{"report_id":"5cc1400b-8324-467b-8b4e-aaf3b4be7089","version":0,"status":"done","tags":[],"date":"2026-06-29T16:58:47Z","url":{"schema":"http","addr":"banktool.co.de/","fqdn":"banktool.co.de","domain":"banktool.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/banktool.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"title":".co.de Domain Registrierungsstelle - freie Domains zu: banktool","dom":{"size":42664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (355)","md5":"52ac6e8edcbbc559e22488b5c10f5c7b","sha1":"ed532f367845ea60fe4d2861df9304c7890613ee","sha256":"a057ca2e6d9b40bb8d8bafe0ab952c688aacf9df9ed172d074d381892dd8d7e3","sha512":"336c7bc468f695c5cd5860935f367293e97a91819e49ec3d05f80df4026d6a8dafda90d81332105d38fcecff4339489e013b69191e83c30fcc776897ac2071a7","ssdeep":"768:9PBeJjDuVXGLzo+SQzLi7Xi70i7/i7si7xi70i7Hi7vi7Yi7fi7Qi77i7Ji7hi7c:DeJegBzLexcnSLmebKFwgYgM","tlshash":"9813532622f200574293d2e1f5e1ef7ede9ac247c54bd89eb36c42866fc6c654d83368","dom_hash":"domhasheb5c9fe5f5b5b85da1a0e274337f7849","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"banktool.co.de/","fqdn":"banktool.co.de","domain":"banktool.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T16:58:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-29T07:38:11.336391Z","alert_count":0,"request_count":2,"received_data":47737,"sent_data":938,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"banktool.co.de","ip":{"addr":"78.46.45.26","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-05T10:01:48.081606Z","last_seen":"2026-04-05T10:01:48.081606Z","alert_count":0,"request_count":2,"received_data":247,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.nic.co.de","ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":5102739,"first_seen":"2025-08-16T13:17:44.198983Z","last_seen":"2026-06-01T08:05:18.091367Z","alert_count":19,"request_count":19,"received_data":793145,"sent_data":23496,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-28T22:41:44.776353Z","alert_count":0,"request_count":2,"received_data":211051,"sent_data":1153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-06-29T08:09:53.407277Z","alert_count":0,"request_count":4,"received_data":42174,"sent_data":2257,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/banktool.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"837fcd0538c9eb7874a0e7de174868dc","sha1":"87671c6247039cf097c323ebc06e7a137cf1a6b4","sha256":"fbb7b09ba8c722de7b4c6faa70d200ca01ee87a9d401c3a8a3521429f5f64eda","sha512":"f88ca6d6cf70d81d96ae7f1278cfffa6d2be1e440534650efc8012720ac62e9f37cb2a96cf10d612ad1f5fdd6759c7630b0e7aa2e76ba104932521959a0a752f","ssdeep":"","tlshash":"9951a02b71e2143b44f729e66bd74b857e290403808ac5263d7ecf491f52a80a473bee","size":3166,"data":"","first_seen":"2026-06-08T06:37:31.284297Z","last_seen":"2026-06-29T16:58:50.507047Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-BnamtF72.js","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"68eaa7a1fb4e292983d686a8e3a27bc7","sha1":"e0a6822ea32aaee94bdf16659f1663d3d4043f02","sha256":"98bed9b003fe68ed62addbbecbff41350a03d24705228e090e103bc431a3cb32","sha512":"f23ca9d46684dc6387317d724587473622fce92f296f163c36e8f647745ad4a79d1e421ffc9ee3c174aec7b36a0546fe559bbff434e84857a1b3d507ec2be3f0","ssdeep":"1536:d7VtH5IRiebHXxhbrnaPNBHGblh5I5SszS3XB7fC:d7V4R7bD7aPNBQlh5I5SjHB76","tlshash":"c973f6ea72d6b03283ea11f250bf4606f3396954784e4464f528ecda383648d56f3fb9","size":79554,"data":"","first_seen":"2025-08-29T08:18:17.08973Z","last_seen":"2026-06-29T16:58:50.494884Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"422c7d8cfa8b78375cc7a767d2ae5ca6","sha1":"7df3f287f769c205f1392de3532517d602cd1810","sha256":"57b37d7cae9a27d965fdae4adcc844245dfdc407e655aee85dcfff3a08036a3f","sha512":"0a30f697aff3d0fd675001e5fbf9724ba3705766e9da28de966d84aaa8394ee18cf3f49cf5688d12d51f2a6fc073b3a9a578ed8666404c53399e7abb3b210f61","ssdeep":"768:DBCz6escmy5dIOT2C3KBdoqCHL6POK/5IKXqLWoOAUORrST5GUGz++u3hBpShpJ0:FCueivEqCr6POQDXmWomUtzMBpShpJyn","tlshash":"c023f9e97396b13283ef01b190bb424af33d2994150e5464f669d8ee383948d51f3fba","size":46346,"data":"","first_seen":"2026-04-30T23:22:33.584041Z","last_seen":"2026-06-29T16:58:50.505418Z","times_seen":1455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"banktool.co.de/","fqdn":"banktool.co.de","domain":"banktool.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T16:58:24.929Z","timestamp":1782752304929,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: banktool.