{"report_id":"0b81db2c-46cf-4c35-bef3-d0e735793f74","version":6,"status":"done","tags":[],"date":"2026-02-13T21:11:39Z","url":{"schema":"https","addr":"bank0m.cc/","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"104.21.54.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bank0m.cc/","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"title":"Bankomat | Bankomat.cc | Bankomat.sc Login","dom":{"size":4446,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c2fa4724148d8368e06d93eb585cf506","sha1":"5d1560763f1254b5fc58587bb11652fc8a5f9d23","sha256":"5430d2366644900f99958fc8f7a0051f6daa4bdb9d8df41095d69abeb9906726","sha512":"9f44a2b3cc30ababcae44e2c4029a46a92916ea3b333e9d6a47ac01b096e0ba22ec2a005d697fc31fb41c65115b77da2a3186e5aa18f58b6a5d443db1f70c8fb","ssdeep":"96:4SNGW959r8JP/FWF9FYFKF8FrT4Jf0FWF9FYFKF8FIjni70Q3+YNLDqw22M+QJWb:4ScRnFWF9FYFKF8FgcFWF9FYFKF8FIjG","tlshash":"e09153f13cea095e3411d9b06782fecd6de0920361159864beee317baf48ca944332dc","dom_hash":"domhash657bf6f77abd4f48a58f3ac2264c0dcc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bank0m.cc/","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"104.21.54.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T21:11:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bank0m.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-10-10T13:02:51.783444Z","last_seen":"2026-02-13T04:09:13.324199Z","alert_count":5,"request_count":5,"received_data":282036,"sent_data":2383,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bank0m.cc/","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c6b790da3ba974d78c8d52fff7705ee","sha1":"1e45d4fdf336d609cfc9e98941f908777456ed44","sha256":"325e92d03ca8a45139d5abb0cf5e42040eb4d956429dbc086879f725fc6225ec","sha512":"047d193c5d9daa468a802685dce78c5bab66ddbe6e692702c5a82e834039efcc3129ecaba2a1f451269c5a71df44410e0b2c0f73c17236d0d148cf13a34f15ab","ssdeep":"","tlshash":"86d0220c22eb10ad280129f84bbff118040ce0032203c909be7db4524fc24045eb818e","size":203,"data":"","first_seen":"2025-10-10T13:02:55.788528Z","last_seen":"2026-02-13T21:11:42.570725Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bank0m.cc/","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T21:11:18.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bank0m.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:34:24 GMT","end":"Sat, 25 Apr 2026 15:32:50 GMT"},"fingerprint":{"sha1":"6D:B4:E7:40:F3:5A:7F:A4:CC:5D:1E:1A:B8:2D:D9:FD:0D:2B:D5:41","sha256":"43:69:3D:71:6F:C1:BB:CD:4B:EC:A7:49:19:66:1F:85:DF:58:58:E3:B4:CE:BE:B3:E4:03:05:CA:87:90:CC:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bank0m.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:11:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=7e07cac85d71cb8450fb5055708eb23f; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgzwLxiJ4CLpEYiDzwhre96mixZQxBvabb7SEnljP2I4N4oAz7KUBjOLsVAZ7MCHAnrzY7cRW%2F3NtirR5uFU%2F9HJjyqaKYs69g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd7514479834435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4365,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"44a6b3027594e5d4237d50ce97841d38","sha1":"49e0d7beaae55e592cc48cdf0455609c448fac42","sha256":"723596c0c9d3bb427b988ffc5e31da7e518d9cba89cfe51a16e482875c01c85b","sha512":"12e56514050991a206ad02277c9e9db448d959d6ee71d35e66e4d65b5b6f9196a2e7ac883e23e79b0f41c9780fab29916bf14c0b840f3810aaa506d64273aadc","ssdeep":"96:sCg/W956r8JP/FWF9FYFKF8FrT4Jf0FWF9FYFKF8FIbni7p/fTsMqjcc4WwtpdM:sTUnFWF9FYFKF8FgcFWF9FYFKF8FIbnh","tlshash":"66910eb17cea065d3411e4702792fec96da1a2036216dca8b9fe313adf488a944736dc","first_seen":"2026-02-13T04:09:14.295701Z","last_seen":"2026-02-13T21:11:42.562615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":62,"dns":24,"connect":8,"send":0,"wait":511,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bank0m.cc/css/_dsg.css","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bank0m.cc/","date":"2026-02-13T21:11:19.