{"report_id":"a5f6692e-2dcc-42f0-9bad-8e6816efa727","version":0,"status":"done","tags":[],"date":"2026-09-07T12:33:56Z","url":{"schema":"http","addr":"rss2.sayler.at/go/636413/z274x264?label=0509myall","fqdn":"rss2.sayler.at","domain":"sayler.at","tld":"at"},"ip":{"addr":"107.189.20.230","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"title":"Coinbase Card","dom":{"size":16487,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11826)","md5":"12ae91e9dde4e0b4a6ce769e9127bc84","sha1":"5cac9738c2a5ae314da2791d01d7e2d978a8d0c3","sha256":"65c0cb05559e4333ff385e8de803a60713fb79cdcecbc634c987d4a8ad4a96c9","sha512":"6d5c7c4c617f775ec6224ae5e6e8f7f6fccfafe59046bf4cb992bf1fa2ec2f1379ce383e677ed12ad8c0ba2c289704784ee2af74dec6ff49cefa92896d33b40c","ssdeep":"192:YDXhMtH7JXeS7JXex/27xLsftT6eLvuzR9mzdsf5wsfSEzptdTdqBXx:YTqzhL7Q+cuzR9mzSbLAB","tlshash":"1972a65596a0107b3c5380e6d6e1f51df629a0c2de3fc9aa7a8e4001bbd76f608d3604","dom_hash":"domhash3e53083b75807f41f586f20a7f8ad71c","first_seen":"2026-09-07T12:34:01.755486Z","last_seen":"2026-09-07T12:34:01.755486Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rss2.sayler.at/go/636413/z274x264?label=0509myall","fqdn":"rss2.sayler.at","domain":"sayler.at","tld":"at"},"ip":{"addr":"107.189.20.230","port":0,"asn":14956,"as":"ROUTERHOSTING","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T12:33:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"rss2.sayler.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":2,"received_data":261075,"sent_data":1102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rss2.sayler.at","ip":{"addr":"107.189.20.230","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-20T11:23:33.991322Z","last_seen":"2026-09-03T11:22:29.654705Z","alert_count":5,"request_count":1,"received_data":898,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"97ee3.ralind.at","ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-07T12:33:57.585437Z","last_seen":"2026-09-07T12:33:57.585437Z","alert_count":18,"request_count":6,"received_data":13005,"sent_data":3943,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"images.ctfassets.net","ip":{"addr":"108.157.229.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-09-03T21:32:17.6942Z","alert_count":0,"request_count":1,"received_data":4330,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-09-07T09:34:58.564113Z","alert_count":0,"request_count":2,"received_data":408701,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/js/placeholder.js","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"250c05565f37c4d13d84e1f8d986ad8b","sha1":"d49c7ba14749612db7be7f7e35ba843abc300ba3","sha256":"dd6b787ac7959f74254fb0da4d1de07fb8c7c5310eebffbfec28b88ce2e610ee","sha512":"12bad130b1b26e2b901f9e5012073554f2ebedc9a8f1ab5321feffbc61d6a3d28d644f356786a0fac8b3a5d61d26878e52ff0fbb741fdd0ec9e4063bd4401b4a","ssdeep":"","tlshash":"59e086151314c52846b5c326a3756e08a87d817b6642c1823b3d061dfff1a9ee065df0","size":344,"data":"","first_seen":"2025-07-06T12:09:31.703338Z","last_seen":"2026-09-07T12:34:01.765914Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e022897e44a1cc87d6ce7ab1a801f1b1","sha1":"001908455423789645bcb3ac684869106d603cae","sha256":"a99227b9494cdcb959659253ecf5598345c65e8916ccf290fcf126b27fc7a378","sha512":"672d0a9a4900a0afec47c4317732a281b716df1facaf74a265d65149fdcb8be0ef092b3d397e9536ef2edd10631fc885c1263154d06df290090a824e940caed8","ssdeep":"","tlshash":"166000000f30c00c30030c30f30000000c003c03330030003c0c00c000c00c3003300f","size":16,"data":"","first_seen":"2023-03-08T02:22:14Z","last_seen":"2026-09-07T12:34:01.769209Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e52abe98490c49e36c860d6c544e76f","sha1":"227e0c1c93ef177b9b5cae8caab71c8806edf9c3","sha256":"aaf6260d477c1f8797bfeb01930777668615ba4e22398d419df8161224cfc198","sha512":"f03a3e03dbc8c4dce986eeb20fa4758babf982867878ba8d6952a1e9d168f2e94373f1c4823e9181e6ce5fc1f5eb6c0c7f6452dfdedc7ce917b49696ed2c75d4","ssdeep":"","tlshash":"f0d0a77190624210aaf762ca66a71300322089623c9cd556398d438d6f83e55c5ff1c8","size":239,"data":"","first_seen":"2026-06-08T02:38:13.012152Z","last_seen":"2026-09-07T12:34:01.770033Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/js/redirect.js","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddab5bab2ef627aa264c508f02ef01dd","sha1":"c53d75cb9d49f35d0575f46160b420c5c3c39932","sha256":"9fc4de3632844cd0d933464afb34d27818101adb004e95f4a6f60e861a0eda42","sha512":"078c9637252226833459247bb53e50cfdf9c48b5c26a89b630a514d8c6ecee946ee67af11fb47414386ffe0e83e1f3794ff44aba549988b7fb8189b14c2e1dad","ssdeep":"96:oUqLN7nQBpOONysU/pqJyF23riCfgaDVxUQcu0:oHQBdIIY2/VA","tlshash":"1091b9cd60f798583acb64752c0f104a3d364257184ae8617fcea6a01f54a3ec3b7c9b","size":4463,"data":"","first_seen":"2026-04-04T19:40:21.535432Z","last_seen":"2026-09-07T12:34:01.762Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-07T16:07:10.195832Z","times_seen":52488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711},{"level":"log","text":"Element with class 'balance' not found.","filename":"https://97ee3.ralind.at/cnbcard/js/redirect.js","line_number":38,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:31.127Z","timestamp":1788784411127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://97ee3.ralind.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 12:33:31 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156532\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1086455\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbIDgok8fvERB1TZ2v2x8W%2Bsm%2Bbw9z9HaBXw5GvmcH3IE6JjjU0VJhRhcWbgEc3or9qI5QqWtn%2FFj%2BCNG59uW2bI1xsCIgMu%2BQd4VNwB%2FvtRZP%2BcUEgH5X%2FXO8NuOZEbt7fYg6cQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a375be098cf15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156532,"size_decoded":157542,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156532, version 773.256","md5":"d465bccb9edf0873f021f66d4b09d89c","sha1":"214f3c71de28c682602aecd39e9ad2bba15f1b0c","sha256":"f4c5a5b297e623bc159679563a4d1eb16e409ca3b57698fbc00fd2c907dadae0","sha512":"35d7523f48386e89b1cad6a47df65d64415ab9c45e6425bb4ab25ac9510f6d2e9de3d7cad79c2491660e885d7a38d3ffa9e93eb50ae045fbd072deaf114e10b8","ssdeep":"1536:HrPC5zUBeCGcReONEpKZZbwEPvdThY0E2eXOtr9pVhw+J3E6gbzlPAzJ+Zn+PMY6:TC5oNnZbwC9Wie+B9pVSeE6dMZnaBi","tlshash":"00e313b58f11a1c781b12217db1a54f8da785eec5e3f968cc5a07786214dd4f93dcca0","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-09-07T15:17:11.554319Z","times_seen":10796,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rss2.sayler.at/go/636413/z274x264?label=0509myall","fqdn":"rss2.sayler.at","domain":"sayler.at","tld":"at"},"ip":{"addr":"107.189.20.230","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T12:33:23.171Z","timestamp":1788784403171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rss2.sayler.at","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:02:08 GMT","end":"Sun, 18 Oct 2026 09:02:07 GMT"},"fingerprint":{"sha1":"48:6D:7B:66:72:10:10:13:E8:09:5D:B2:94:0A:CD:01:95:73:20:D4","sha256":"15:71:78:A1:91:61:06:B1:C6:4B:9D:E4:8B:0B:20:91:70:F9:13:C1:25:26:9E:E9:38:6B:C4:EF:25:B8:BC:AC"}}},"request":{"raw":"GET /go/636413/z274x264?label=0509myall HTTP/1.1\r\nHost: rss2.sayler.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Sun, 01 Jan 2014 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=3921e420cbaa1e67ffa26be90f69fb68; expires=Mon, 06-Nov-2045 12:33:23 GMT; Max-Age=604800000; path=/; domain=rss2.sayler.at\nofr_2135=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D; expires=Thu, 08-Oct-2026 12:33:23 GMT; Max-Age=2678400; path=/; domain=rss2.sayler.at\r\nLocation: https://97ee3.ralind.at/cnbcard/?b=YTo0OntzOjU6ImxhYmVsIjtzOjk6IjA1MDlteWFsbCI7czozOiJ1c3IiO2k6OTA3O3M6NDoibm9wZCI7czoxNDoicnNzMi5zYXlsZXIuYXQiO3M6MToibyI7aToyMTM1O30=\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"3921e420cbaa1e67ffa26be90f69fb68","quoted":false,"path":"/","domain":"rss2.sayler.at","expires":"2045-11-06T12:33:23Z","raw_expires":"Mon, 06-Nov-2045 12:33:23 GMT","max_age":604800000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=3921e420cbaa1e67ffa26be90f69fb68; expires=Mon, 06-Nov-2045 12:33:23 