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: openresty/1.27.1.1\r\nDate: Mon, 29 Jun 2026 16:58:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 151\r\nConnection: keep-alive\r\nLocation: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":26,"connect":33,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/guoxuwang.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.986Z","timestamp":1782752305986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/guoxuwang.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 4080\r\nlast-modified: Mon, 29 Jun 2026 06:54:33 GMT\r\netag: \"6a4216a9-ff0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4080,"size_decoded":4317,"mime_type":"image/png","magic":"PNG image data, 54 x 39, 8-bit/color RGBA, non-interlaced","md5":"fa140cd1d2c05d89e73894cdf28ea42c","sha1":"9e3800282a0f367741e1d058c9745c94c1f21deb","sha256":"50dc6b854e667e47dd1c9a66ba77842deb5867f273afc7a7811f0871ffdfaee9","sha512":"8e82005f8c86b48a803bf2c1bc534c048cbe27f5d24175b9f03c7957239a48ac524cdba94fa4b57f78122b18d352aadcb3b65e9b2187e1dfb881111fe7bd82e4","ssdeep":"","tlshash":"22813c0dbd806c12e5c8f58714e9256789abf8c2eb99a4dcfd8edc0e5432171c4b4ac7","first_seen":"2026-06-29T16:58:50.479864Z","last_seen":"2026-06-29T16:58:50.479864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/apple-touch-icon.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.207Z","timestamp":1782752306207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty/1.27.1.1\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6603,"size_decoded":6777,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-29T16:58:50.485546Z","times_seen":8678,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.942Z","timestamp":1782752305942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2717\r\nexpires: Sat, 19 Jun 2027 16:58:25 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0%2B%2B%2BaIpC4X8iOxN7%2BLpO%2B1JnX4kHt7iGpMcae3KVLgeS9JZ8E8DdZ%2BCMqLH3s0%2F%2B%2BhZgATDm8rOWlZhHTRq%2Bvw3wbaeL4dYjCYKkA7yxBMjRLHzmVggv5b%2Fq%2FJiOd1pBp1PspZH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a13679d85b310731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":15885,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-06-29T18:54:00.26158Z","times_seen":20728,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":2,"connect":26,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-cUIq-l1t.css","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.951Z","timestamp":1782752305951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /build/assets/app-cUIq-l1t.css HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 54280\r\nlast-modified: Mon, 29 Jun 2026 06:54:36 GMT\r\netag: \"6a4216ac-d408\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54280,"size_decoded":54518,"mime_type":"text/css","magic":"ASCII text, with very long lines (54279)","md5":"c7276448bf3c90867b8010c261ef263c","sha1":"6f0b354a1b1cd5eec558dcc00f13d9ec390d7e41","sha256":"f75eebb8ac39247ee211d0546a8d50b66156c47e17804ba33d492d716af2be6f","sha512":"33869c462bccf1801eb8ce401860f7d712272e2ccb2beccdd2c3856872f15478fa39d01a695b9370b1305916d295d02b67ce8fcc91f49a987af9cb36f3ce470a","ssdeep":"384:kgkFYaigH8KPBc6NIAGNRb4xy07Th/y/m/T/HZNUrlvetyCI1:wYaiW8KK6NDBZNUrZeY","tlshash":"c133412d6aa0003f7c5391f9d699ba9df61bb0c1df3e56eaec8211209bd63f64c47604","first_seen":"2026-06-29T16:58:50.487016Z","last_seen":"2026-06-29T16:58:50.487016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/co_de_favicon_32x32.ico","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.209Z","timestamp":1782752306209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /co_de_favicon_32x32.ico HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 02 Jun 2025 12:32:53 GMT\r\netag: \"683d99f5-10be\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4527,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"a5ee255c41fd6c22e911b3573eab8f4e","sha1":"c4511c795a7fbb3731924d5b64559f5b7ae8fcb4","sha256":"7635a117ffd7dddb92f480f939b50573a4577c76c709258c044d058af982811f","sha512":"ac74e1cc2c8b1434b4e8d6d984aef6941d43aacdb636e32512b83f6217fda45e816c5b2730ef845f7d25ad10ac793b81d309471a7ad8e82d01338c0e2f0c5e08","ssdeep":"48:dEIPYt+iCozlNvjImOax0Us+zFiPMFA+kf08mTbC12G7ox7ym8qu:dECgxCwvjBxDFiPMFAtf0DTO18xWm8l","tlshash":"fd91a8559f1fa88acccc597d800cb111221c3f8559f9e63a4e68399338617b81f91df8","first_seen":"2025-08-29T08:18:17.118851Z","last_seen":"2026-06-29T16:58:50.488176Z","times_seen":35,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"banktool.co.de/","fqdn":"banktool.co.de","domain":"banktool.co.de","tld":"co.de"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T16:58:24.652Z","timestamp":1782752304652,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: banktool.