{"report_id":"252640f2-c26c-4401-b4fa-309b93c2511e","version":6,"status":"done","tags":[],"date":"2026-05-13T22:52:40Z","url":{"schema":"https","addr":"bankabillions.org","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"final":{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"title":"BANK A BILLION - Home","dom":{"size":1517995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"75e3ccfa14deaa24cae40a6400b8011a","sha1":"e386bff9c92e644779c8e544b607569468e946d8","sha256":"dbd769a30a09f057ae3932a9bee76f21b37965ccd6a99d90a8af24ba634ab13b","sha512":"0a5f1b6da8abf9f628ec3cb40eda8c900ad6cdb698444ccdb7810abf70e289612ec60f55deed8918182a0bd64d2f7057942fb469351c1b9870a06776d220eb07","ssdeep":"24576:YGxs0yWm9e9PRLEIYrCd4XSMHgv4lhSDzJNGbcg:YGxs0yV9e9PRLjYrCd4XSMHgv43SDzJ+","tlshash":"02656cd5b2c5f4a507e301e6943b1002a33a1c1a740da468fbbcdcd7a96a58e6337f79","dom_hash":"domhashc44c55ddb06c034b0a61fba39eb90807","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bankabillions.org","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":0,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-17T22:52:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bankabillions.org","ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-05-13T22:52:49.270826Z","last_seen":"2026-05-13T22:52:49.270827Z","alert_count":33,"request_count":33,"received_data":2705545,"sent_data":16871,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"translate.google.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-05-11T16:17:05.778053Z","alert_count":0,"request_count":2,"received_data":84256,"sent_data":946,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-05-11T11:48:07.434878Z","alert_count":0,"request_count":6,"received_data":426335,"sent_data":3114,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-05-07T01:58:32.036387Z","alert_count":0,"request_count":8,"received_data":1736712,"sent_data":3794,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node-ya-4.jivosite.com","ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2011-05-06","domain_rank":930580,"first_seen":"2023-01-18T09:50:44Z","last_seen":"2026-05-10T12:15:23.13367Z","alert_count":0,"request_count":1,"received_data":776,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":1,"received_data":7085,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-10T22:52:08.295618Z","alert_count":0,"request_count":6,"received_data":69750,"sent_data":3197,"comment":"","tags":null,"fingerprints":null},{"fqdn":"client.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":168029,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-05-07T11:01:43.284677Z","alert_count":0,"request_count":4,"received_data":499636,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-10T22:41:39.091246Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":445,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bankabillions.org/public/js/labette-bank-bottom-2018-07-20-11-01-15-CDT.min.js","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"730a2e1bea69e92f1f7f43753e2da639","sha1":"39b1583600c0fb282149be950b6678d6a184225f","sha256":"afc9aaead8d8648cdc900813123bb38bc7ddf25fb73130cc8ddd7e442c2944b6","sha512":"a55671740f8d1a0576c82029bb47b41f359b6d4cb12ce21f18db9ad4a85842633074c40f4c28434cef1867733fc61c30953069644f475093986d5331607f6be0","ssdeep":"6144:vWFC71t3mlHLLCIITPdCiSuGfzxOs9oiVaRBJUg:XKLLMTPdCipGfzxOsoD7","tlshash":"c2155e4ba3e62422a567b1794e3f94057a36941f5e49fd983d4c42c84f1c83c82fafb9","size":895780,"data":"","first_seen":"2025-05-06T13:24:41.41214Z","last_seen":"2026-05-13T22:55:22.842531Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#211","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-05-14T01:42:44.174788Z","times_seen":33457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9952b36f12c840dd413ffed3731de42","sha1":"fe86e95b4c759b8834197bb86c0b5d8d98c8aa61","sha256":"2bdb43f02957a893f700906e049c1c11025b2e7a233a04cb5de1bdbfbd35ea58","sha512":"f17e5d5e61fd74a95f17f1ebfd7a07f5e1e052455f178b8afee3c72b25733f78cdea49ff0b5578da5351bcdf512ba18a38263f0714dd0d81d0f59de476632e40","ssdeep":"192:gjTSfZ0VsU+ZO09SOMal5kE5Y+91Edlng99dgY3AjL/7Cb/+iY:IO+IH+MkE5Y6iu9uY3Abk8","tlshash":"aff183173269603105a362af123f2a45f03361296c85825cb169ecf1297ce4fa13bffe","size":7699,"data":"","first_seen":"2026-05-12T08:59:53.213847Z","last_seen":"2026-05-14T02:17:22.378289Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/oYTFYO5ZpT","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0396887e24f82a5c739687747a2d5d1e","sha1":"e414bf5b0189af9d82589194ceb3912190f5ad4c","sha256":"dadbf61af1aa9ede34b6bd9797f5cc4a7d1e90901cb10fe3b20e1573502a1254","sha512":"a01a07fd246c3060e31ec3363f6f8f43d544c9670f76d43f2d79d14fe03d1be6481ec6f04c4639b4ddab11c9454640251c3797baf3afc2a3c8522e1b555ea672","ssdeep":"384:boU+JvepohmPF0jyrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI//AjX54cr7sXWcPdv","tlshash":"f1823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","size":18118,"data":"","first_seen":"2026-04-27T13:30:50.955671Z","last_seen":"2026-05-14T01:57:27.24673Z","times_seen":1259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_8692cfc.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"793c2b6af42046a2da2b27ad88b5e68c","sha1":"6a972271117d7ed76b42aaa6f1e23f826bc01577","sha256":"b69e7f77db5a44193aaa137394b450546f752e4aa57ade7f843b639a663d60ed","sha512":"9096b8b7c5ad474c0ab9250a126cb8c5cba3559340bd0593afac03a9d2ed52154919c801773f1ebb01702618f5ac4749c0f8e51f547c22b80b1569fdf574c1c8","ssdeep":"6144:vvBJtDET21UYnjJwsErx7S3u291K1MdZwW8Z:3BnRFLEY91K1iZwjZ","tlshash":"b064089a3265683313f642c3a4310a42f379255d7886447cf3bcadef6618e8671e7bb4","size":331352,"data":"","first_seen":"2026-05-12T08:59:53.21585Z","last_seen":"2026-05-14T02:17:22.30485Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/_/translate_http/_/js/k=translate_http.tr.no.vFRrunGWIVs.O/am=BBDg/d=1/rs=AN8SPfpozc0vZg9Ew93-LYbDyEjIJb9SvQ/m=el_conf","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1cbb5003984a5b88a1dc678665b52ff","sha1":"f93d2a621387471e571ec5bff8eee61a62aa2eb1","sha256":"b254a5441743b3f9eb074898e4d869febd357e4c47577b3b97d0b292fa929c83","sha512":"977e77aa21330c45026147eb71afabeae56c8971b81ebd717ea611b7c53111d64a2efd467b615123d6671b8ad0038bcf4695289b577253c1fff42ac54f54b040","ssdeep":"1536:Xm2R5t/BC65TL5kZ6bUaBoq3KxPGF1RbjmYBCKucbR9xGi8wNWpl:Xj56Fq3KxAFCO3Giql","tlshash":"a083b8ccb6a574a69257f5a5412f000fb23f68dde8084cacb288d8e1adf4949453bf7d","size":81948,"data":"","first_seen":"2026-05-13T22:03:39.710608Z","last_seen":"2026-05-13T22:55:22.867003Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-05-14T01:42:44.177219Z","times_seen":3012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.vFRrunGWIVs.O/am=AAAACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqSRlqHFkJp199mwhaJcXhzEt2xKg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e903305d0bfde4c22185a7082ec8643c","sha1":"84b97aa529425d72dddb204bc5100d3e88d826fd","sha256":"d278d0867e1dab846b070ef0ebfa6413dc008178bf7d12d72a228ab75ebc42e0","sha512":"e3ec199d37a9a8253afe47d78935bdd4398d0b7027cd5fac50cba16f7344ca12eedd6439598ff3c6d19d47d9deb28943dde18f92a9f84f7882a3d9a792604dc6","ssdeep":"3072:qqFlY023LyM3MtLl8qYCTVuPJHk9P2uvFqgpHdz3CL/ITbEEXQnioigy7Q:0TJEwEdzXToEXQ9","tlshash":"fe94e9d9b2a374529262f8e1e07f0057b53dac5bb4484cacb249d8d66eb08095273f7f","size":419450,"data":"","first_seen":"2026-05-13T19:34:50.571791Z","last_seen":"2026-05-14T01:49:46.144743Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6b03ad7a18754a9ab3fa42edf2f0f4","sha1":"c811f84fa6e16962047265d11348837ad666be08","sha256":"f8e4ce547d8d4ad8cf484d64f893c38f8156ee41b560a7e57cdc800e5d464bcc","sha512":"dce12cb13d50532e84e06bc519a39bb3ba31727c9a9d43d543673d4bf80907d2f4abb1a2ed1366d638a12c6523ecf0f8b7404bc853c0ffaa9912