{"report_id":"3a765d2f-b414-4fa5-b331-31ae06cf25c6","version":6,"status":"done","tags":["commonwealth_bank","financial","phishing"],"date":"2026-01-29T12:11:46Z","url":{"schema":"https","addr":"agroencinar.es/comm/login.html","fqdn":"agroencinar.es","domain":"agroencinar.es","tld":"es"},"ip":{"addr":"185.101.225.38","port":0,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"agroencinar.es/comm/login.html","fqdn":"agroencinar.es","domain":"agroencinar.es","tld":"es"},"title":"NetBank - Log on to NetBank - Enjoy simple and secure online banking from Commonwealth Bank","dom":{"size":9531,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (404)","md5":"4e4b5aa2238c8ce918a3fddaa8869aeb","sha1":"b67c4cd7b918ac247f13c155f41e9d712a39c991","sha256":"b2bcec5f1bc05d67a7f96682695ddfb2ace42949f97bcef632ed094b5e9a34ea","sha512":"7ac44659072650266cf609ffad2f1d9639ac9d63606df2e1e8d1f2f10b2b19d7e962638afd64df9dd96c47be978fe002ee5f4544dc35daa30e09b25c88d8ffe4","ssdeep":"192:Ig4D7q+QjFdsl3eiwtOVHjhrzXjhr4cwvrpreyRcwtOBGVkZktOSRmyRPC7yq6P2:IpD7q/Fd4OiwtOZjhrDjhr45vrpr3RcR","tlshash":"9512412112dc6c7b41128283b070f75da09f8e7ade6294f6f2bf19195382ac4f52b06a","dom_hash":"domhash53c9bda523ac7457f991bceaad72fd44","first_seen":"2025-10-27T13:21:34.421132Z","last_seen":"2026-01-29T12:11:48.576652Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"agroencinar.es/comm/login.html","fqdn":"agroencinar.es","domain":"agroencinar.es","tld":"es"},"ip":{"addr":"185.101.225.38","port":0,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-05T12:11:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-29","alert":"Phishing Block","trigger":"agroencinar.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"agroencinar.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"agroencinar.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Commonwealth Bank","verdict":"phishing","severity":"medium","comment":"Associated with Commonwealth Bank phishing","tags":["commonwealth_bank","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Commonwealth Bank","verdict":"phishing","severity":"medium","comment":"Associated with Commonwealth Bank phishing","tags":["commonwealth_bank","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"static.my.commbank.com.au","ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":5189057,"first_seen":"2017-01-29T13:59:55Z","last_seen":"2026-01-20T02:47:01.014805Z","alert_count":0,"request_count":6,"received_data":76209,"sent_data":3787,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"agroencinar.es","ip":{"addr":"185.101.225.38","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-10T06:17:17.372869Z","last_seen":"2026-01-10T06:17:17.372869Z","alert_count":4,"request_count":1,"received_data":10167,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WP Rocket:3.16.4","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Commonwealth Bank","verdict":"phishing","severity":"medium","comment":"Associated with Commonwealth Bank phishing","tags":["commonwealth_bank","financial","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/cmxAssets/netbank-logon/commbank-safe-nb-lo-tile.jpg","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/cmxAssets/netbank-logon/commbank-safe-nb-lo-tile.jpg HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agroencinar.