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/domain/search/banktool.co.de?source=catchall","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T16:58:25.029Z","timestamp":1782752305029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /domain/search/banktool.co.de?source=catchall HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; expires=Mon, 29 Jun 2026 18:58:25 GMT; Max-Age=7200; path=/; secure; samesite=lax\ncode_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D; expires=Mon, 29 Jun 2026 18:58:25 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44986,"size_decoded":46059,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"19e0f0ad62fa9a242b09b1fde60289e4","sha1":"2c522a84e48e3943b97aa0890043024631b9d481","sha256":"a990d1a6507c0daaf9819290aabf03a6020e2082497479e67264a01b6e3a3635","sha512":"4ef93421f06fc06f3fb8de9d33f9bffd6f2a851fffb4f5f16d15264484fd88a03ef9fb043b71567a3ccbbf5d06d9d1ef40f2f1ae5088be8b47d906460478c67c","ssdeep":"768:zdO+JADg1PgrzC+SDvhi7Fi7gi79i7Ii7vi7ci7Ji7Vi7Ui7Ni7Mi71i7/i7Xi75:8+JZmgvhengVOFayh6jQYMgp","tlshash":"7513542522f200964297d2f1b5f2ef6ede9ac347c54b9c9eb37c81826f86c650d83358","first_seen":"2026-06-29T16:58:50.488921Z","last_seen":"2026-06-29T16:58:50.488921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":254,"connect":33,"send":0,"wait":136,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/101domain.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.980Z","timestamp":1782752305980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/101domain.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 84395\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-149ab\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84395,"size_decoded":84635,"mime_type":"image/png","magic":"PNG image data, 1200 x 450, 8-bit/color RGBA, non-interlaced","md5":"60c506a6b2d9b766a898c5a1a1807a2f","sha1":"77a4bc451786b209ece1956dc45c64e59e48a721","sha256":"a9658fcfd068b4d8e04ae2c59dca4eba93d9b1b173610687698088030502a474","sha512":"4c1e96ce6fd2e6e71aac61ce92cdd37587d8ed973dd1e553a6b9fccd890f10bf5911d3c1c1cd1b0837a29f1285eb38189b8ecf8f78fb9fa64960d921b1fa4c08","ssdeep":"1536:c3RT+OH7SsGrbWevXfd/YH2uOnJ6j2Pa2QyEz0htAyF/0P1ClGQ1:eRSOH7SsiHYH2u2PCyEz0hO00Y","tlshash":"aa830291e68490aedf3391fd32e97d92637c83e97b6cea8d8e900cb34ca1568d509214","first_seen":"2025-08-29T08:18:17.094407Z","last_seen":"2026-06-29T16:58:50.49032Z","times_seen":28,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/eurodns.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.987Z","timestamp":1782752305987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/eurodns.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 42959\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-a7cf\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":42959,"size_decoded":43198,"mime_type":"image/png","magic":"PNG image data, 941 x 242, 8-bit/color RGBA, non-interlaced","md5":"bb6a1741889971ec687ca97f5718140b","sha1":"0926175700ac8e16d109a2beb07d1cdf298d7c92","sha256":"4417a3394c908ddd13c0456acee7cf37017879364ff16fe18c9510e0c36508fc","sha512":"d94578cf7c462acf98e1b2a022d28efa58bd536ae2f5264d2e50cc0e572bacae36dc951bd3ea772789371b2296d794708b80e74ec0cfc77ef5cef1de8cee58dc","ssdeep":"768:NugL/Y66Df71r0ZyE5AnlkK46l1mPO4llk4d1iDURszZNuS4/3c:NugrY6Y90YE5ZKr1mWMd0gsOs","tlshash":"df13e0349eca6c3f9c7b5c726c869766be24ad00a8e627b3c55d35bd3521ef20d0b442","first_seen":"2025-08-29T08:18:17.102815Z","last_seen":"2026-06-29T16:58:50.49149Z","times_seen":28,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.108Z","timestamp":1782752306108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 06:03:13 GMT","end":"Sat, 29 Aug 2026 06:03:12 GMT"},"fingerprint":{"sha1":"AB:79:61:CF:1E:05:C0:6D:9A:A2:BC:DF:40:B4:86:3F:A3:C2:72:FC","sha256":"CE:6A:8C:17:95:48:EE:0D:89:47:80:AB:C4:A9:4D:50:4A:C7:D0:9A:90:86:F7:9C:6F:20:3E:90:85:75:99:EA"}}},"request":{"raw":"GET /figtree/files/figtree-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=figtree:400,500,600,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11384\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a21776d-2c78\"\r\nlast-modified: Thu, 04 Jun 2026 13:02:37 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/05/2026 16:21:01\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 734f6f258cb05cd07fadbdcf2b819d10\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11384,"size_decoded":12347,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11384, version 