e8707dc0b114","ssdeep":"24576:2Gxs0yWm9e9PRLEIYrCd4XSMHgv4lhSDzJNGbck:2Gxs0yV9e9PRLjYrCd4XSMHgv43SDzJi","tlshash":"a1656cd5b2c5f4a507e301e6943b1002a33a1c1a740da468fbbcdcd7a96a58e6337f79","size":1517801,"data":"","first_seen":"2026-04-27T13:22:49.458069Z","last_seen":"2026-05-14T01:57:27.313663Z","times_seen":1193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c697c27b94bbb878f4143379ce35d96c","sha1":"dd63ecf8d7131626c1e81d87904b25ff14abafd3","sha256":"e29c6d3ffbcf52d5612922bc865149ab7409ab96d789720a00fc34fa9b3e99fb","sha512":"c5276b88fe0eb83a075dd6e95d23fb50b73ffd8180b012e0c04d6b1dea49a8be48ec7ed63de9b9387d604ccdc178ad1f1da59f0c5c89a6810373c756d585ec45","ssdeep":"","tlshash":"7af0551b309b102a00a3b8fe2b7b4802ba65221f2108d863bc6e86985f4891c0688f8c","size":582,"data":"","first_seen":"2025-08-28T00:05:07.886655Z","last_seen":"2026-05-13T22:55:22.887709Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"introduction_type":"scriptElement","is_inline":true,"md5":"29942e8ff6f9c41cd58afa2df9de4975","sha1":"bdd0f480ffaf638d5095e69d1d3142e37499aa58","sha256":"fecd35de86f206f1662cf62e384fbb2c22f520c110337e9478073624b8a113e0","sha512":"97aa59c3a6d36c756cd3c13504aee19df180ea00210c6077fe383cb282451b86111a38d028b64a87089815d0651454084672c50e4210242d38ce5db23e2adc42","ssdeep":"","tlshash":"4fd0971d3b122034148c43fda233f73c20e211ab2a5330028854ccbc6d10e970881658","size":234,"data":"","first_seen":"2026-03-29T18:31:14.747805Z","last_seen":"2026-05-13T22:55:22.888623Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1777297771","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"46d8d0628da3d93efb862e1649dcbbca","sha1":"3868ea2a5276e00da6f936ac6b750a26ae943ddd","sha256":"ac2c3c4f6eaff634af74eedd79722cd1119982b6d2addd0e5d5e94780e106636","sha512":"ac627b901df6259bacc72cbfcfa6b758c4eca61e6e72d0101316f5638522685e63c9da3468cc5800fb068a9bf9019611d00c3b63fe5d407228ef3b51779d5770","ssdeep":"24576:PIuR2z48eK9n++ePuZlhExSZCPXdPRmT3r7O1kxSngPgYlVqnH7XhtHgC8IY:PIuR2c8eK9n++eZSZCPXdPRmT3r7O1er","tlshash":"ae756bc5b1c5f46103d355e6a03b2005b33a2859340da068bbbcdcdbe96a98e6377f79","size":1550289,"data":"","first_seen":"2026-04-27T13:22:49.479459Z","last_seen":"2026-05-14T01:57:27.410778Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cdddffe/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","size":10670,"data":"","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-05-14T00:48:29.759971Z","times_seen":865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a08fb6eafa6b5cd3ffed4f1a0c75ad8a","sha1":"eda5316c256aa88c9d8f419ceddc6d9b5b553a03","sha256":"45839538ccaeb13e68d4318bee07a45ff5b229237bb9e2cdb70705242b89f4ba","sha512":"ae45b25acb98b976064d1114b20775fc1294df6b652b67eb74889bd20577099a7708ac63a23d91628c8247a02cd55fc5d928ca3a0e893b90596886e17a325227","ssdeep":"","tlshash":"ab511ea2605ca01b9513c5d1f8a23eeef4de0058c77269d07e1c29dfeada8b7049716d","size":3011,"data":"","first_seen":"2026-05-11T20:32:53.102651Z","last_seen":"2026-05-14T01:42:44.178543Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5ac1f600eaa3a490dca704c80eacbee5","sha1":"69942bd789011afa87f74b7e1f677ea532d79e55","sha256":"6e7a49bd5e898858257b9739d874343d547478fd9622c58ab53ba390bf82dbb7","sha512":"b68d171529f3d25ce2b1a1b38bc3c4a2eaafadee5ca82d23429731cb73dad55a84dfc72dc08f31b93c66e2b8e16f15b2ef52f535789b95a24a1af4f657a7dba7","ssdeep":"","tlshash":"86f0dcb30135a819c282c634e5d469bee203d2108a586ca5736c00aaf2c825e80cfabc","size":470,"data":"","first_seen":"2026-05-12T00:56:48.741613Z","last_seen":"2026-05-14T01:42:44.179239Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9fd3422a26ab8953024f362af3903fce","sha1":"c7c33171f94d37af580350a1e074644b7ed3f5a1","sha256":"27ea07dd355f8eda6fd4e6f2b13136e6e7cf2ec417264bf4e0a959cac0865b8e","sha512":"868a3297ecc2514bfb2a7c3cee8ead9083ceb3b6589a01bafb89151e633ee44eaaf8ec5a87fe7ebeb4b9100649eb7623b329e8acf1ab6e3a3293784543f57b0c","ssdeep":"","tlshash":"7bf0dc730135a819c282c634e9d469bee203c2158a586ca5736c00aaf2c825e80cfabc","size":470,"data":"","first_seen":"2026-05-12T00:56:48.74271Z","last_seen":"2026-05-14T01:42:44.180069Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e562dd896ac4d3c02dbbf846de7d12db","sha1":"231e3aed32b82f17d971a11ee73be3bb56390476","sha256":"e0cfa4c4edd139ab165a2797e3dfba257e50205b1c6ef90a218cfed169b28af2","sha512":"f87032635de78b01179a826d4132025505ddb632b1bd71290efce46b7dcca0e5cdf3618d6e9ad32e4ac304ce8675942733f852ae97da310ad7ac240bffed43dd","ssdeep":"24576:wGxs0yWm9e9PF7QIOrmQ1eSMHg74lhSCzJNGb8C:wGxs0yV9e9PF7fOrmQ1eSMHg743SCzJc","tlshash":"ae656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1516000,"data":"","first_seen":"2026-04-27T13:22:49.49286Z","last_seen":"2026-05-14T01:57:27.43115Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"bankabillions.org/public/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVc.ttf","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsgH1x4gaVc.ttf HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22768\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35304,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"4c45bdb0ac15f12a01bfecf77157cdbd","sha1":"9193ce5219cefe1d54794e445d72c23cab3de03a","sha256":"6fee568ee1e985a28351734213271ab3c518744bb3819af52246e1b7d15b7372","sha512":"8929f783ad80e14d937fcb185d8b681d1fa7475cd77273cdeb844c5d1743b872d225b2b55b5012f8ab46c0dc2ab10f494be4b376dfab248b7b2694b0a0f8eb1d","ssdeep":"768:VbGWawJ2/6o7ToPPM8OWkKRpDHzPtgL+JE8AJ0:VbGWtdOTon4ORHXJEH0","tlshash":"88f28e16f753bf1ce4323df859e4f3625f8ad821a35a835b698e320e5c9106cc5a06ad","first_seen":"2023-12-16T15:53:39Z","last_seen":"2026-05-13T22:55:22.827262Z","times_seen":227,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260512","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260512 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-9by-SheeXKjltAlrkDDGow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw0ZBiEOLhWNg45QKbwI73m38wKSkl5RfGlxQl5hXnJJakFqcWlaUWxRsZGJkZmBoa6RmYxhcYAAAfARLK\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=33.SE=Ge9uOJ_b3Of556_cPdXBopUsTMGesyFninXYMxm1DrvWE7cMD7Sa2XC-ykspu-T9o6BVxTrjBVWqZC89UDWHcw7I3d7ncX74Xa0vpjaIiPuLRbpBJsKAAz-hvLQNWpwYeYdoDeu_pWrECyADLxrosKF680ZsQxqg0IDm18ppalormF970UuYN9cgmFoapjKKZ1pLLC5lfsyBamrfVuNp1zeV-SboxREHoj8nQ0Q8cjWS; expires=Sun, 13-Jun-2027 15:10:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T01:46:48.238784Z","times_seen":15141151,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_bk.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /translate_static/img/te_bk.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 848\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 18:22:16 GMT\r\nexpires: Wed, 12 May 2027 18:22:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102602\r\nlast-modified: Sun, 25 Jun 2023 02:58:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 59","md5":"daf9b48977041ac85a62dc9b7c16b38d","sha1":"049dcb061470572d06fd83b287ebd1d96e6bb870","sha256":"cb1fd0e051209c32622e91cdeda967e50d80a184b185ac6a656a807986e8eb75","sha512":"99f5f27990b6b5559c751a92c04037f5d42e848a966893484af66d3f66828c29a2dddc8788d7dd4cd835e8ab6d834e74fb3eaa4e2cd72d55b2813d7aab990af2","ssdeep":"","tlshash":"1c018c0cc8700a19e3422fb0ca5b6e0429675b465d88b20fb6aa22c27d04ba48049b1c","first_seen":"2023-04-05T23:29:53Z","last_seen":"2026-05-14T01:42:44.144045Z","times_seen":6056,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:18 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69ef3c39-eb0\"\r\nexpires: Fri, 05 Jun 2026 09:39:48 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-06T09:39:48+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-05-14T00:48:29.761827Z","times_seen":15178,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/locations.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/locations.