GMT; Max-Age=604800000; path=/; domain=rss2.sayler.at"},{"name":"ofr_2135","value":"a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D","quoted":false,"path":"/","domain":"rss2.sayler.at","expires":"2026-10-08T12:33:23Z","raw_expires":"Thu, 08-Oct-2026 12:33:23 GMT","max_age":2678400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ofr_2135=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D; expires=Thu, 08-Oct-2026 12:33:23 GMT; Max-Age=2678400; path=/; domain=rss2.sayler.at"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T16:14:25.086715Z","times_seen":18331493,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":232,"connect":29,"send":0,"wait":69,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"rss2.sayler.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"rss2.sayler.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T12:33:23.954Z","timestamp":1788784403954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/ HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1948\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":4836,"size_decoded":2152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c207eb2986170d1bf1b4291a02b19a38","sha1":"786f845cb2a4675e7f0da05fbcd7c0528a4e6fa1","sha256":"b41923eb7949fe50fa2ddae6dcf9147e845ffba8eff83ced6e5e45412b0c87ad","sha512":"7e8268fefabbaed97b5c0eeaa32c1d5128feb16161b7efe597732103942ffd1e69c4287cf42c562c9f2bbd2b14328177066d6d8e6cbd72d247a74c9466627efe","ssdeep":"48:t2xARH3JAhu837BK4DsAAAlBJkfDgPtHrZc2FQ4v9hmi+2swedT6WwBA9nx7B/0I:kxe+hj7fotJfUdzmCedTKAZDh","tlshash":"82a1746528c165b720b381a275b1e71eeb74a11be76bc85a32ec01833ff7e658c931c0","first_seen":"2026-04-10T13:17:37.355703Z","last_seen":"2026-09-07T12:34:01.761167Z","times_seen":85,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/js/redirect.js","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.375Z","timestamp":1788784404375,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/js/redirect.js HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/cnbcard/\r\nCookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:24 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Wed, 26 Aug 2026 08:31:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a8ea47a-116f\"\r\nExpires: Tue, 08 Sep 2026 12:33:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4463,"size_decoded":1921,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ddab5bab2ef627aa264c508f02ef01dd","sha1":"c53d75cb9d49f35d0575f46160b420c5c3c39932","sha256":"9fc4de3632844cd0d933464afb34d27818101adb004e95f4a6f60e861a0eda42","sha512":"078c9637252226833459247bb53e50cfdf9c48b5c26a89b630a514d8c6ecee946ee67af11fb47414386ffe0e83e1f3794ff44aba549988b7fb8189b14c2e1dad","ssdeep":"96:oUqLN7nQBpOONysU/pqJyF23riCfgaDVxUQcu0:oHQBdIIY2/VA","tlshash":"1091b9cd60f798583acb64752c0f104a3d364257184ae8617fcea6a01f54a3ec3b7c9b","first_seen":"2026-04-04T19:40:21.535432Z","last_seen":"2026-09-07T12:34:01.762Z","times_seen":160,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/pform.js","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.377Z","timestamp":1788784404377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/pform.js HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/cnbcard/\r\nCookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:24 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":396,"size_decoded":493,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"fb319e044e97ba4e7eafd603968681c2","sha1":"fe3f12c659e2e1e02dc3bb19b25bc10280a0a62e","sha256":"c007b825c65052610e0428e77176150eac911a1989bc0cb4fb71d590fe1fc8fd","sha512":"9b467fa5f85b0a55e75ceb695d4c08cfc47afa066d7ff7ac5ece769bd02bd386cbd908718238c15694d938fd3aa6a1d673dc5ae8493c238bb7f827601bbcb9b5","ssdeep":"","tlshash":"ede0f15f404773434412016039c01085520822fa352561f83985d897019883dcdab6dc","first_seen":"2026-09-07T12:34:01.762765Z","last_seen":"2026-09-07T12:34:01.762765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":47,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.381Z","timestamp":1788784404381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://97ee3.ralind.at\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 