1.0","md5":"7bfd10a3def31af4d402da24e37d21b1","sha1":"6f0c09bac74d5eaa63962309a305c097f06c6dab","sha256":"8f98dd642986f1fa39c45b89665a57372897c235b36028e0e4a136e43dc5f8ab","sha512":"2ab8b679319f9429adff476485facb4e33cfc5d938670d510fd3e2d650806a9873b9aaeb3a35d2f3bff8f68812cf3dfb3f639071acf3a2dadf093b57b8dfdb72","ssdeep":"192:fJ3wS/6q1YLYydZfdinMsfX+LpyglupLebs+pF7aJtALHH7g7ggqUfCANS59:fJwwyrdPEfngluuGJq7g7g8CZ","tlshash":"b432be616a9321a3e539ba70c3f5773f1aae9835afc0c609d71546461c0a7412cdbcab","first_seen":"2025-05-16T11:25:33.859224Z","last_seen":"2026-06-29T18:41:20.274726Z","times_seen":1023,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":15,"connect":17,"send":0,"wait":2,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.110Z","timestamp":1782752306110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 22005\r\nexpires: Sat, 19 Jun 2027 16:58:26 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BqlSCMYA5Tkn1vc24%2BF6hP%2FgLaE4JdIGpRsc6SvetmAsn4dw0wP4yJMma28k6A6%2BlDf6D5cBkcWUTIZWiiABjBtwgHPxDisAiW4GFyouH5zE%2B6H3uWAoTp0aubxm9iOJADPiPAs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a13679d94a3756ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125064,"size_decoded":126035,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-06-29T19:22:02.48101Z","times_seen":14745,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":11,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/abion.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.976Z","timestamp":1782752305976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/abion.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 75624\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-12768\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75624,"size_decoded":75864,"mime_type":"image/png","magic":"PNG image data, 657 x 230, 8-bit/color RGBA, non-interlaced","md5":"069b0d32532db8b97d6497e0b48b6428","sha1":"12aee04c63ae29f3acdb66a54bb85931c4c6e620","sha256":"e762f306d99bf4355e4bb8647cad7b2a4dc98534738fb749ff38d4a0a6d3fabd","sha512":"38c5c4e9e6f76ef20ee00e7e5b4902d5bf2c706ba13d51a7e38ab43a7b2488da67ffcab0046812241e1afa82926d2100536790b6766016e9bcac04b526636f22","ssdeep":"1536:0+Tx3sH2RCjG8k7yvHm1fYyEDFTzZb9A5XE7RfCuiEEZOvXe3Tgzuey:0+Tt4jGP7gcQyEBY07Rf7iN+Key","tlshash":"e173026b94661cf77de8438c6c17cafaec78d2fc1000562e503a51602ec8ab3e9d57b6","first_seen":"2025-08-29T08:18:17.136847Z","last_seen":"2026-06-29T16:58:50.493756Z","times_seen":28,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/build/assets/app-BnamtF72.js","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.954Z","timestamp":1782752305954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /build/assets/app-BnamtF72.js HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 79554\r\nlast-modified: Mon, 29 Jun 2026 06:54:36 GMT\r\netag: \"6a4216ac-136c2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":79554,"size_decoded":79807,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25171)","md5":"68eaa7a1fb4e292983d686a8e3a27bc7","sha1":"e0a6822ea32aaee94bdf16659f1663d3d4043f02","sha256":"98bed9b003fe68ed62addbbecbff41350a03d24705228e090e103bc431a3cb32","sha512":"f23ca9d46684dc6387317d724587473622fce92f296f163c36e8f647745ad4a79d1e421ffc9ee3c174aec7b36a0546fe559bbff434e84857a1b3d507ec2be3f0","ssdeep":"1536:d7VtH5IRiebHXxhbrnaPNBHGblh5I5SszS3XB7fC:d7V4R7bD7aPNBQlh5I5SjHB76","tlshash":"c973f6ea72d6b03283ea11f250bf4606f3396954784e4464f528ecda383648d56f3fb9","first_seen":"2025-08-29T08:18:17.08973Z","last_seen":"2026-06-29T16:58:50.494884Z","times_seen":36,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/bb-online.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.974Z","timestamp":1782752305974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/bb-online.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 20115\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-4e93\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":20115,"size_decoded":20354,"mime_type":"image/png","magic":"PNG image data, 340 x 80, 8-bit/color RGBA, non-interlaced","md5":"449f1a05bb6557dd84af85e32b50af45","sha1":"e6be43d53a07a47e34173ebe167a02a602e03ad0","sha256":"aa71b7cc348efe89c33ae1b85c430ea849565287429966c66b2295b12ca345ea","sha512":"8f0c618ff444be261b2b61b9f6324360f4e6db831800f7a328afafac36dded7650a6018da898a6209b8087ec24345e7c2471dd8f1cd3e6ebd363414fe237f9f1","ssdeep":"384:h/PXzO/3UOULe6tWNXM9ipYj4NsytMt3fkwG6ixE/YWWrYoqvN:djGr9Wj4Nzt03vixEwSN","tlshash":"e992cfc668f65cdbb61352e1c415f1520285d6f70a8f6f26b0d4ca26c38ab9ec5b04dc","first_seen":"2025-08-29T08:18:17.133611Z","last_seen":"2026-06-29T16:58:50.495544Z","times_seen":28,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/marcaria.