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 255\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":447,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5c60bc7f11a8941b6c260d820dedb74","sha1":"4b0a7bed7a079150990ccb2ad290bcc44cbbba2b","sha256":"7589b2106ea24f71499ce27cc37ada7f374a789eb3ce516a64cf875e9b746498","sha512":"fc53329f0f3d5c997813e2b84ccec281ca767daf7b09681429f0e331133e86d8e913aeb54225d819336014f7c65ffb00c39a56c7e0c7fa84cdeeab3475ace4eb","ssdeep":"","tlshash":"7ef05cdd838a96cc58c644b6ee5cd9ce1fba748bd08904d4c541c624d483a95e74cb8d","first_seen":"2025-08-28T00:05:07.869279Z","last_seen":"2026-05-13T22:55:22.820162Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVc.ttf HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22797\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"d0b9ab30fac8c7bccf3b83ebe71d16d8","sha1":"1ad6d42a4ca0069c3a6ff04f9d566c1ddfa928f9","sha256":"598911be4586332ffee19ea06d32199c323b6c8f75ebdb6e4b6b3c483c89f722","sha512":"12eea7ccf242c4b19bc5c90ea6422288c585341b4ac6abc94fa2c3f086bda303d8a6848a1e367c9cc1712d6c2eb7e00bb37a44d1408f5f6e4f64446752198bc0","ssdeep":"768:6LAflis4S73htOQv50E0y4YTVonw1M/xRB+PPCRg:60t40LOSKPyFqw1M/sPPCO","tlshash":"42f29e17f313ff1cf53138b995e4e3626f96d8229397835b694d220fac96028c9906ed","first_seen":"2023-12-18T20:48:30Z","last_seen":"2026-05-13T22:55:22.826758Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/fonts/bootstrap/glyphicons-halflings-regular.woff2","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/fonts/bootstrap/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18028\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-05-14T01:26:31.996677Z","times_seen":43158,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/slick-carousel/slick/ajax-loader.gif","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/slick-carousel/slick/ajax-loader.gif HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-05-14T01:37:31.418608Z","times_seen":39204,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:06:31 GMT\r\nexpires: Mon, 10 May 2027 10:06:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305146\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-14T01:42:44.154956Z","times_seen":60901,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:18 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-1396\"\r\nexpires: Tue, 26 May 2026 23:25:23 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-26T23:25:23+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-05-14T00:48:29.753769Z","times_seen":15178,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.vFRrunGWIVs.O/am=AAAACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqSRlqHFkJp199mwhaJcXhzEt2xKg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.vFRrunGWIVs.O/am=AAAACA/d=1/exm=el_conf/ed=1/rs=AN8SPfqSRlqHFkJp199mwhaJcXhzEt2xKg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 121263\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 13 May 2026 17:41:24 GMT\r\nexpires: Thu, 13 May 2027 17:41:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 12 May 2026 01:10:52 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 18653\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":419450,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"e903305d0bfde4c22185a7082ec8643c","sha1":"84b97aa529425d72dddb204bc5100d3e88d826fd","sha256":"d278d0867e1dab846b070ef0ebfa6413dc008178bf7d12d72a228ab75ebc42e0","sha512":"e3ec199d37a9a8253afe47d78935bdd4398d0b7027cd5fac50cba16f7344ca12eedd6439598ff3c6d19d47d9deb28943dde18f92a9f84f7882a3d9a792604dc6","ssdeep":"3072:qqFlY023LyM3MtLl8qYCTVuPJHk9P2uvFqgpHdz3CL/ITbEEXQnioigy7Q:0TJEwEdzXToEXQ9","tlshash":"fe94e9d9b2a374529262f8e1e07f0057b53dac5bb4484cacb249d8d66eb08095273f7f","first_seen":"2026-05-13T19:34:50.571791Z","last_seen":"2026-05-14T01:49:46.144743Z","times_seen":141,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":97,"dns":40,"connect":21,"send":0,"wait":23,"receive":56,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29532\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240467,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (397)","md5":"152a18009914d5f610b7e475b9c2c827","sha1":"515cee7b46591444ccd0531531766e6060c8cec0","sha256":"01e4f0500cdff69f9bc858960171d5a88dbc5e3b9bf36c8c92f58bd473a9020a","sha512":"619cc54a00d98b782724fed4b8b70050219a5bcfdba1251c54151f559620f7127e90d1d130ee132efc1fe5aa14608aa319587439df88421a360ea65cee0628fd","ssdeep":"6144:UoBE+uoe8g4Z/DhEeapcZYd2yhrRJJBUnDHcotlXtl7:UoBE+uoe8g4Z/DhEeapcZYd2yhrRJJB6","tlshash":"3b34b64596b33884291b8098bfaed641371d9083d50ecdb9ff8e6b8ccf491a455a3f8d","first_seen":"2025-05-06T13:24:41.418754Z","last_seen":"2026-05-13T22:55:22.844658Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/stylesheets/client_default_8692cfc.css","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 10:30:19 GMT","end":"Thu, 18 Jun 2026 11:30:16 GMT"},"fingerprint":{"sha1":"BF:D8:F9:44:78:BF:87:B9:CE:4F:29:7D:CA:BC:48:2D:52:D9:CE:88","sha256":"C4:9A:7C:EE:24:BB:60:AC:CB:2C:44:F0:1F:25:F0:EB:CD:EA:BC:A4:3A:48:40:77:76:F7:A8:66:2E:E3:AA:6B"}}},"request":{"raw":"GET /static/stylesheets/client_default_8692cfc.css HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 22:52:16 GMT\r\ncontent-type: text/css\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nexpires: Sat, 10 May 2036 22:52:16 GMT\r\nlast-modified: Tue, 12 May 2026 08:49:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\nage: 50379\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"6a02e9ae-266f6\"\r\ncontent-encoding: br\r\ncf-ray: 9fb53b8ccc47b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157430,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65437)","md5":"1180f541cebd73e79cf705c7903b1f60","sha1":"56bc074c6918cce493d89c5111af1ff70af6e0d7","sha256":"ffdced6080ef051cadef6bb6c7b4e4e4b3f684a74513a7f4a1506655c74092f5","sha512":"768ea5dd6da7706fae1991a07d03c721b1fde7da8a8845d440e77c3873b2a5b22f18ec69c6976d134070af72cda13c00636ec9acd934de40213660ebe8e66692","ssdeep":"768:qEek6m2W3Db4g4CerPFJqH8r54Ib0qR6uLYH03CDjwN1Fq4ADxbXWNGVa6QdJSbH:/ek6m1eRglsdKjwtq4ADxbXWA0Rnuv","tlshash":"5bf3844fb266043128d745a3b9c8b73d843a64ff92517a3cda2466bd4f844ff2768728","first_seen":"2026-05-12T08:59:53.206533Z","last_seen":"2026-05-14T02:17:22.330157Z","times_seen":58,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/bed892e0-6b96-457a-837b-7f3875a9a02d/prelude/?2026-4-13-22-52","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 10:30:19 GMT","end":"Thu, 18 Jun 2026 11:30:16 GMT"},"fingerprint":{"sha1":"BF:D8:F9:44:78:BF:87:B9:CE:4F:29:7D:CA:BC:48:2D:52:D9:CE:88","sha256":"C4:9A:7C:EE:24:BB:60:AC:CB:2C:44:F0:1F:25:F0:EB:CD:EA:BC:A4:3A:48:40:77:76:F7:A8:66:2E:E3:AA:6B"}}},"request":{"raw":"GET /settings/website/bed892e0-6b96-457a-837b-7f3875a9a02d/prelude/?2026-4-13-22-52 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bankabillions.org/\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Thu, 14 May 2026 02:52:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 13 May 2026 22:52:17 GMT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9fb53b8e9ebc56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"978e7d95b476e79db829db4ba0e37af8","sha1":"066fb5196496266c5db0b4ba4972092741378fc2","sha256":"ea2d0914953fc4b06ba91c899927344ac514d3febbf2fb3177d495b465d4c0ea","sha512":"3ee03a6a16b1d3010943439185149436245fc5b478fca3379366f7b0a78c1d9372ab68dfd989b6b3789c130cd764fe6d7b3d9533d905abe250312b9b7d351681","ssdeep":"","tlshash":"4c80000a80a8088b22a208cb0e8008a82a800e8080280e80e000b80c028e003c82202e","first_seen":"2025-09-29T03:51:40.371584Z","last_seen":"2026-05-13T22:55:22.845857Z","times_seen":53,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 11 May 2026 21:02:26 GMT\r\nexpires: Tue, 11 May 2027 21:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 179391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-05-14T01:42:44.105234Z","times_seen":5938,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 10:30:19 GMT","end":"Thu, 18 Jun 2026 11:30:16 GMT"},"fingerprint":{"sha1":"BF:D8:F9:44:78:BF:87:B9:CE:4F:29:7D:CA:BC:48:2D:52:D9:CE:88","sha256":"C4:9A:7C:EE:24:BB:60:AC:CB:2C:44:F0:1F:25:F0:EB:CD:EA:BC:A4:3A:48:40:77:76:F7:A8:66:2E:E3:AA:6B"}}},"request":{"raw":"GET /l.