{"report_id":"44ba9fd2-f1d2-46e5-aa32-039185e07018","version":6,"status":"done","tags":[],"date":"2026-03-28T04:14:48Z","url":{"schema":"https","addr":"slon8.at","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"ip":{"addr":"64.190.63.222","port":0,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"slon8.at/","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"title":"slon8.at","dom":{"size":1159,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3bdef0a0cb31672a05867c1dc7989c19","sha1":"fb5489d8a1a8858437131a1b0ad03e2830a69b3f","sha256":"6a8f7a4f40d1ab8a3a9705089f813bee34928b2b2236180205a51e6c2defdd59","sha512":"f4bb57552675dd967e8d9379d1b16d053224489f72c54ab4776ae5a13ea5923d3765f1e447f7d7f162e437b7c68a48f843df4209e25245f522854608ff898c46","ssdeep":"","tlshash":"a021e11268d344943114c6742af5fe6c1f49a907b107d8a47bed65d84fc5349cdd31ec","dom_hash":"domhashe96f4de70d144f7da75b9e764a7ea638","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"slon8.at","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"ip":{"addr":"64.190.63.222","port":0,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T04:14:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"slon8.at","ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-28T04:02:24.10061Z","last_seen":"2026-03-28T04:02:24.10061Z","alert_count":0,"request_count":2,"received_data":1552,"sent_data":900,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sedoparking.com","ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2001-09-18","domain_rank":11712,"first_seen":"2012-06-01T05:52:33Z","last_seen":"2026-03-26T16:40:42.106739Z","alert_count":0,"request_count":1,"received_data":1513,"sent_data":430,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"slon8.at/","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cda73e9b11139ff16c298600f783184d","sha1":"1996ed24cbaa3f47e5dda55b84350a3eae29b3d7","sha256":"2f97eaeefe2c81a59663dc8b4e3e499468255e67c8ab347da49d5676c17a8478","sha512":"094438b04c00f0987c030fff1c0cbb4aecf2d6f8822f6d3ed33d90bab9920302517a80accd3123eb04a6873428fbc755f2abd85eb1874cf1cd35ee9704cbaca3","ssdeep":"","tlshash":"f4c092142a47a5a02aa526873464ddfd1a987a1b7462a48d75ee0a011bc828e46524f0","size":130,"data":"","first_seen":"2026-03-28T04:02:28.251471Z","last_seen":"2026-03-28T04:14:49.603236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sedoparking.com/frmpark/slon8.at/sedopark/park.js","fqdn":"sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d2a92f5706e3f4ac0d2be04a5aff17a","sha1":"f76a87814c1451ff398f1bed04ef18b44b5a1b81","sha256":"af1e4750f1fa18a780619e57d48f8c25855cfc4a0eee8d2b62ac2b7f5cce2b90","sha512":"34cf15b22a331e9471b244533fac6c3dcec6dbc2a1fc6ef5cb448d7b2c129f706680dbbb5ab4aee05dc84a73f7cb4555f1a92fc6f3c5212d4bebb8a8344a53a9","ssdeep":"","tlshash":"a421dd7e7d52ac33c6cad59a187b7a58ac6251033329d8d0965cccad19c5f4414b3396","size":1273,"data":"","first_seen":"2026-03-28T04:02:28.247064Z","last_seen":"2026-03-28T04:14:49.601613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f98fefca374682a533007a72bce24c62","sha1":"a4f18772766fd2d754dba67cb823902b9d78fbd7","sha256":"3cc5c3556837bdaa22e37e66d4a89cff49047d5a237c9310d78efd871eb5bb75","sha512":"47edd42e59c5b92f642e8c66ebcafca65cd74561baac11793c90135d2edd1a82a71cb4fc0e7a05bb580baa9df56260ce4286a9b87f407215812c1e67a08173b6","ssdeep":"","tlshash":"b4a002095f07c4e539843b8a70789cfd07847b46b0b5e4e945f94511671c2de58a25f4","size":75,"data":"","first_seen":"2026-03-28T04:02:28.255827Z","last_seen":"2026-03-28T04:14:49.604323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"slon8.at/","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T04:14:27.