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.978Z","timestamp":1782752305978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/marcaria.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 82792\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-14368\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82792,"size_decoded":83032,"mime_type":"image/png","magic":"PNG image data, 512 x 218, 8-bit/color RGBA, non-interlaced","md5":"787cfea47fd34c86fbe20d1c2999bc62","sha1":"5907b2aeaec14142398d99119825ea6ee558f2cf","sha256":"d2c268d78ed68fd3d4b0d8b2f5a8e8f0c174c109a8a081abfc74163ac19d1653","sha512":"d6e60fc41d8e41ab2b69255c07ec1078999cffb38f02398c9bbb19ca37404317349e7704ca19bb0416be239ee57fc94cb9ea2f7e66b13f27331af79ff846cfda","ssdeep":"1536:uJfNChPzQECDLngpMFIa+5v7afnViwgio0Sfg2zk4bpw/qiPP:+C6tkpYSv7eAgFogCSX","tlshash":"358302008a6afad25b1f9875bdc2eff44b44907351fae46081889f9d5c32f56732a71c","first_seen":"2025-08-29T08:18:17.097543Z","last_seen":"2026-06-29T16:58:50.496528Z","times_seen":28,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/connectreseller.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.985Z","timestamp":1782752305985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/connectreseller.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 45859\r\nlast-modified: Fri, 23 Jan 2026 10:19:27 GMT\r\netag: \"69734b2f-b323\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45859,"size_decoded":46098,"mime_type":"image/png","magic":"PNG image data, 2200 x 550, 8-bit/color RGBA, non-interlaced","md5":"9f7c411af833e583f9449377d5ce9e19","sha1":"9cc4fa41b9518b251ea2018068e4bc2ba1ccce8d","sha256":"d7adc4fa482410e2b0f1f5b9d638bc23bd4714fdc7bc90bd41c90d816fecaacb","sha512":"655ed70477db585d86d6133eacec65ac8f40bec9fa2c65536f11dfd35c646e6db0f1837c5094628235f5db1a38581539dd26e9f2fb7febeb7406d74daecbc202","ssdeep":"768:0c5OIzukl9Ep9btWcOkHw1t66D0nIh2VmgShop/l+Aku9jIPMCMn9M9S9:0c5OQ3SlxOkHP+0n8SN+Aku9j02S9S9","tlshash":"cf23e16f5c935c2adda063feca4c4c655e50045deea944eb3a7849322bac5c1c063bbb","first_seen":"2026-02-01T10:53:09.868373Z","last_seen":"2026-06-29T16:58:50.497579Z","times_seen":27,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/alldomains.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.977Z","timestamp":1782752305977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/alldomains.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 50420\r\nlast-modified: Tue, 25 Nov 2025 13:19:25 GMT\r\netag: \"6925acdd-c4f4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50420,"size_decoded":50659,"mime_type":"image/png","magic":"PNG image data, 2468 x 604, 8-bit/color RGBA, non-interlaced","md5":"3131d8f5cc969dc3d6cf40573beb546e","sha1":"43150401d514527f496cf3cf86b3e2bcf2479d89","sha256":"463a315b4cd8c407ca72c4080cd0f699ee3d19ade1ef248b47629fba57352d92","sha512":"6d08e00fb81db0570c6b7d28bf7e97d053fe65eabc86d09173d754fee17a518cd9dd8fa20000448376325fc78564f18ff914375068e3f20559a9d0a29afc8f68","ssdeep":"1536:wZmaqk80+AS7uTpPwNO6fOdeqEKKmahzgIzV4MY:wMaqm+AS76VwNO6fOdeqELBg7t","tlshash":"ff33f1a15bae0d85dd1c60315832ae38bb574b85187ac56f12da8fb28cf4f51e36311d","first_seen":"2026-02-01T10:53:09.869559Z","last_seen":"2026-06-29T16:58:50.498153Z","times_seen":27,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/flags/en.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.970Z","timestamp":1782752305970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /flags/en.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 2513\r\nlast-modified: Tue, 27 May 2025 14:40:38 GMT\r\netag: \"6835cee6-9d1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2513,"size_decoded":2750,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"089119e303f24c89121dd856ab4f7059","sha1":"d50e258af19ad3c3f71c8c5a1fe76e795fcc7895","sha256":"04e4444cd4022d40e048c4c629ca976e61cb17cdf77bbfe1a3fb6f6f07e8d223","sha512":"248b11035ac52561bec35aeb010789bbd2de807c1c2fa6903f50e17be4c7eaf67cf71c6ca61e4eb01a198a07b9a8a8a71dc5af3b2ab3fa54417e5429f35988c9","ssdeep":"","tlshash":"7b51ba9a6c5312d3dd8d71459ded3de4c5735e88c88192c679e2dc530d40491be7728b","first_seen":"2025-08-29T08:18:17.126435Z","last_seen":"2026-06-29T16:58:50.498722Z","times_seen":35,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/flags/de.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.972Z","timestamp":1782752305972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /flags/de.