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 May 2026 22:52:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=10800\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nexpires: Thu, 14 May 2026 01:52:16 GMT\r\nlast-modified: Tue, 12 May 2026 08:49:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 50379\r\ncf-cache-status: HIT\r\netag: W/\"6a02e999-1e13\"\r\ncontent-encoding: br\r\ncf-ray: 9fb53b8beef256a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7699,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7604)","md5":"a9952b36f12c840dd413ffed3731de42","sha1":"fe86e95b4c759b8834197bb86c0b5d8d98c8aa61","sha256":"2bdb43f02957a893f700906e049c1c11025b2e7a233a04cb5de1bdbfbd35ea58","sha512":"f17e5d5e61fd74a95f17f1ebfd7a07f5e1e052455f178b8afee3c72b25733f78cdea49ff0b5578da5351bcdf512ba18a38263f0714dd0d81d0f59de476632e40","ssdeep":"192:gjTSfZ0VsU+ZO09SOMal5kE5Y+91Edlng99dgY3AjL/7Cb/+iY:IO+IH+MkE5Y6iu9uY3Abk8","tlshash":"aff183173269603105a362af123f2a45f03361296c85825cb169ecf1297ce4fa13bffe","first_seen":"2026-05-12T08:59:53.213847Z","last_seen":"2026-05-14T02:17:22.378289Z","times_seen":58,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":49,"dns":21,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkqg.ttf","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkqg.ttf HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26266\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47408,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"977d1861e825aa6492982bee31eb4cb2","sha1":"6231472366b39f9de0ed108fb7a3b8c6a72cc5cd","sha256":"98cc7c3b3c0d8bdac6a360748d28aa704c56f25805638a626848a041eef7d0f4","sha512":"84a30127325a96a3289f9a8e3eb6a06059b3ad97081f455011c011e94d45c0c922ab8ea1aa6d06cef49967d865561bc77e8bb3b8b82dd79971d4af1bf7c6bc00","ssdeep":"768:nXbECJoO7dPelMtpDV5lVm/e8H7RnuBbOckaA2Enqi5DQl97lHamrPQb6:rECJoO7BjvVpNb1kaApnqMQHaZb6","tlshash":"8e235b22f382aa49d1a33ebcd562e7b0e225f82c6fcb564b784737594c0e4d25e50783","first_seen":"2024-02-12T10:28:29Z","last_seen":"2026-05-13T22:55:22.864225Z","times_seen":38,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJBkqg.ttf","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/s/lora/v35/0QI6MX1D_JOuGQbT0gvTJPa787z5vBJBkqg.ttf HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 26702\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47124,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 12 names, Microsoft, language 0x409","md5":"d0a26d8f536547533a02e26b9240a608","sha1":"9e0747c67a71c3b8233de0eb2cdb2afdf60914c8","sha256":"faa9c5044ca88dfed74904576c9174f59dd374f00780503ca28e05ce7cd251d8","sha512":"b722e6797675948fd2f986aa8c8d721673eb5a67ab7a70ae158b921cedc02f2067109457f6ea449dce949f266fded33e559b0c7af145b5e822841a9c4d3f98f0","ssdeep":"768:OL8mbxo/lIn89KSk5tV4+oNItZhUOR0XDHGReiBtnyJF+6V8Qf8YGkEF1Yg:Abbxoqocz4+gYnb0XKAiXyJF+HYGkOKg","tlshash":"23236c22f782660de1573eb85522d3b4e221b92cbfdf670bf15627669d8d4420e35343","first_seen":"2024-08-19T21:16:08.572295Z","last_seen":"2026-05-13T22:55:22.854899Z","times_seen":13,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/logo-equal-housing-lender-stacked-gold.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/logo-equal-housing-lender-stacked-gold.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1237\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d70108b4779d00cb94f18c96a75ad0","sha1":"51b59b197ee55583f099e348c643986895355b46","sha256":"706e9fb13e11c7402a2377058826e18b305ebf0ec6ef5ca98d60e5703cd03d78","sha512":"91b13beae8c4ab9225bf7259e442df40c41c47d0c70053aac01de094b77555a12cf4593a1aa3b118051a5a7ef7a216e3abd2f4a594b3063860ab1a4b1806c37c","ssdeep":"","tlshash":"57510294d3684374ac8587f46738bcb874ef01ded4e4e39c94a985b0b0528ecdbad9d1","first_seen":"2023-05-15T05:52:39Z","last_seen":"2026-05-13T22:55:22.821059Z","times_seen":44,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 13 May 2026 22:52:16 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81948,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2136)","md5":"c1cbb5003984a5b88a1dc678665b52ff","sha1":"f93d2a621387471e571ec5bff8eee61a62aa2eb1","sha256":"b254a5441743b3f9eb074898e4d869febd357e4c47577b3b97d0b292fa929c83","sha512":"977e77aa21330c45026147eb71afabeae56c8971b81ebd717ea611b7c53111d64a2efd467b615123d6671b8ad0038bcf4695289b577253c1fff42ac54f54b040","ssdeep":"1536:Xm2R5t/BC65TL5kZ6bUaBoq3KxPGF1RbjmYBCKucbR9xGi8wNWpl:Xj56Fq3KxAFCO3Giql","tlshash":"a083b8ccb6a574a69257f5a5412f000fb23f68dde8084cacb288d8e1adf4949453bf7d","first_seen":"2026-05-13T22:03:39.710608Z","last_seen":"2026-05-13T22:55:22.867003Z","times_seen":17,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":148,"dns":57,"connect":7,"send":0,"wait":27,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1110/lockdebit.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1110/lockdebit.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 327826\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":327826,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1600x900, components 3","md5":"35573fdbf28329a266e9c17e92e7cc96","sha1":"bd1525e93b9f1d29024ff4a5cc94e6e855a66b79","sha256":"a01c7d61009753aa2dfc43cb3682a079e3140cc77f68fb764ff51ad4c6112823","sha512":"2950b516fc66019a54c7ef1eb9acf5df60b90d0de50cc45f8ee4de2d93523bd4099057ff953f692e791e8c90214ab777ab20b57336debf529906d48312b255e2","ssdeep":"6144:FZHj279k7ER0DZEItkgScdZGiFdYFwIXp0O02vOvLu6YjMfSmQjG1XhoVT4VGM9R:FZD0YEWDZPtkgScX7FdqNp0bLuQ7xyMj","tlshash":"a36423c3d743e21758e547b8458fdfd468b9723c2be485af8320c60497ef2a699087b9","first_seen":"2025-05-06T13:24:41.394077Z","last_seen":"2026-05-13T22:55:22.83597Z","times_seen":5,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1103/whats-happening.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1103/whats-happening.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 242254\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1068, components 3","md5":"2385af382c998eca3f6f45632c810410","sha1":"72b192505fa517a8df79b0558615a2fd43c7dec5","sha256":"886dd43464f3769c414605d4c906771cea05d8510bb72d2432230734c5834b43","sha512":"537bedd2d9a704669235b93c054e4fa621fe723ff7d1c28c6d8ed2b658a44ed05b992154fa006f9d8180ec78ca5971d2376cfc1fca0579952e6aa28b0566240a","ssdeep":"6144:JH/Hpzuv285l1hAJ9RpER5h39wz77HhDUURHb:d/Jz451Af4R5rwvaUR7","tlshash":"4d3423918f66096d4bfbc1d35bb104892c6ac9d8d97e3e12f5b69ec8ec211852d3833d","first_seen":"2025-08-28T00:05:07.856117Z","last_seen":"2026-05-13T22:55:22.862133Z","times_seen":4,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_8692cfc.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 10:30:19 GMT","end":"Thu, 18 Jun 2026 11:30:16 GMT"},"fingerprint":{"sha1":"BF:D8:F9:44:78:BF:87:B9:CE:4F:29:7D:CA:BC:48:2D:52:D9:CE:88","sha256":"C4:9A:7C:EE:24:BB:60:AC:CB:2C:44:F0:1F:25:F0:EB:CD:EA:BC:A4:3A:48:40:77:76:F7:A8:66:2E:E3:AA:6B"}}},"request":{"raw":"GET /static/javascripts/client_default_8692cfc.