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-ray: 9c58a1c9fb87783d-OSL\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Tue, 23 Sep 2025 22:41:41 GMT\r\nset-cookie: BIGipServerstatic.my.commbank.com.au_Burwood=1931615916.35437.0000; path=/; Secure\n__cf_bm=umzUGOlY2PjGGxJ7MOwuG2df8KGm2Q36VpJ_7H0_DTc-1769688685-1.0.1.1-d3IcU2hHMarPiKXUQWHTL6cNQ.SY9xWcoBJYJ2j1lYLJUEV_MFI_TfPM8jYIe5r0uMVII.XOuEqy6eRh4hmUACld27QmTLDvI7WLPRndGpw; path=/; expires=Thu, 29-Jan-26 12:41:25 GMT; domain=.my.commbank.com.au; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 201x96, components 3","md5":"837d212fe9194a27077e8672d0a20aff","sha1":"00aa7fd84a234a6eb2d5ec74db54c65ccd4a91f9","sha256":"364974a3fe232e55714a50f7cf4817ff41c21c9a88f30342ab8f3ee6c42cea99","sha512":"4ec1d139f57428fa271d04cd4d91229a79190cc20f7318b245de02b229d6fd46cb8b8ffaa77769621d6ca3bc869c9820e184c0b78f10937dd996bf45e9ec75cc","ssdeep":"384:6YNg7Y1GIGxSNtDHCpMBECb4ka8OfUEl3LqIIb:6YyyGIcUDkMBECb42UbqI4","tlshash":"ac82c0799f7be126c411e63894d00be099a7bb38af1b4e8470a897afc545591377e08c","first_seen":"2025-10-17T20:26:31.666661Z","last_seen":"2026-01-29T12:11:48.578558Z","times_seen":6,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/netbank/theme/fo/images/cba_mainlogo.552c5a58c5e8e13c837eac9f362e571a.svg","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/netbank/theme/fo/images/cba_mainlogo.552c5a58c5e8e13c837eac9f362e571a.svg HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agroencinar.es/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\ncf-ray: 9c58a1c9fb92783d-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 12356085\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Fri, 04 Apr 2025 04:22:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nset-cookie: __cf_bm=Xq8OVnHpMhT3shdUlBSxvLv4MtluDwwqeLKeasTpcsU-1769688685-1.0.1.1-4tS3xND9PWf_Wsn0hhN0HrMNjyIfY.WjmWen3WT89G7YovNEz5cPpiJrhkROGuYcnzL4t3w5SEXarxgx5vbcwD0dPcv7Vn8UkqZ3U6n.Elw; path=/; expires=Thu, 29-Jan-26 12:41:25 GMT; domain=.my.commbank.com.au; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5570,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"552c5a58c5e8e13c837eac9f362e571a","sha1":"3ad9e69a1d544ef46455e8ff680fbd5f078f4c0f","sha256":"3b4eb9868fb9248fa543a745027ca5ccc80741eaa4751fd86f0c4d778f2af786","sha512":"a5b1466f7b8a5c4d9a071affe2f39ae5490bf114db26df20013f54e52403f9d2311980fafc60a77422215ed3a69286f64668925c1c2f4c5474547bcde6defbd2","ssdeep":"96:EaLOLILzp+2686um6Nm60EoI1Pm6Nm6TEotlT6uzFgXKucPLkOHVpNsWgP1:xzTNXn5Xx55xXt61","tlshash":"96b141b64b3c1a37a4f7429cc2c81581769c8593f1b0d1e8f776666f0d31aeb459cb12","first_seen":"2024-09-19T22:21:46.40825Z","last_seen":"2026-07-29T04:29:31.954526Z","times_seen":37,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/netbank/theme/fo/images/hbg.0236e4e9a193069c4e8554db8b06354c.png","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/netbank/theme/fo/images/hbg.0236e4e9a193069c4e8554db8b06354c.png HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.my.commbank.com.au/static/netbank/theme/fo/css/logon-merge.26d40f052bde646f68e5a483f075ba6d.css\r\nCookie: __cf_bm=Xq8OVnHpMhT3shdUlBSxvLv4MtluDwwqeLKeasTpcsU-1769688685-1.0.1.1-4tS3xND9PWf_Wsn0hhN0HrMNjyIfY.WjmWen3WT89G7YovNEz5cPpiJrhkROGuYcnzL4t3w5SEXarxgx5vbcwD0dPcv7Vn8UkqZ3U6n.Elw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 9c58a1cafeeb783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 627749\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Wed, 03 Dec 2025 00:47:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4 x 475, 8-bit/color RGB, non-interlaced","md5":"0236e4e9a193069c4e8554db8b06354c","sha1":"87ebd8fcf29ee4ac820a5f372c84cc7554006fcf","sha256":"f0755c4aa02ff90cf951d4752166ce52ea98cb85b86186f954dcc5d9d9cd02c0","sha512":"d3c3b396b20f80f35578a4024c00270395756a3d8ba3d3ef9e48cf9a51f3e6caf64d71d1a94378d890c3a80600b88e57d7aaf660f6a520e45e86e39c8b75928c","ssdeep":"","tlshash":"63d097f24303fe32e90ef133c077202ec8894b74dce8f843244288a52dcbb09a040913","first_seen":"2023-05-04T02:58:13Z","last_seen":"2026-07-29T04:29:31.960572Z","times_seen":1175,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/netbank/theme/fo/images/logonsprite2.307a0c523f35f709f390895b4720d350.png","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/netbank/theme/fo/images/logonsprite2.307a0c523f35f709f390895b4720d350.png HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.my.commbank.com.au/static/netbank/theme/fo/css/logon-merge.26d40f052bde646f68e5a483f075ba6d.css\r\nCookie: __cf_bm=Xq8OVnHpMhT3shdUlBSxvLv4MtluDwwqeLKeasTpcsU-1769688685-1.0.1.1-4tS3xND9PWf_Wsn0hhN0HrMNjyIfY.WjmWen3WT89G7YovNEz5cPpiJrhkROGuYcnzL4t3w5SEXarxgx5vbcwD0dPcv7Vn8UkqZ3U6n.Elw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 9c58a1cafef4783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7464421\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Wed, 01 Oct 2025 03:37:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3969 x 75, 8-bit/color RGBA, non-interlaced","md5":"307a0c523f35f709f390895b4720d350","sha1":"94fc38cd1c928167f22a356181fb97bbf067b434","sha256":"c3787cbabd5c9acf9bfdc72c8e706754d644a14d5bd538e675c1885ccae87341","sha512":"66189622367cb29d1d576ce06ebbebb105d34e8b7f1dff58a9ea03fc5821a33cc6b7ff5d2a96d898ef04862e82ca4dff08ed4367af3ddcc4dea8ce134874402d","ssdeep":"384:PuGX1mCI9osbylctmYIz9G98BboaxLPC/h5:PusACINFRI+8BsyPAh5","tlshash":"e052b08e7a673d80f861d57168e17d0be647048f1091e42d87d9ccc91eab978b64258f","first_seen":"2023-05-04T02:58:13Z","last_seen":"2026-07-29T04:29:31.971064Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/netbank/theme/fo/images/cba_logo_diamond.37dea6048f7da9a9473614e0843d07d9.png","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/netbank/theme/fo/images/cba_logo_diamond.37dea6048f7da9a9473614e0843d07d9.png HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agroencinar.es/\r\nCookie: __cf_bm=Xq8OVnHpMhT3shdUlBSxvLv4MtluDwwqeLKeasTpcsU-1769688685-1.0.1.1-4tS3xND9PWf_Wsn0hhN0HrMNjyIfY.WjmWen3WT89G7YovNEz5cPpiJrhkROGuYcnzL4t3w5SEXarxgx5vbcwD0dPcv7Vn8UkqZ3U6n.Elw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 9c58a1cbd9ba783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5547580\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Wed, 01 Oct 2025 03:37:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 80, 8-bit/color RGBA, non-interlaced","md5":"37dea6048f7da9a9473614e0843d07d9","sha1":"673727199de0f5017d74ed0afc2786470b6b2e09","sha256":"9782a7cbdb4da46b3c226879826c580e7a2d31c31a4bfd7ac1dc0dbfefee74cd","sha512":"ff0e924baed3ba71f70f98a3375b578c0c8634aa9f82188c2ce2f13c865c8378b925989d6af53b9c7208dce7e6c7170cd2a56e8d0e420d6602b73bea8656ddb8","ssdeep":"","tlshash":"0d516d1ad354c7d7baf01936a30859feb72a079fea314c8e65d37d2340502278ecd499","first_seen":"2024-09-19T22:21:46.412424Z","last_seen":"2026-07-29T04:29:31.972944Z","times_seen":41,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agroencinar.es/comm/login.html","fqdn":"agroencinar.es","domain":"agroencinar.es","tld":"es"},"ip":{"addr":"185.101.225.38","port":443,"asn":50926,"as":"Axarnet Comunicaciones, S.l.","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-29T12:11:24.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agroencinar.es","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 19:56:29 GMT","end":"Thu, 26 Mar 2026 19:56:28 GMT"},"fingerprint":{"sha1":"10:26:C8:89:B3:35:9D:BA:1C:46:E0:A2:8B:EF:D0:1D:A2:75:4B:44","sha256":"0C:8D:84:28:87:1B:76:45:9A:DC:1A:2B:75:A6:64:AD:37:B1:C4:EE:36:26:E1:17:A5:03:52:9A:8C:28:2E:9A"}}},"request":{"raw":"GET /comm/login.html HTTP/1.1\r\nHost: agroencinar.es\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=0, public\r\nexpires: Thu, 29 Jan 2026 12:11:24 GMT\r\ncontent-encoding: gzip\r\nx-powered-by: WP Rocket/3.16.4\r\ncontent-length: 2829\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 29 Jan 2026 12:11:24 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WP