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bank0m.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:34:24 GMT","end":"Sat, 25 Apr 2026 15:32:50 GMT"},"fingerprint":{"sha1":"6D:B4:E7:40:F3:5A:7F:A4:CC:5D:1E:1A:B8:2D:D9:FD:0D:2B:D5:41","sha256":"43:69:3D:71:6F:C1:BB:CD:4B:EC:A7:49:19:66:1F:85:DF:58:58:E3:B4:CE:BE:B3:E4:03:05:CA:87:90:CC:95"}}},"request":{"raw":"GET /css/_dsg.css HTTP/1.1\r\nHost: bank0m.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bank0m.cc/\r\nCookie: PHPSESSID=7e07cac85d71cb8450fb5055708eb23f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Jul 2023 08:04:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vN7Gwq7zJxOoMFXRVPl6qyNNzfwDcsY%2FqylyrVPfaOibFk4Tf2b%2BJTOFP0YXAdmnvNAS1794CW%2BLhUDQN9p2R%2FklP7qwzVYJLw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd751491ad4de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11603,"size_decoded":0,"mime_type":"text/css","magic":"IFF data","md5":"fc05983251c4248f6639b147faf19857","sha1":"89d5cc0586af0e4276095cb0104dc7f771d8a6ca","sha256":"f621186732ae363f82def59c3ee17094f3c0fdf9981fb4f24fadc6ee25b67aa3","sha512":"dbf736e011fee58c3c444dbba47e4a7368d6de133722163ef115c9a3e1c53f618d7aed73cbcf2b57da7273f5ccfd09b27cbfaf6bb981d323d2b5eac5ac09f515","ssdeep":"96:/uFnA8/EA/pD/DallNiC0FibPa3RFQ7XTzFygbpF1FWMXXULs7XmoEsPX2/oNs7F:i3allNPna2XTlaYXUAL96oe9ztA7s1F","tlshash":"eb32beb8dd1c05477136d6a92791dec2f7e663138a12127dbbe1b221df748b848729cc","first_seen":"2025-10-10T13:02:55.767687Z","last_seen":"2026-02-13T21:11:42.565952Z","times_seen":3,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bank0m.cc/img/ca.png","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bank0m.cc/","date":"2026-02-13T21:11:19.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bank0m.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:34:24 GMT","end":"Sat, 25 Apr 2026 15:32:50 GMT"},"fingerprint":{"sha1":"6D:B4:E7:40:F3:5A:7F:A4:CC:5D:1E:1A:B8:2D:D9:FD:0D:2B:D5:41","sha256":"43:69:3D:71:6F:C1:BB:CD:4B:EC:A7:49:19:66:1F:85:DF:58:58:E3:B4:CE:BE:B3:E4:03:05:CA:87:90:CC:95"}}},"request":{"raw":"GET /img/ca.png HTTP/1.1\r\nHost: bank0m.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bank0m.cc/\r\nCookie: PHPSESSID=7e07cac85d71cb8450fb5055708eb23f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 3758\r\nserver: cloudflare\r\nlast-modified: Thu, 31 Mar 2022 16:07:14 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeE3UIK0Pq2IHnqHvT1KzazfdjL98JvKa1cmRgy9TdlRInmpfkulxYi2F7I7Nc4Y9sSA64IUFDzLW3wKY5yxVOjAIUlnKG%2FJzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd751491ae1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 87 x 107, 8-bit/color RGBA, non-interlaced","md5":"065ffc5951e4779573ad7d9205c6e3b9","sha1":"485ad98b395a30b30ddf1c4eb0313cf092679b9b","sha256":"0c4761ca92f5e7e1689fb5a7fb3c65b7ddab4c40e3ee9c8b2ec21346f4482076","sha512":"87bd81eb1104753754a4657f2eda2d475df8234e79eb0821a91bf873512dcd8b856b1ed63906e348e7214d3c28f898fe7eb641d13ac39ddcd0a7dbd2d256256f","ssdeep":"","tlshash":"49716d5bf506984111cdd0e136dae227600dd8529b40d4fabd9a48188be46f7644a7cb","first_seen":"2024-10-15T03:12:31.493509Z","last_seen":"2026-02-13T21:11:42.567315Z","times_seen":11,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bank0m.cc/img/logo1.png","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bank0m.cc/","date":"2026-02-13T21:11:19.