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 May 2026 22:52:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"6a02e9ae-50e58\"\r\nexpires: Sat, 10 May 2036 22:52:16 GMT\r\nlast-modified: Tue, 12 May 2026 08:49:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9fb53b8ced9c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331352,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65122)","md5":"793c2b6af42046a2da2b27ad88b5e68c","sha1":"6a972271117d7ed76b42aaa6f1e23f826bc01577","sha256":"b69e7f77db5a44193aaa137394b450546f752e4aa57ade7f843b639a663d60ed","sha512":"9096b8b7c5ad474c0ab9250a126cb8c5cba3559340bd0593afac03a9d2ed52154919c801773f1ebb01702618f5ac4749c0f8e51f547c22b80b1569fdf574c1c8","ssdeep":"6144:vvBJtDET21UYnjJwsErx7S3u291K1MdZwW8Z:3BnRFLEY91K1iZwjZ","tlshash":"b064089a3265683313f642c3a4310a42f379255d7886447cf3bcadef6618e8671e7bb4","first_seen":"2026-05-12T08:59:53.21585Z","last_seen":"2026-05-14T02:17:22.30485Z","times_seen":58,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":21,"dns":1,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 11 May 2026 21:02:26 GMT\r\nexpires: Tue, 11 May 2027 21:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 179391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-05-14T01:42:44.105234Z","times_seen":5938,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/icons/social-media/facebook.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/icons/social-media/facebook.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ff1085b9406d06e101b7e6c5b89134f","sha1":"568846d0bf5df7a628e22ae440c6175eac482f0b","sha256":"548b151a8121c654df03616479e199914a44f1ee4ef488062439956ed81ee26c","sha512":"863c391a27f7cce63d16eec7e828c18b755dabaaa719f26149845e36c48c1ff610e014eb6b2b35127a9dd909077344233144af8996ad8e454a1cb983228e961a","ssdeep":"","tlshash":"9df07d1f8b29197c7f8a83542668250172da68ecf24402b6547869251005870d9638ff","first_seen":"2025-05-16T11:00:05.332597Z","last_seen":"2026-05-13T22:55:22.850219Z","times_seen":5,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/js/labette-bank-bottom-2018-07-20-11-01-15-CDT.min.js","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/js/labette-bank-bottom-2018-07-20-11-01-15-CDT.min.js HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 148189\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":895780,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"730a2e1bea69e92f1f7f43753e2da639","sha1":"39b1583600c0fb282149be950b6678d6a184225f","sha256":"afc9aaead8d8648cdc900813123bb38bc7ddf25fb73130cc8ddd7e442c2944b6","sha512":"a55671740f8d1a0576c82029bb47b41f359b6d4cb12ce21f18db9ad4a85842633074c40f4c28434cef1867733fc61c30953069644f475093986d5331607f6be0","ssdeep":"6144:vWFC71t3mlHLLCIITPdCiSuGfzxOs9oiVaRBJUg:XKLLMTPdCipGfzxOsoD7","tlshash":"c2155e4ba3e62422a567b1794e3f94057a36941f5e49fd983d4c42c84f1c83c82fafb9","first_seen":"2025-05-06T13:24:41.41214Z","last_seen":"2026-05-13T22:55:22.842531Z","times_seen":6,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/personal-loans.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/personal-loans.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 402\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9665f39ec75cefb18e4676d3d64f536","sha1":"3fc5d0a173379e70ba04c6bab7028d445e781732","sha256":"0e811c2f682d04a5fa976336da4b3fb0da6c24be86cbe3916d899777d9681c3d","sha512":"98ac0b6b68d97dc786601dfef8a9959a346e222ada6fa05c0823354147e65e674eb92d833de03e52aa493aea54345ba2f65ed2a91554ae04cefff83889b6f3ef","ssdeep":"","tlshash":"1301105a82bd37bc201707a8b5389a41b56e50f0b31c35f449ff13332927e64d8a38ad","first_seen":"2025-05-16T11:00:05.360032Z","last_seen":"2026-05-13T22:55:22.819531Z","times_seen":5,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/commercial-checking.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/commercial-checking.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 456\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a4e9e94e18ccdc5be5eac61b24d9e33","sha1":"fac7c7c2b1298e1923324235553ea0700f8c71e0","sha256":"e412a4fd4511190d42aa8cf1aeae71b2ee2e7cb1925646d90244e2c11d2791cd","sha512":"1ba7eab7a6c654690a1317bbc75a3111ffea369f3a3007723cf992d106af1d972adc8dd46479a6e8af120d94347be6bb9217c87458e153cf3a193c551445eb78","ssdeep":"","tlshash":"9d011299422d2bbc246f86bc907b8645a7cd48f1f348b1e451dd1930602fa15d19327c","first_seen":"2025-05-16T11:00:05.28474Z","last_seen":"2026-05-13T22:55:22.883455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/favicon-16x16.png","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/favicon-16x16.png HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3253\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"38596e52501187c48b0717898605e187","sha1":"631c47828d90e9d51d3e1dd6e8b72dbb8c7c703f","sha256":"75a49430f25696aada3b2a3a3dce866b0c2bd51c1125b208be38b10a9f88b783","sha512":"9a2e46a3a734037f6d2a685bbaf2f9d02fc5f9e18d70826e086bec34baf171592a227135c720c5cdcc310de78c590c00fa4b503b9609673700b0f93fe65e3c49","ssdeep":"","tlshash":"19617cbbc920a1adb9cd35420ecf0200e33d31ac9ae73b3cd5c266de6464c0727a48b5","first_seen":"2026-05-13T22:52:57.937957Z","last_seen":"2026-05-13T22:55:22.827786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1110/wheatfarmerhand.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1110/wheatfarmerhand.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 327826\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":327826,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1600x900, components 3","md5":"35573fdbf28329a266e9c17e92e7cc96","sha1":"bd1525e93b9f1d29024ff4a5cc94e6e855a66b79","sha256":"a01c7d61009753aa2dfc43cb3682a079e3140cc77f68fb764ff51ad4c6112823","sha512":"2950b516fc66019a54c7ef1eb9acf5df60b90d0de50cc45f8ee4de2d93523bd4099057ff953f692e791e8c90214ab777ab20b57336debf529906d48312b255e2","ssdeep":"6144:FZHj279k7ER0DZEItkgScdZGiFdYFwIXp0O02vOvLu6YjMfSmQjG1XhoVT4VGM9R:FZD0YEWDZPtkgScX7FdqNp0bLuQ7xyMj","tlshash":"a36423c3d743e21758e547b8458fdfd468b9723c2be485af8320c60497ef2a699087b9","first_seen":"2025-05-06T13:24:41.394077Z","last_seen":"2026-05-13T22:55:22.83597Z","times_seen":5,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/oYTFYO5ZpT","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/oYTFYO5ZpT HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6196\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69ef3c39-1834\"\r\nexpires: Thu, 14 May 2026 00:52:16 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc97\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18118), with no line terminators","md5":"0396887e24f82a5c739687747a2d5d1e","sha1":"e414bf5b0189af9d82589194ceb3912190f5ad4c","sha256":"dadbf61af1aa9ede34b6bd9797f5cc4a7d1e90901cb10fe3b20e1573502a1254","sha512":"a01a07fd246c3060e31ec3363f6f8f43d544c9670f76d43f2d79d14fe03d1be6481ec6f04c4639b4ddab11c9454640251c3797baf3afc2a3c8522e1b555ea672","ssdeep":"384:boU+JvepohmPF0jyrArr0aX55Mf7qISOqrebz8sROweqWcPdv:UI//AjX54cr7sXWcPdv","tlshash":"f1823b6e7959b97743b218b9516f6209733549ebd404c920a401e98d7cb8ace813fef8","first_seen":"2026-04-27T13:30:50.955671Z","last_seen":"2026-05-14T01:57:27.24673Z","times_seen":1259,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":361,"dns":146,"connect":61,"send":0,"wait":80,"receive":1,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-4.jivosite.com/widget/status/2498099/oYTFYO5ZpT?rnd=0.1680994217924482","fqdn":"node-ya-4.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"5.252.32.145","port":443,"asn":59796,"as":"StormWall s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/2498099/oYTFYO5ZpT?rnd=0.1680994217924482 HTTP/1.1\r\nHost: node-ya-4.