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon8.at","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Mon, 11 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:41:77:70:89:2F:9E:F1:FC:4F:A0:72:0D:BC:3E:A6:74:B3:B2:19","sha256":"1D:ED:5D:E9:CC:11:FF:69:0F:16:E2:BC:C9:A2:31:67:64:9F:5F:3D:6C:59:51:74:3C:A7:D7:0A:92:9D:62:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slon8.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 28 Mar 2026 04:14:28 GMT\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Sat, 28 Mar 2026 04:14:28 GMT\r\npragma: no-cache\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-cache-miss-from: parking-79cf8c95dd-dvzvw\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1014,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"835e91e82f7c3fb7b3c012a49272d87a","sha1":"9ddef01915276010eb27c0eb8c3456b7e89b75c0","sha256":"480b163a08f6143743b5832b98f02708943b773aef8d0a6a6c680188322e78c9","sha512":"85762caf21fbf51b4d0735cc601b395440c364188d658a0ee4031b8791a61b741408570eec071386a4c36efb14676f31dded9361f6ea289b90b989c93a02b99e","ssdeep":"","tlshash":"ed11af1214e344543115c2242af5fa582f4a6917b147d8247eeea2d84fc6705ced71dc","first_seen":"2026-03-28T04:02:28.244504Z","last_seen":"2026-03-28T04:14:49.600502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":342,"dns":0,"connect":33,"send":0,"wait":40,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sedoparking.com/frmpark/slon8.at/sedopark/park.js","fqdn":"sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://slon8.at/","date":"2026-03-28T04:14:28.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sedoparking.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Sun, 24 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1A:2F:64:08:05:BB:0C:06:45:96:FC:3F:D2:2B:DF:7D:4A:29:54:B7","sha256":"7D:90:BF:B7:33:79:3D:78:FE:B5:BC:7F:F7:9A:83:4D:87:18:87:81:B8:E4:B0:79:FF:DF:B5:A5:7D:E7:17:ED"}}},"request":{"raw":"GET /frmpark/slon8.at/sedopark/park.js HTTP/1.1\r\nHost: sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon8.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 28 Mar 2026 04:14:28 GMT\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-cache-miss-from: parking-79cf8c95dd-r4plf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1273,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (987)","md5":"4d2a92f5706e3f4ac0d2be04a5aff17a","sha1":"f76a87814c1451ff398f1bed04ef18b44b5a1b81","sha256":"af1e4750f1fa18a780619e57d48f8c25855cfc4a0eee8d2b62ac2b7f5cce2b90","sha512":"34cf15b22a331e9471b244533fac6c3dcec6dbc2a1fc6ef5cb448d7b2c129f706680dbbb5ab4aee05dc84a73f7cb4555f1a92fc6f3c5212d4bebb8a8344a53a9","ssdeep":"","tlshash":"a421dd7e7d52ac33c6cad59a187b7a58ac6251033329d8d0965cccad19c5f4414b3396","first_seen":"2026-03-28T04:02:28.247064Z","last_seen":"2026-03-28T04:14:49.601613Z","times_seen":2,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":185,"dns":1,"connect":36,"send":0,"wait":44,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slon8.at/favicon.ico","fqdn":"slon8.at","domain":"slon8.at","tld":"at"},"ip":{"addr":"64.190.63.222","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://slon8.at/","date":"2026-03-28T04:14:28.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slon8.at","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Feb 2026 00:00:00 GMT","end":"Mon, 11 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:41:77:70:89:2F:9E:F1:FC:4F:A0:72:0D:BC:3E:A6:74:B3:B2:19","sha256":"1D:ED:5D:E9:CC:11:FF:69:0F:16:E2:BC:C9:A2:31:67:64:9F:5F:3D:6C:59:51:74:3C:A7:D7:0A:92:9D:62:1A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slon8.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://slon8.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 441 No Reason Phrase\r\ndate: Sat, 28 Mar 2026 04:14:28 GMT\r\nserver: Parking/1.0\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"441","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T00:24:25.319552Z","times_seen":17435669,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}