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 1459\r\nlast-modified: Tue, 27 May 2025 14:40:38 GMT\r\netag: \"6835cee6-5b3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1459,"size_decoded":1696,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"17f433e40497e1d311cb9fbdb5c47466","sha1":"e9aef9fd7e6913bdcf7ff1ed8c1f809667430df8","sha256":"36cb4fb1116e88cc5982abc40a510526e28fd3a6f368008e79760d6684df17dc","sha512":"f5a6d7e1ad8fe8b6d7d0b36074dc762049f4d5cc9124bf9e25e03ba99dd046ac6d09e65762aed02d1742f1f2face4ad5e48b62331a21cb3b85260578bda9cda4","ssdeep":"","tlshash":"383115699ca312e39a8e76065cee3894c9339955cdc0518aece2cc770e415c16fb72c7","first_seen":"2025-08-29T08:18:17.132274Z","last_seen":"2026-06-29T16:58:50.499715Z","times_seen":35,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/publicdomainregistry.webp","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.981Z","timestamp":1782752305981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/publicdomainregistry.webp HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50450\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-c512\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50450,"size_decoded":50690,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c15a7df3a1b47c2533d5ccdfd6b1c8cc","sha1":"07a589d475a9372ca770d2eeaeb1a6f46ac90bd7","sha256":"a6720ea1d131e3d120e7d2d1cc8c86098858f7120abbe016c52d6db9e5801d39","sha512":"c66e80a0e38d74faceb26971436bc0f5b8426638a87a66ccbce0aee2d624ca8eb77ddbfd017f5e7985184565a0c1269c02ccc29da059d915c856cdfdaa172a95","ssdeep":"768:evOikxXg/V47Vr6n3C/1cRgGwwv3uY+sYZ1PrE1ZKwFdpc9WoK3+WLeGk7U7:nlgoVqQ1cRhxvSRFr85dOE+QeT7c","tlshash":"af330232ac44d63d0a86de7303f5db7b2e858c4658e0e354466387ac845f2df6e19896","first_seen":"2025-08-29T08:18:17.128152Z","last_seen":"2026-06-29T16:58:50.500298Z","times_seen":28,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/registrar_logos/INWX.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.983Z","timestamp":1782752305983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /registrar_logos/INWX.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 9794\r\nlast-modified: Tue, 12 Aug 2025 09:14:39 GMT\r\netag: \"689b05ff-2642\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9794,"size_decoded":10032,"mime_type":"image/png","magic":"PNG image data, 440 x 110, 8-bit/color RGBA, non-interlaced","md5":"caaf3a158df8a109e62c0b3fd85c74fb","sha1":"a8a2ef9d63cbc1443e0f895bddccd63a84df4fdd","sha256":"6b73a301993feeb7afa705a00a4b7651763c27ef3ffd95b71f66e05aefaf0a62","sha512":"2bb57bf972b0cce25662c9a7a36bc031d2d4e8734cc286dd4870976094a666708231c8c145587dfeaf89b553b41e076521cd94fd375ad36967b6adac08e6b907","ssdeep":"192:6IIHUCD4waDqi7tLueE7odwEFVfEyDM0gypF7izv:U0wyqi7hBsoOK+","tlshash":"a512af4a858ac948000f03ad79aea40e553ff6b4e665ed3d5cfad02ab331c656530977","first_seen":"2025-08-29T08:18:17.114955Z","last_seen":"2026-06-29T16:58:50.501282Z","times_seen":28,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-700-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.193Z","timestamp":1782752306193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 06:03:13 GMT","end":"Sat, 29 Aug 2026 06:03:12 GMT"},"fingerprint":{"sha1":"AB:79:61:CF:1E:05:C0:6D:9A:A2:BC:DF:40:B4:86:3F:A3:C2:72:FC","sha256":"CE:6A:8C:17:95:48:EE:0D:89:47:80:AB:C4:A9:4D:50:4A:C7:D0:9A:90:86:F7:9C:6F:20:3E:90:85:75:99:EA"}}},"request":{"raw":"GET /figtree/files/figtree-latin-700-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=figtree:400,500,600,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11376\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a28b0a0-2c70\"\r\nlast-modified: Wed, 10 Jun 2026 00:32:32 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 1073\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/10/2026 17:24:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6f20b1043e796c264a803005531d7d12\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11376,"size_decoded":12340,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11376, version 1.0","md5":"70aaa6879de54ba5c8a8beee4a096c4d","sha1":"32c1002f58b613e1e2d2533c7fd273a82267b132","sha256":"7ec4f08d09f91d349917dd6592f6aaae66d8fe1bbd58fa24707961e79236616e","sha512":"578faf483a202e56bb604cc7a84283259b0351e9b1f4078a630e31b76922ad8900bb2e72ba91047e00b598d082b2f5c1e539278ce39ad51eabfa1015ded9a3bc","ssdeep":"192:W8RYCzrjFQBYLKPoy0rfe681FFf66jqjM/Wtj/nC8Q8PEiCn5PVZCTjcmwy9kej:9zrjFQmgovbeZfpKM/2nC+EiCn1iQmwO","tlshash":"3932c08d90042484a75e307bf45e3346b7d823bcc6d1610aafc24e866ef813cc6b6c9b","first_seen":"2025-06-07T22:56:35.157873Z","last_seen":"2026-06-29T16:58:50.502258Z","times_seen":159,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.948Z","timestamp":1782752305948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /alpinejs@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 48\r\nlocation: /alpinejs@3.15.12/dist/cdn.