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: sw\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://bankabillions.org\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7c79cefc35cbd472114d2c94672ea9fc","sha1":"8391f7d8f0be9d0e51579b96326fdbd892522783","sha256":"a46be6ea94e82088291b9b6b1da594bfe72374630af168e38608d9cc446f890f","sha512":"28a75d5e670e75011683c475f1bdb796af96060d09d354bf31c5fa685210c0f7844160365663fb086f005172195ccdccb627e1a05aedd9ce38268d32c39b6627","ssdeep":"","tlshash":"f6c02b3e51b6d5ed5750cb84e1e7370b0670010316c1c7149341ed00756fed1d1de007","first_seen":"2026-05-13T22:52:57.940763Z","last_seen":"2026-05-13T22:55:22.874778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":118,"dns":49,"connect":19,"send":0,"wait":72,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:07:03 GMT\r\nexpires: Mon, 10 May 2027 10:07:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305114\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-14T01:42:44.165479Z","times_seen":45809,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1597\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 May 2026 02:53:19 GMT\r\nexpires: Fri, 07 May 2027 02:53:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 590338\r\nlast-modified: Fri, 30 Jun 2023 18:58:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced","md5":"c4a931d597decd2553aac6634b766cf2","sha1":"6ec84fb4a2745b4b71520241be77db1fd1013830","sha256":"f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e","sha512":"4932e0f7f38085a7c52539bdd5c7f470740e560a4471bea30d12ef9e3efe77f6bbfac28d26c62a245c43d98ebf74c824b2b414843080a27edf1563a5f874ac84","ssdeep":"","tlshash":"7c310afff39e8cec419e764069ba5965a362cd68233e928f14499592e4d007710f5f41","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-05-14T01:42:44.109045Z","times_seen":12755,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-05-14T01:42:44.141219Z","times_seen":70416,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":74,"dns":3,"connect":20,"send":0,"wait":29,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/loading.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /translate_static/img/loading.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 702\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 18:01:59 GMT\r\nexpires: Wed, 12 May 2027 18:01:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 103818\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"eefaa072b284a305c12c06608333abc2","sha1":"58272721ccc1efda26eaa22354022c7c793edbb6","sha256":"fb6b7bcc1ab09f27db17bcbdf5239ce1d52af34f1fc5125b3fc8528a07848d21","sha512":"c5ccfdcd9ce76de85f043a1733c9f0b620e15babbaf2a5639684c7b2bb8e5a66473c9a83f14cb48d9cb6c6a1c6b36f2c5a28e25abaf131fb85ec5eedecbae4ac","ssdeep":"","tlshash":"5d01dd13f3d50473f66d0075a20cc57f010635daaadad7089a48117cfe1983c5239b82","first_seen":"2023-04-05T11:18:23Z","last_seen":"2026-05-14T01:42:44.142356Z","times_seen":12412,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:27.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bankabillions.org/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1094\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1094,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en-us\",null,\"TE_20260512\",null,null,[4,0]]],1871,[[1778712737361,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"876D6B52-DF67-491C-9AC2-7169291578EF\\\",[\\\"https://bankabillions.org\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[],[],[],[],[],[],null,[null,32000000],[null,32000000],4398,4148,21355]],[\\\"translate:page_load_to_initialized\\\",[null,32000000],[1,190000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1778712747362]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://bankabillions.org\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 13 May 2026 22:52:27 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-05-14T01:46:36.322266Z","times_seen":529041,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1110/housekey.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1110/housekey.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 242444\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":242444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1600x900, components 3","md5":"072c1874c439310aa41fe67da474fb2f","sha1":"6aeb2ccbe94ff635134e9db69f16187514145e8c","sha256":"cf5b8fd591e160ae05ad64f146b7f82ff476b1fc0dff7bd797451fa068f5ee28","sha512":"1de9cb1f702a15057e2527ed96466a84d9aea060922ba7787de42a13d0efc9b683e16000f81db73af38178328b0a3ce6b5c9ea64f8a94e683171b563300032a7","ssdeep":"3072:Zvx56qzJDZ24oiLrnqpN9mmvUfnIQXmv3GpcaudWT5yjUG9g/PPtnuMEQjhllXbY:Zr6Qv2ViXnqU2U3mepflyu3Jv/M7NP9","tlshash":"e034231310d4d1274b9d8660287b194eb338333e2ae1b9ed90598d4ef4e51b44ea7bfe","first_seen":"2025-05-06T13:24:41.42963Z","last_seen":"2026-05-13T22:55:22.853656Z","times_seen":5,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/bazing-checking.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/bazing-checking.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 457\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e42ed1cf1579593cd0792efc757c76a","sha1":"e2b54cbe30b335ebeeab2cb64af4a6fec3e0b959","sha256":"00cf252d378f226b35070569ad1baf164ec5e82d0b5606a23a45f934ed27225d","sha512":"ba1e92ba9b33dc7c86e2b852c65866da70a32786ecefadae2664fc04f781cefd2b58e9c49e3c99627cb2440f0d7aa06ce46bf9965ab72ae628c4c9c156f34199","ssdeep":"","tlshash":"cd01ce59432ea7ac246b4798c8379481b68d50d6f34ce6f414dba3357107ae8dc6313c","first_seen":"2025-05-16T11:00:05.35097Z","last_seen":"2026-05-13T22:55:22.860204Z","times_seen":5,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/agriculture-loans.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/agriculture-loans.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 495\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf52b2eeee4e827425d0837f376ebe9b","sha1":"c047a0a5b163335fd6e4ecb884d02b1dbadaca2b","sha256":"0ea97ae966283eecef5749723e494540d919909776e2198c079b94381f2db8dc","sha512":"13a06191fd2be7ca28750f952f72e310945c990526323bd504e6aac08d54bb3b1d5a96a7d395941e089de317204f49369f1fe85cc9892ac8543e51eea9aeba62","ssdeep":"","tlshash":"67119ea8462f7d7d14070644d67b5282ba4f6cf4f31bc8a848df2332d207854d9934a9","first_seen":"2025-05-16T11:00:05.352203Z","last_seen":"2026-05-13T22:55:22.830182Z","times_seen":5,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 May 2026 10:31:46 GMT\r\nexpires: Fri, 07 May 2027 10:31:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562831\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-05-14T01:42:44.115835Z","times_seen":65146,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":52,"dns":2,"connect":8,"send":0,"wait":9,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 18:43:16 GMT\r\nexpires: Wed, 12 May 2027 18:43:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 101342\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-05-14T01:42:44.170219Z","times_seen":10514,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/css?family=Open%20Sans%3A400%2C400i%2C600%2C700%7CLora%3A400%2C400i%2C700%2C700i HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1544\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d468a2f10a85489cfe72de4c62b7da2d","sha1":"5c0ccb128174bd4caa9bcebf41f66807ef1f5b4c","sha256":"0bd44dc45202acf3d88fa8f1d81882e4ad4d7e3f5dafadd76eae0cffb13e9426","sha512":"dbb4597a35dafb1dfec7c1fe3a0bb614f11d8acff7b8ba6bbcab98aea3ce8d7654d63fc3d4623089e50d04ca8ca2d21cea8f0a03d29a154cfb5f66a001c99234","ssdeep":"","tlshash":"fd312710041ea671a6211ead3bcf7f398d9d681d2046c16d4732987cfeea83a93e1f1d","first_seen":"2026-03-29T18:31:14.716448Z","last_seen":"2026-05-13T22:55:22.83441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/uploads/logo/logo.png","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/uploads/logo/logo.png HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14863\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 118, 8-bit/color RGBA, non-interlaced","md5":"eeed6fd5499b3ed2581b8f6072a54571","sha1":"0e0f0b2c52a0e1ad0ad2526f82236c30abf82b99","sha256":"d5913281ee134e0ce6c494b60c5643791c32cf6f87aee0816e2d6aaba80c6d4a","sha512":"194596093ada068659ae7220d0ed423010bce22810f4a944aeec9a8640ba7922be0e42d38762058cac8caa00d7b02984089eda0c6216efd9e203833a34ff8a2c","ssdeep":"384:gx2FSsXYWcOI7mry1JheF7ePUjMqEDvfCTnvKYS/so5Hj:uuIOWmrshBUBMCvd2ZHj","tlshash":"a962d0a92430e4add18b7edccd1eb16649ba21b56387df1003372212fc5a7ea8d643e1","first_seen":"2026-05-13T22:52:57.951442Z","last_seen":"2026-05-13T22:55:22.868867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/internet-safety.