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bank0m.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:34:24 GMT","end":"Sat, 25 Apr 2026 15:32:50 GMT"},"fingerprint":{"sha1":"6D:B4:E7:40:F3:5A:7F:A4:CC:5D:1E:1A:B8:2D:D9:FD:0D:2B:D5:41","sha256":"43:69:3D:71:6F:C1:BB:CD:4B:EC:A7:49:19:66:1F:85:DF:58:58:E3:B4:CE:BE:B3:E4:03:05:CA:87:90:CC:95"}}},"request":{"raw":"GET /img/logo1.png HTTP/1.1\r\nHost: bank0m.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bank0m.cc/\r\nCookie: PHPSESSID=7e07cac85d71cb8450fb5055708eb23f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 211491\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Sep 2025 15:16:48 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twiiMwflw3nkGvt3JlidbBmCy7KylnaLQqRJ6l1R7LSkPpiNz3bO40Y1ZiAJaGm858MfXEyAqP7PlMlfbP4idhXoWWajtdfcyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd751491adade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1174 x 281, 8-bit/color RGBA, non-interlaced","md5":"bd0cd557850067cde8f9692d494a0d7b","sha1":"a81f718f72e7dadf649fb615c44734946ffe3e81","sha256":"1cef65adf69a7a242b039ca96846e44b651ed3880217e507a193922908b1bf0a","sha512":"c8f07335122c3957c0509cc83438a69bca85633f34a646d988a991f9d5ddb656e643947c0954592c84e72b4f2f8be40455b1b95738ffea3c403c08b6da78533f","ssdeep":"6144:rcah7CsEgx1re5ty2LCM1Lo9xr12e1fIsK:JCLgx1CzH3Le26IsK","tlshash":"ff241229d8f6d6b5824fbfc302672a9e9ea27c30c55e851739a5039ef0b47d344c8d62","first_seen":"2025-10-10T13:02:55.771108Z","last_seen":"2026-02-13T21:11:42.56885Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":527,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bank0m.cc/img/banko.jpg","fqdn":"bank0m.cc","domain":"bank0m.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bank0m.cc/","date":"2026-02-13T21:11:19.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bank0m.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:34:24 GMT","end":"Sat, 25 Apr 2026 15:32:50 GMT"},"fingerprint":{"sha1":"6D:B4:E7:40:F3:5A:7F:A4:CC:5D:1E:1A:B8:2D:D9:FD:0D:2B:D5:41","sha256":"43:69:3D:71:6F:C1:BB:CD:4B:EC:A7:49:19:66:1F:85:DF:58:58:E3:B4:CE:BE:B3:E4:03:05:CA:87:90:CC:95"}}},"request":{"raw":"GET /img/banko.jpg HTTP/1.1\r\nHost: bank0m.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bank0m.cc/\r\nCookie: PHPSESSID=7e07cac85d71cb8450fb5055708eb23f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 21:11:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47576\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Jun 2023 21:21:10 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QALLk62sIP8QzZ7PDbLMJtbCO8%2FE5KZMMTaF3bgh4UcpEvcbjYtv71oKRIfFXtzBP72ODKVBqXfwtk9h5HcxyEHt3YgOHXpXqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7514dadbade91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47576,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75\", baseline, precision 8, 1024x1024, components 3","md5":"a138bd5e9f8b3325eedb61fac007b735","sha1":"403d5b5c6655af580b39818e6d7e15c03f023127","sha256":"c27af3c5160fadfff41fb3f6c72c7a2d044bece1625397c476a9e72f413a3692","sha512":"a2f404cd87c782d0f1ba87846892dfd59be3f0e56a77061b324976763a8395ad319d88954902ce15914e199838bed01a46a179deb548dd1e3b25bc87f3f45275","ssdeep":"768:yeRfQR0xRdZRFWimhtBFpmDRQzpzxm4XguNEdzufAxPxLZs36:yUQuDdPMimHBYSFzozuOdKfAxJLZsK","tlshash":"10239b039d188b53a42883d9be130e6c2f563b5ded863aff15624dcf3e256610c9d46e","first_seen":"2025-08-12T22:57:18.511719Z","last_seen":"2026-02-13T21:11:42.570135Z","times_seen":4,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bank0m.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}