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a13679d85fecb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T19:32:21.996889Z","times_seen":16833945,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":7,"connect":19,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/logos/co_de_white.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.966Z","timestamp":1782752305966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /logos/co_de_white.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 52161\r\nlast-modified: Tue, 10 Jun 2025 13:21:58 GMT\r\netag: \"68483176-cbc1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":52161,"size_decoded":52400,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"eb6c7ea4f04c14313dcbaaba7a31ee3a","sha1":"6100d47a125e99a4f415e35a3650e5e4ced2db73","sha256":"52f28d3e2449145d92658e6632d2b6c197bbe0176e89bc8450c4979e8275e433","sha512":"38f43a6fc61c828dd535ff141d033d342345f0ee52711d2c6a2d5d39602ae2ef8b5ee7b4c1166ce62bcb251172cf54e287394ca6b0e0dc5661aa34125a9f6184","ssdeep":"768:QGsLT6z7Xnvd7IjoN40QYj5GVlidJ+arC4iVEsy2anYoKc9Os4P6xEyra+C:QGU6zpcjo+Sb9rC42ExYzN4m+C","tlshash":"0933f1d5ef7101320a306b92804eca6eef1533416e5a9618d4bdcacaeb23f2142dd973","first_seen":"2025-08-29T08:18:17.112768Z","last_seen":"2026-06-29T16:58:50.503166Z","times_seen":35,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.nic.co.de/logos/co_de.png","fqdn":"www.nic.co.de","domain":"nic.co.de","tld":"co.de"},"ip":{"addr":"78.46.45.26","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.989Z","timestamp":1782752305989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nic.co.de","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 06:28:41 GMT","end":"Sun, 06 Sep 2026 06:28:40 GMT"},"fingerprint":{"sha1":"7C:09:2F:01:14:76:42:8B:69:C7:AC:77:4B:31:B7:F4:37:30:F0:1F","sha256":"2C:2D:C8:5E:47:83:A5:A3:A9:FD:B1:74:C2:24:66:56:1C:B1:EE:F5:F2:24:FB:F6:9B:AB:F0:03:D0:07:48:F6"}}},"request":{"raw":"GET /logos/co_de.png HTTP/1.1\r\nHost: www.nic.co.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/domain/search/banktool.co.de?source=catchall\r\nCookie: XSRF-TOKEN=eyJpdiI6InNPR01pbWYyUUdnRG5xZ0duUis4UWc9PSIsInZhbHVlIjoiejZWY2RKOVlXUVZ3d21Jc2dhU0x2VStoU0YrZkFKNndWUExYWWZ1V2RUd29JVUowbXphSVk1TkhFRHJwMnZ6VGIwWVlabTFaZ1JRbEpFU1dJVjBpdmFwODVwTUVES1Q4L09ZVnEvS1JsWnZBdk9IcHpaSkFlalpXQ0VSZVZJOFgiLCJtYWMiOiJmZDE2YzAwN2M5NmI2Y2M1NzgyN2ZmZGFhMmUyNmFkMDRhNGQ3ZGM3MWQ2YWFhNGE3OThhNjZhZTBiMzU1YTJkIiwidGFnIjoiIn0%3D; code_session=eyJpdiI6IlJ6OTZEY2lkZElQUUpaRHVzZFpzcUE9PSIsInZhbHVlIjoieHE1d0xBc0M4WHV5c3ZvUjdDb2hWUWhOQ3M2SkZmbVhCNEh3TkdmWElaVXNRdThwUWZNOHRCdTVYUFlqV2U4anB3ZEtTbFRkaVV4M0RJcHlsRVdaM05uTDhsYlhEN0paMnFHOGpsTlIwTDZUSlgyZkIyb2c0WTFCTEdMSlVtbmIiLCJtYWMiOiJlYmQ2MjI3NzNhZDBiYjI0YzI0ZmJkMWVmZjhiYzY2NTAxN2FkM2U5NDRkNmM5NjJiMDA5Yzg2YTM4Y2JlNzdkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.27.1.1\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 75492\r\nlast-modified: Mon, 02 Jun 2025 13:04:01 GMT\r\netag: \"683da141-126e4\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.27.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75492,"size_decoded":75732,"mime_type":"image/png","magic":"PNG image data, 500 x 300, 8-bit/color RGBA, non-interlaced","md5":"84f961b31aa57c8151271457a212de98","sha1":"9c878dbc238dd7f0e084532c3fd00101c29180c5","sha256":"672dadb10d04d4e47cc67406b44e79d77f475ea005334e54ed1ab344dbf2c7d0","sha512":"f48dc50e1b86081df434c5ffbbe9351f3e142cf091445a5fa0b1b5fc23be7585567ea9ca733d2b7d8627cb2187b486dd5408d035cbd169141fcd4e28528f4a1a","ssdeep":"1536:e/pJNuxstzUjYVT4G0BNQMJOnlPUajS7Y4QiRucaNy3eLtyYZ:yNBojNYv2qiRufNy3eLsYZ","tlshash":"cd730164b8fdb15113c45534be8a796567a2b70481edc0e006ce01b3bdee8e89dffa24","first_seen":"2025-08-29T08:18:17.100589Z","last_seen":"2026-06-29T16:58:50.503969Z","times_seen":35,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.nic.co.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-600-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.194Z","timestamp":1782752306194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 06:03:13 GMT","end":"Sat, 29 Aug 2026 06:03:12 GMT"},"fingerprint":{"sha1":"AB:79:61:CF:1E:05:C0:6D:9A:A2:BC:DF:40:B4:86:3F:A3:C2:72:FC","sha256":"CE:6A:8C:17:95:48:EE:0D:89:47:80:AB:C4:A9:4D:50:4A:C7:D0:9A:90:86:F7:9C:6F:20:3E:90:85:75:99:EA"}}},"request":{"raw":"GET /figtree/files/figtree-latin-600-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.nic.co.