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/internet-safety.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 522\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"132f7ced3fabdc9c2d01cb118665f281","sha1":"f5d2746ffdf134a251860337055b1d77fdcecb81","sha256":"49443f4ab8e05259d60353a55cfb1771ed3174da271b5415665005f32ba0ec9a","sha512":"9650773104c5932f2c7769f2332b43fb9b71b8af5d9e42ed4f58bd99c5394123b83c54fc115031056859ff035f3ad63c8bff76c07588d3850243f701dbcaf187","ssdeep":"","tlshash":"872148856e7263fc58a56f892f11941c5ad924a3fb620be8845cc1f44dc2da8a5bac44","first_seen":"2025-05-16T11:00:05.356497Z","last_seen":"2026-05-13T22:55:22.88035Z","times_seen":5,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/android-chrome-192x192.png","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/android-chrome-192x192.png HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12947\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 144, 8-bit/color RGBA, non-interlaced","md5":"0a8607081daf4e0b66fa0cb41cb6d387","sha1":"aefff73f256515f2c6a194bc4811a53465243fb7","sha256":"a90184bc537260d9856a296d856a7015389f1fc7f4a094a159d3f39d7c6f8946","sha512":"1219c408c50329323477eaabde5006ee7e0460bee8091544264308887cafad292b5d337b0e37c95962751eda8ff70737bf6d12ff69aaef4e954c39578cc43350","ssdeep":"192:RSDS0tKg9E05T7yzPA5sYUmg4TPuE+ExHqaWu+D+8BPRzVsRKcVx7s4iihFDR2D:4JXE05L2YRg42EnxHOu+DbeKSRm8F4","tlshash":"6a42af76d53dcacc94eeae211890e1128aa9204ec67736bccdc152ff20545da97a1ce9","first_seen":"2026-05-13T22:52:57.954844Z","last_seen":"2026-05-13T22:55:22.838106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/cdddffe/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/cdddffe/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3431\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ef3c39-d67\"\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-13T10:05:11+00:00\r\nx-node: m9-up-gc97\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10672,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10645), with no line terminators","md5":"0f87471a3d1fb33be6a51912861776bb","sha1":"8bb52b99066392f10ab336b980dfbe0b8fb4dfc6","sha256":"34e2fac9b502488543160a64f763a23608d196acf4dd0c4fecd57ef957572fcf","sha512":"a363d37884af6c3b20e287e9324a16055968acc28d04f79d7acb9b5f8a0cc67e7edf70d05495a9e9dbe14996e704484d9b710ae06e12bd6d87d9d68b515a54e0","ssdeep":"192:xbPfmk/7Obf14M6dOIpUTPqZ8BijFLeEJK:x7fH7ObdFWOIphZ8wjFCmK","tlshash":"a222d71ee7017f360fa613c3744f7b5376a480e592646c75d89c826943b9bcab217b8c","first_seen":"2026-03-31T14:01:24.495424Z","last_seen":"2026-05-14T00:48:29.759971Z","times_seen":865,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:18 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69de0593-16b0\"\r\nexpires: Tue, 19 May 2026 23:58:12 GMT\r\nlast-modified: Tue, 14 Apr 2026 09:14:59 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-04-19T23:58:12+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-05-14T00:48:29.763659Z","times_seen":15179,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/logo-member-fdic-gold.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/logo-member-fdic-gold.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1032\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5f4ab9a95031906152797921b65ba0e","sha1":"b7e9d185bf556371388d39c280b6c3e2434a9a1c","sha256":"4517a5fa1a3f9bfec65f25ba68d9d5e40c7f8ffe02c9ad0c40753a62683dd164","sha512":"fe74cbb75cbcf8e2b5f7234172098f87d6cf2ef50fd55351f6a112800cabd8819ee8e9618ff74792a5c5267279e3748a1961cd46b0fc2df8c301257b85429dce","ssdeep":"","tlshash":"e7410e19d39567bc6d89d7b06334bc343c9a62bea0b8676cc475d470b3538d8cac80d9","first_seen":"2023-05-15T05:52:39Z","last_seen":"2026-05-13T22:55:22.872774Z","times_seen":44,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/button-section-background.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/button-section-background.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70018\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70018,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1900x1267, components 3","md5":"59fbc02232065d8258affe953b8e6db3","sha1":"06623a6ceaa149e4409354a7073508be8c8ded6e","sha256":"54856a0378dd716ee38d8857103513e020c86eeab22d9394e9d13efafd7369cd","sha512":"8f5e5795c3643105e5142e6b718bb5c22ac2a4600003f200af7644d11a48da591d090d577fe78627c31c2e67a4874e4e6048a22f28c6674716dcb2c11ed8aa62","ssdeep":"1536:/d8FRUDKloupF0iDeSC3WlttV01aOqx7IT//e0L:CFRiKlZpFT/nqPz3hL","tlshash":"c3639e27bf0152a5c5a85731acf70f2a3f9244ba43e10217dbbc11389df7714ad6baa1","first_seen":"2025-08-28T00:05:07.880731Z","last_seen":"2026-05-13T22:55:22.873784Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/oYTFYO5ZpT","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /script/widget/config/oYTFYO5ZpT HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 717\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Thu, 14 May 2026 00:52:17 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"898e7b8dc7fc02117407ec79a10d6bd2","sha1":"608514ab740ad553529b5c53e2efdaf16aebd750","sha256":"c3d768a67fca398c51f738528c89a517a0d4f0aceed67c4174c8cf5e05cc322c","sha512":"1de0f56aa105cff0dd113bb80062e37d51d541b187ba76024fd5df611e9de1174c1cb4882de82e08e86d85eace85afeb44fc59c88474997bb3a9ef9f0b619f0c","ssdeep":"","tlshash":"502141f20c48686b4d857e87a15bee07253c82a7ee854f70da94ad2c11923d5131b60a","first_seen":"2026-05-13T22:52:57.960578Z","last_seen":"2026-05-13T22:55:22.867741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":127,"dns":2,"connect":58,"send":0,"wait":250,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:27.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://bankabillions.org/\r\nOrigin: https://bankabillions.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://bankabillions.org\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 13 May 2026 22:52:27 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T01:46:48.238784Z","times_seen":15141151,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/index.htm","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-13T22:52:16.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/index.htm HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4148\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21355,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2aa32f45ffbc321d4e333b82eff6854b","sha1":"ca0bfe85ff307ab4ab0b7cad17518ac61b0e6c54","sha256":"a3132695b5ac8199dea4afbd6cdd68b93ecd28cb488b5040067caeefd6591d44","sha512":"6911698e8877aeb50ad743b8d886ef95a2c0aa9e993463a71e28125643fc761b9edfcfb0485d13472f190972fb3138cea979603546065a968eb98f9c5864ed3f","ssdeep":"192:/sA3/EB2fakpVVhP72+ewpK8fffCjqfWqPSjnR/:RPEBzk3DI8XfIqfWqPS1/","tlshash":"d4a2212168f1603b00d382d5a6b66b2bbfc2c50bda1a5d01b2fc0bd65fe2e479d4764d","first_seen":"2026-05-13T22:52:57.962116Z","last_seen":"2026-05-13T22:55:22.879032Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/images/icons/social-media/twitter.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/images/icons/social-media/twitter.