12:33:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18859\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4671106\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeRPyk8NgOAAmxGvUtHiaFa2%2BQXvnYZrJT0J6Hf%2BDQUVSaCIiQgo1buyb2vbGVCYRpfF6%2FA82dzeMW1yxwtR6bSTIEkq6F062%2F6mk1yP4WeUcrxnFQK9nF8MK90blG0xYzqGCO2f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a375bddf7d785a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102526,"size_decoded":19866,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-09-07T15:30:35.791751Z","times_seen":15162,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/js/placeholder.js","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.383Z","timestamp":1788784404383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/js/placeholder.js HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/cnbcard/\r\nCookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:24 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Wed, 26 Aug 2026 08:31:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a8ea47a-158\"\r\nExpires: Tue, 08 Sep 2026 12:33:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":344,"size_decoded":587,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"250c05565f37c4d13d84e1f8d986ad8b","sha1":"d49c7ba14749612db7be7f7e35ba843abc300ba3","sha256":"dd6b787ac7959f74254fb0da4d1de07fb8c7c5310eebffbfec28b88ce2e610ee","sha512":"12bad130b1b26e2b901f9e5012073554f2ebedc9a8f1ab5321feffbc61d6a3d28d644f356786a0fac8b3a5d61d26878e52ff0fbb741fdd0ec9e4063bd4401b4a","ssdeep":"","tlshash":"59e086151314c52846b5c326a3756e08a87d817b6642c1823b3d061dfff1a9ee065df0","first_seen":"2025-07-06T12:09:31.703338Z","last_seen":"2026-09-07T12:34:01.765914Z","times_seen":404,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":46,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Consumer_Wordmark.svg","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.92","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.389Z","timestamp":1788784404389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Consumer_Wordmark.svg HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Mon, 07 Sep 2026 00:35:14 GMT\r\nlast-modified: Fri, 26 Mar 2021 14:21:17 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\netag: W/\"78b2915b21e673b15957e22970b36c40\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 973ba1a14b3ee409c424730df6f1e51c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: xRGjZrSehv8DmAYU-PJPdhGEOSjcs_xWPd_GgVzMhykX4Zme_j_nCA==\r\nage: 43097\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3788,"size_decoded":2203,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78b2915b21e673b15957e22970b36c40","sha1":"d147dd4dde281e9c200ed77ecb29cdaf0f1377e6","sha256":"126270d27d1ac1a29b8d7d01238377840fe79b70212bd230adc6b2d9da82bf38","sha512":"f3fd78255d20692d0bfe2e1208637ac6798aac2b7a246e6eef77f3e5a5ee9422d2b34ccd005a943603872f90eef60d5078f579b5a03ded572165627e3cdbde58","ssdeep":"","tlshash":"bf7163d9a73440e8e268e2ddaf01d474ad52226be44dc9ccc31e6e18a353cdd6f224c7","first_seen":"2023-06-06T13:52:44Z","last_seen":"2026-09-07T12:34:01.766727Z","times_seen":1598,"resource_available":false,"data":null}},"time_used":6428,"timings":{"blocked":6392,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:30.796Z","timestamp":1788784410796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://97ee3.ralind.at/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 07 Sep 2026 12:33:30 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3624670\r\nlast-modified: Wed, 26 Aug 2026 11:24:44 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQs8rgu65iletfanTfavkc4yNhyJtZkPm0DGtBBnXMM4W5CHpVS5u3rxMqRy5BxexB%2FYdWzy453RdLhm1%2F%2FvU7441z6KNEeMaTEmtp%2BJH7fYpC6DVmzUUvWdAQAZ8vMWcW6XeHc%3D\"}]}\r\ncf-ray: a375be077ae756bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127122,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-09-07T16:07:10.195832Z","times_seen":52488,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/?b=YTo0OntzOjU6ImxhYmVsIjtzOjk6IjA1MDlteWFsbCI7czozOiJ1c3IiO2k6OTA3O3M6NDoibm9wZCI7czoxNDoicnNzMi5zYXlsZXIuYXQiO3M6MToibyI7aToyMTM1O30=","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T12:33:23.565Z","timestamp":1788784403565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/?b=YTo0OntzOjU6ImxhYmVsIjtzOjk6IjA1MDlteWFsbCI7czozOiJ1c3IiO2k6OTA3O3M6NDoibm9wZCI7czoxNDoicnNzMi5zYXlsZXIuYXQiO3M6MToibyI7aToyMTM1O30= HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nSet-Cookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D; expires=Thu, 08-Oct-2026 12:33:23 GMT; Max-Age=2678400; path=/; domain=97ee3.ralind.at\r\nLocation: http://97ee3.ralind.at/cnbcard/\r\n\r\n","headers":null,"cookies":[{"name":"ofr","value":"a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D","quoted":false,"path":"/","domain":"97ee3.ralind.at","expires":"2026-10-08T12:33:23Z","raw_expires":"Thu, 08-Oct-2026 12:33:23 GMT","max_age":2678400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D; expires=Thu, 08-Oct-2026 12:33:23 GMT; Max-Age=2678400; path=/; domain=97ee3.ralind.at"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T16:14:25.086715Z","times_seen":18331493,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":236,"connect":32,"send":0,"wait":50,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:24.379Z","timestamp":1788784404379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 07 Sep 2026 12:33:30 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vcf79-1788784266661-82e055cfb897\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 144\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9mh1517gZKIilEt8khfF8r%2Fj3l4731mSjWFLzyWAiGyf7c5llqdo9hGKJTVJj%2F1MU0Gqk5aXytiUHiT5Wrk9LaFikofiM2zzylzMYD3n59dlWn3v5FiEWKTab5SpCi6CIVxB6pk%3D\"}]}\r\ncf-ray: a375be075aad56bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T16:14:25.086715Z","times_seen":18331493,"resource_available":true,"data":null}},"time_used":6405,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":12,"receive":0,"ssl":6388},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"97ee3.ralind.at/cnbcard/favicon.ico","fqdn":"97ee3.ralind.at","domain":"ralind.at","tld":"at"},"ip":{"addr":"31.59.121.53","port":443,"asn":834,"as":"IPXO","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://97ee3.ralind.at/cnbcard/","date":"2026-09-07T12:33:26.464Z","timestamp":1788784406464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ralind.at","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 09:54:21 GMT","end":"Tue, 06 Oct 2026 09:54:20 GMT"},"fingerprint":{"sha1":"A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE","sha256":"14:AA:A6:EE:B5:A7:60:65:06:58:72:44:8F:B2:16:25:B1:8E:79:16:6A:51:02:F3:E3:B8:D0:E4:5A:40:FB:0B"}}},"request":{"raw":"GET /cnbcard/favicon.ico HTTP/1.1\r\nHost: 97ee3.ralind.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://97ee3.ralind.at/cnbcard/\r\nCookie: ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A9%3A%220509myall%22%3Bs%3A3%3A%22usr%22%3Bi%3A907%3Bs%3A4%3A%22nopd%22%3Bs%3A14%3A%22rss2.sayler.at%22%3Bs%3A1%3A%22o%22%3Bi%3A2135%3B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 07 Sep 2026 12:33:30 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1150\r\nConnection: keep-alive\r\nLast-Modified: Wed, 26 Aug 2026 08:31:54 GMT\r\nETag: \"47e-659ef0d3dacd7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":1402,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"1ca82eec639a786fc6356337e0f7be77","sha1":"45efda0075b04705e79f61caa616f3b1d1588c68","sha256":"90d32dc3c82462addda4a980562043cebd904dcb7c6c7f5390a623fce9f8ae49","sha512":"f2218eafed9aeb46ccf1d4b828dfbc00c83efb5eb6e46cd18a7e6c3e2deca1c7d5d028ec2b37d371986b748650e54dc3b57688f39dccba9408c7ff5441de49d8","ssdeep":"","tlshash":"fb21a2f9f5b0e949d8d98a350a62c8fe31792cb58d78701b3304f29f1e7896964427a4","first_seen":"2025-07-06T12:09:31.735504Z","last_seen":"2026-09-07T12:34:01.76851Z","times_seen":405,"resource_available":false,"data":null}},"time_used":4370,"timings":{"blocked":4320,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"97ee3.ralind.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"97ee3.ralind.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}