Rocket:3.16.4","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9840,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (404), with CRLF line terminators","md5":"a906a6da4a1d8d43831299a681eb550e","sha1":"2a297b1b2de5a56187ff2d112f795c42056798f0","sha256":"c599d76662df041a04ca641070bf9d00f96ebc75292be7692cf6f405b3a369f0","sha512":"49ce5f872ded716d9d6b690d875f3be0c98a694f192a67ec3e8d8f3f5695f04457f10161e0472ba8ae9473686a1e177be74b56015ca2512979192a479cfe4ca8","ssdeep":"192:S6V0X3fY+QsFBW5iDjRqL0ZgDs7QgnsMc1ssosxfKRRqLZ3H1D1qLQRaaoG0Lorh:S6KX3ggFBOsjRqL2gDsEgnsM+ssos9Ki","tlshash":"4e12332132dca86b421382c7b071f359909fce7b8b6294b6f1fd26375382a85f527166","first_seen":"2025-10-17T20:26:31.652094Z","last_seen":"2026-01-29T12:11:48.585627Z","times_seen":5,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":186,"dns":75,"connect":51,"send":0,"wait":63,"receive":4,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-29","alert":"Phishing Block","trigger":"agroencinar.es","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"agroencinar.es","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"agroencinar.es","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Commonwealth Bank","verdict":"phishing","severity":"medium","comment":"Associated with Commonwealth Bank phishing","tags":["commonwealth_bank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"static.my.commbank.com.au/static/netbank/theme/fo/css/logon-merge.26d40f052bde646f68e5a483f075ba6d.css","fqdn":"static.my.commbank.com.au","domain":"commbank.com.au","tld":"com.au"},"ip":{"addr":"172.66.1.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://agroencinar.es/comm/login.html","date":"2026-01-29T12:11:25.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"my.commbank.com.au","organization":"Commonwealth Bank of Australia"},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Fri, 31 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:50:98:D9:FE:CA:D2:43:61:CB:53:6D:A3:04:40:1B:40:06:00:BE","sha256":"82:0B:00:32:8B:E1:EF:E1:7B:05:3C:84:90:EA:46:A3:DF:0F:95:0A:9F:41:F5:C9:AF:64:7B:0D:0C:25:37:64"}}},"request":{"raw":"GET /static/netbank/theme/fo/css/logon-merge.26d40f052bde646f68e5a483f075ba6d.css HTTP/1.1\r\nHost: static.my.commbank.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agroencinar.es/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 12:11:25 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\ncf-ray: 9c58a1c9fb81783d-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 8054754\r\ncache-control: public,max-age=31536000,must-revalidate,proxy-revalidate\r\nlast-modified: Wed, 01 Oct 2025 03:37:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=kIYhRKfxRBESWGuzg3VCyjmVOzNJ1rXUuqjoDwPNP0o-1769688685-1.0.1.1-t4Myz5PQn0pw0qeSB.qYJw1tOhlCpXEeLkwlJn8qELoQ5QoG7VC_0JBORN43B15yTiqC.YVGwk6zwYTy8kXkRMXdrj8N4i9DU8uOxsuys7A; path=/; expires=Thu, 29-Jan-26 12:41:25 GMT; domain=.my.commbank.com.au; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":31989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31989), with no line terminators","md5":"26d40f052bde646f68e5a483f075ba6d","sha1":"62397a4c137dd3c4cfefeaf4e634ea4d6df43ae6","sha256":"e93e27ce286a2aaa1ff48ef86f97dfcd2a555603c4314de6b92f149f333df557","sha512":"3f54c601c536bd7929ecebcfd6939a6aa500f7e5dde19851c08a4b178d2c991be711659dd95dd1dd3128b4377a4e20212de110e83169d13828a96bdd00d7957b","ssdeep":"768:cf4S/Lb7r775f/qPw6CaWOIl6E+NrmM+QKoOQmx/b:RY6CaWOIlf0rmM+QKoOQmx/b","tlshash":"46e2b7398aa129bff32f85b3f4a3b788b172840391175b7de21e5472996c99814377cc","first_seen":"2024-09-19T22:21:46.393553Z","last_seen":"2026-07-29T04:29:31.968027Z","times_seen":17,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":84,"dns":82,"connect":1,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}