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 443\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":880,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fe464e831438e31e235ffe334fcffb4","sha1":"8df6aadd7c752c5795b53780ebd1fe2bffaf68d3","sha256":"b225f7028112adc774936ba16d825339e840dc4c70f68539ae86f67ae921eae7","sha512":"15f190e9870ead6216867104195eb345979fc4160650095c7a343e098a08fdb9103b5c45e4bf74854651b80bc4e12878b65ffe31f7fcf5fe453ea91811963d69","ssdeep":"","tlshash":"fa11ef6bf66d7cfd5013c3f895067481138fb4a577180792f4dd9931201be68cb43412","first_seen":"2025-05-16T11:00:05.334434Z","last_seen":"2026-05-13T22:55:22.82565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org//analytics.js","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET //analytics.js HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-14T01:31:13.503221Z","times_seen":126670,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/cdddffe/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:18.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/cdddffe/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:18 GMT\r\ncontent-type: text/css\r\ncontent-length: 25535\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69ef3c38-63bf\"\r\nexpires: Thu, 07 May 2026 13:51:53 GMT\r\nlast-modified: Mon, 27 Apr 2026 10:36:40 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-07T13:51:54+00:00\r\nx-node: m9-up-gc69\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"041432f71dc9bc619e6d6b6cb8f6d90f","sha1":"93bef8763a54d977d1b59c07353b2211296005d1","sha256":"c54015d15bee5fa4c4b0279b81dd37c2da14fdb0aefcbed726b4f062f1ad7d72","sha512":"751778dc90451376573375f1ab343498871c15bd42721f03feb76c9c0afcbc39a4c222fd12bd0aa5d9a5a9702709a442dde001ee2157b78a9aca587b0087e82b","ssdeep":"1536:yL5YTK1yt6s6UrhRDuGyr2a2fSup2yM6j6F+Lld4EUl61F6PQniDOIOADF6XckoQ:1Wq2VfoZ3YHH3I","tlshash":"ffd3e86aead1a53ce51a581ac8c5aa3ca63dd102cf231dbff744f3e147c76e21276805","first_seen":"2026-04-27T13:22:49.046602Z","last_seen":"2026-05-14T01:57:27.106335Z","times_seen":1201,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1103/convenience-is-key.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1103/convenience-is-key.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44160\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x426, components 3","md5":"77225585c184e98f2b7a5d6fb12c8d64","sha1":"6a515cbeb19da6d67075ad94a6ba098ed2ed85cc","sha256":"7e41de09085c4b7f63f8c3fc4d3f40f8be41d6d4bb8ad32231255b7b3bf3de84","sha512":"80f38947a5219a438f7a5585eb3660809e8b3f77687f470e896d943ae11c904e7230fab6c0802c351e445f3aed1763c1fda35e5db31409b428f2044750a7c6c0","ssdeep":"768:pf92Cla7IMrmBo2Upf9vPg4xuYD1T5LWnAqyHWu6z6TOoB8C8:J9ra75rm+RpB/uA5CXgr6OTeC8","tlshash":"101302c34aa9a24d4edced68eff0fd1c5d854e7c31a49187399e6cbb1329c8088b5791","first_seen":"2025-08-28T00:05:07.837502Z","last_seen":"2026-05-13T22:55:22.861508Z","times_seen":4,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1109/financial-tools.svg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1109/financial-tools.svg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 299\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1163,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb1713f5ad384dadddb0440bc962b33","sha1":"256b788bf92ce5346e3d2c50d2ed4c297c7be702","sha256":"6a5620fe1e9a63f9929af5f1e15f01f610d6af2878d577acbfb96d305c5374c0","sha512":"bd4c71710bf582efb3f3353e4564b33db0dc8abb1f0b70a618cd157b1d594632150665ee927aadfc8d36f110e77b892bb77cef3c9c6295ee4e123712a174f646","ssdeep":"","tlshash":"e521381b552ce02806bb0357ed143b0c3e8c3777d41d4df8593eeba1caa309aac5a989","first_seen":"2025-05-16T11:00:05.36127Z","last_seen":"2026-05-13T22:55:22.847029Z","times_seen":5,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBDg/d=0/rs=AN8SPfouA6X-4oqVZ41sMfXPdYPzSvIi1g/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 11 May 2026 21:02:26 GMT\r\nexpires: Tue, 11 May 2027 21:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 179390\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-05-14T01:42:44.105234Z","times_seen":5938,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":101,"dns":1,"connect":15,"send":0,"wait":16,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/fonts/slick-carousel/slick/fonts/slick.woff","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/fonts/slick-carousel/slick/fonts/slick.woff HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/css%20%281%29/labette-bank-2018-07-20-11-01-15-CDT.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1380\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1380,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-05-14T01:15:07.608571Z","times_seen":21803,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bankabillions.org/public/sft1103/commitment-to-service.jpg","fqdn":"bankabillions.org","domain":"bankabillions.org","tld":"org"},"ip":{"addr":"37.49.229.75","port":443,"asn":3920,"as":"ESTOXY OU","country":"Estonia","country_code":"EE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:16.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bankabillions.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:49:05 GMT","end":"Thu, 25 Jun 2026 18:49:04 GMT"},"fingerprint":{"sha1":"48:07:70:63:5A:71:57:D8:90:4A:2C:00:29:AD:B8:03:EE:FF:A4:11","sha256":"49:32:CA:4D:E1:93:4B:D1:B1:64:3F:48:28:8B:F9:1D:08:24:70:ED:C5:A1:F6:2A:26:72:F9:CD:91:7F:AB:EF"}}},"request":{"raw":"GET /public/sft1103/commitment-to-service.jpg HTTP/1.1\r\nHost: bankabillions.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/public/index.htm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 20 May 2026 22:52:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Jan 2025 07:53:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47783\r\ndate: Wed, 13 May 2026 22:52:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47783,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x426, components 3","md5":"55818c63c6a72fd3acfee7be45eb9c76","sha1":"d2d295c01974c360f73c1dff403d5b0916e51a33","sha256":"ce701e02b57b0abc70eb71ab73c45311a60c04c9f97f775eacc42dac25614b7e","sha512":"7dfbd088c8b2b99af132ffcb826677485fb197f09b59f5337750ca7eb9f2b55102921d572dc0b5f4c1d41fbe8a1bea2bc5e89d6b3798e0eb6cbf03593f292d8b","ssdeep":"768:gONBcfVpaeAEEx6ZJdOiYlzGNpWxgCpCMFIBtLBjZ/K06XGgkN00vnMrLpspLu:jcfV8eAEEAZvC8NExguxIBtLZdD6XXk8","tlshash":"db23f135b285fc20d64f017b118ee639d8b4ed04d73e5217980b56ee6ff59c829c9ad0","first_seen":"2025-08-28T00:05:07.866849Z","last_seen":"2026-05-13T22:55:22.829305Z","times_seen":4,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-13","alert":"Sinkholed","trigger":"bankabillions.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1777297771","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bankabillions.org/public/index.htm","date":"2026-05-13T22:52:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/bundle.js?rand=1777297771 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bankabillions.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 13 May 2026 22:52:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 341857\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69ef3c39-53761\"\r\nlast-modified: Mon, 27 Apr 2026 10:36:41 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-13T13:52:11+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1550289,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"929a29a07012c618db937337fe12b5ab","sha1":"2c5578f8dc5ed5d81f390d55b3a099af15297974","sha256":"88867a565b506997c06bf955c9f1eb73e486003b555485833716c99333bbd768","sha512":"bc4b3feb78cab28928556491954ad9fc13dcf636500bba55803acf4bcff7e9413df982d207dfdd9c66e868bfdc595517ae16647ec617572fb36cfa681a41e44d","ssdeep":"24576:PIuR2z48eK9n++ePuZlhExSZCPXdPRmT3r7O1kxS9:PIuR2c8eK9n++eZSZCPXdPRmT3r7O1eQ","tlshash":"67254ac5b1d1f46502d355e6643b2009b23b285e3809b064fabcddcbfa6659e6233f39","first_seen":"2026-04-27T13:22:49.267492Z","last_seen":"2026-05-14T00:48:29.734278Z","times_seen":1175,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":63,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}