea","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/za:BnNIClDsIxuVS8na","tlshash":"d793d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-01T04:11:58.654275Z","last_seen":"2026-09-15T13:38:37.934243Z","times_seen":55,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rainbowfn.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}