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/css?family=figtree:400,500,600,700\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11544\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6a28b09e-2d18\"\r\nlast-modified: Wed, 10 Jun 2026 00:32:30 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/10/2026 11:30:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9a7850ad00a20ab7cb6b4107b8ae10b6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11544,"size_decoded":12507,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11544, version 1.0","md5":"4376f5953b85ba06b1325423ae04ce03","sha1":"cdc20e286bd4c89290565d08c691693951f2df51","sha256":"367d713287918784702563518f59239989da815c80d3c7337686b9816635a08b","sha512":"b03f276330b4b8eae6a38f6132e76a291d14103dcbdcc57270c66a0e30554413039d96b003c2c8a63bbae6201399a66638e5f88737c2b28ae1c3227fbfe22849","ssdeep":"192:K8oh8QtcasqnFWlsABFCQK3DRE7pTAT16IomT4OI9C3Jnr5+uHGQ1P+1rpH1yIjR:oh/tcInafhwi79yU6/qY+iGaAr3ZQtDA","tlshash":"7932bfe11f59440fcad0a473b17726740ced296efb3a7ba529ae741b8c185d3c8490ea","first_seen":"2025-05-16T11:25:33.804118Z","last_seen":"2026-06-29T16:58:50.504933Z","times_seen":701,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/alpinejs@3.15.12/dist/cdn.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:26.115Z","timestamp":1782752306115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /alpinejs@3.15.12/dist/cdn.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a13679d94911b51b-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 87372\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 29 Jun 2027 16:58:26 GMT\r\nlast-modified: Thu, 04 Jun 2026 23:20:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:V7N9fK6aJ9ll/a5K3MhEJF39xAfmVa7oXc//OggDaj8=:\r\nfly-request-id: 01KQGA6HBBMZ8MDF4ZPHY909NX-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46346,"size_decoded":17572,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40766)","md5":"422c7d8cfa8b78375cc7a767d2ae5ca6","sha1":"7df3f287f769c205f1392de3532517d602cd1810","sha256":"57b37d7cae9a27d965fdae4adcc844245dfdc407e655aee85dcfff3a08036a3f","sha512":"0a30f697aff3d0fd675001e5fbf9724ba3705766e9da28de966d84aaa8394ee18cf3f49cf5688d12d51f2a6fc073b3a9a578ed8666404c53399e7abb3b210f61","ssdeep":"768:DBCz6escmy5dIOT2C3KBdoqCHL6POK/5IKXqLWoOAUORrST5GUGz++u3hBpShpJ0:FCueivEqCr6POQDXmWomUtzMBpShpJyn","tlshash":"c023f9e97396b13283ef01b190bb424af33d2994150e5464f669d8ee383948d51f3fba","first_seen":"2026-04-30T23:22:33.584041Z","last_seen":"2026-06-29T16:58:50.505418Z","times_seen":1455,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=figtree:400,500,600,700\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.939Z","timestamp":1782752305939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 06:03:13 GMT","end":"Sat, 29 Aug 2026 06:03:12 GMT"},"fingerprint":{"sha1":"AB:79:61:CF:1E:05:C0:6D:9A:A2:BC:DF:40:B4:86:3F:A3:C2:72:FC","sha256":"CE:6A:8C:17:95:48:EE:0D:89:47:80:AB:C4:A9:4D:50:4A:C7:D0:9A:90:86:F7:9C:6F:20:3E:90:85:75:99:EA"}}},"request":{"raw":"GET /css?family=figtree:400,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 16:58:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/20/2026 23:08:10\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 518ee4f857c25a6c19b471304dfaf4f4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4144,"size_decoded":1325,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be20946b3ed97c87ddd8c867b87aee64","sha1":"a18328c615d807751a079393c8099d6b95f3f97c","sha256":"fb549f108f512829e764b8e9edfed41c1899b08d2e47b6c7d2478ed81cd0aa40","sha512":"7b46bcc484abe39d87375a9992508f9bfab005ec9047c3d8b7377be897127a019a4e011fa63424281e71ca6e1786ec2d24b0da8ab187e001176d1a6145045a24","ssdeep":"96:ROEba5+3POEbaECqIOXbaX+3POXbalINCqIOxMbaZ+3POxMbaICqIOpbab+3POpY:yM3wEDou3vlIND9s3+IDWi3lqDG","tlshash":"5f8101f14c9a308493871d7323c6bd035f1f611a60456675ae261cd84df8d3ac393bae","first_seen":"2025-06-28T13:51:45.639856Z","last_seen":"2026-06-29T16:58:50.505927Z","times_seen":48,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":21,"connect":18,"send":0,"wait":2,"receive":-1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.nic.co.de/domain/search/banktool.co.de?source=catchall","date":"2026-06-29T16:58:25.944Z","timestamp":1782752305944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.nic.co.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 16:58:26 GMT\r\ndate: Mon, 29 Jun 2026 16:58:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-06-29T18:37:14.114686Z","times_seen":8339,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}