{"report_id":"cc23f86d-ac3c-4063-abf0-6fa4ce882da8","version":6,"status":"done","tags":[],"date":"2026-02-27T08:52:54Z","url":{"schema":"http","addr":"cex-io-user-login.at","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"title":"CEX io Prijava Berza | cex io login","dom":{"size":71753,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1502)","md5":"cc363eec8e82afe4f6e2c7258cb10ced","sha1":"a525b2d63b277fadf70fddf9d070b74ec5fc9499","sha256":"be923cbb49965214c71b09445e05868b27b2c1644dda08799c2e40661d327ad8","sha512":"140dc17241bf4bbbb954dee56eee51dc124bbb83ea92f603a8f71569a54dcaff6f54fd29781656c566c145e24a428695cbe6d480909b30d2190c596781941a73","ssdeep":"768:rjc58JaQCpGOEBvBl9SR0p0Q78Un4TurQlvfSVfrint3GU7oRd:h7SR0p/8UnLeaN+3GZd","tlshash":"6b63c66950f9282245a30288d9524f1b7effd44fa946ceb77abd85c50fc3d88463b60e","dom_hash":"domhash86f8c8c7f1d1e6dd8a6390c715ac7422","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cex-io-user-login.at","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T08:52:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cex-io-user-login.at","ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-27T08:52:55.329379Z","last_seen":"2026-02-27T08:52:55.329379Z","alert_count":42,"request_count":14,"received_data":454656,"sent_data":8507,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-22T22:14:59.650342Z","alert_count":0,"request_count":6,"received_data":106793,"sent_data":3248,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":4974,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"57d67984a2ef57f9ac1f378846a28be1","sha1":"635deda90645c1348c6dc23c8e3cfa6aac42ad17","sha256":"b152603bca5b068a9466c7fcbd322c92d9bb02b285eb1f1e9bd416b5ac6b4b52","sha512":"e2cb46be5f34091d95da8d16d60d57bdd9775bb1542e77e8b84f23796c31f8a121c08317221fc6633d484f4cdbf32bc3ece06193abc59fdfd86ed008482c0898","ssdeep":"","tlshash":"7551de0ebcfb14519a3330b5566f4504363675071909ef543f8c9ac88f5fa6ca167bac","size":2535,"data":"","first_seen":"2026-02-06T05:08:49.413988Z","last_seen":"2026-02-27T08:58:28.756267Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"57dc5627a1327dde9f2fe27539780976","sha1":"7105c7c1ee48b164f018580c3155f7092b817712","sha256":"5239aaa74e7d5e242f6246e7b840a59716f7bd8b5208597a5d585858713421f8","sha512":"6c09008718821dbb07ee359a419031c58075750b651e5a4af1782c0a06a164c2c947930f20f6ed66e158d9c6ffa41742f6f116a42ac945f9fe467e92bc631757","ssdeep":"","tlshash":"dd41de4424f704161123d02d5be34ac6e6b5e14b740dca8f366d72c71fc3464a2ebbea","size":2416,"data":"","first_seen":"2025-07-24T01:31:38.451055Z","last_seen":"2026-03-20T10:13:11.090045Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/hammer.min.js","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"084aa824c6e6f64cf28551d070abe00c","sha1":"dabfade6656a1018d065b5f3673f4154aaf7a8ba","sha256":"7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf","sha512":"517ba666b64d88ec274dc6521cb39f713b346a8b363330561d73873ae07427f478e100747706392607dbbe58d77249557fae46738125e918d9fa59f07766b3da","ssdeep":"384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5","tlshash":"8b92c68633c7728192a720b5a0af020b6137988694cd596cb4bcdad57eb553c927bf3c","size":20765,"data":"","first_seen":"2023-03-07T12:26:23Z","last_seen":"2026-06-07T09:51:15.582762Z","times_seen":1225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e15c748bdca76712b2b2ad5a622d0cf9","sha1":"91c4c70092497113065180d7bb24231a59bcce34","sha256":"1240f68dba931a075ca57745e6f8caef75704f85d285eb488e46f81bf767c1ae","sha512":"a6894b6ef739c9f0c80c2adae69595be5430ad5f1fc327ed3e2c9024bf2e8b277b31d7e50888f761527917567d92cd90f31d9680313d08ef92dedb733664284f","ssdeep":"","tlshash":"b211b907f36928177045f7e097d24b19b486f086de280768717c9fb19b90675b4276ac","size":954,"data":"","first_seen":"2025-04-14T20:20:11.734318Z","last_seen":"2026-03-20T10:13:11.090984Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4aba25c53e1bc689c11218e6b402526","sha1":"cdf11bc8aa57defa8b3374bb15b895289d3c7230","sha256":"fc1f97a1eeee2cc090e9230b3f1d3c8d1ada1ce52221c3616b8966410e31ec4f","sha512":"0084adfae4e972127619cb91acfb85de1b9cb7fca238e6dbbe4a879603d1755a359957d2fe749dc9fc1d5bca6493f1c3a8ef3926b330ae957b778c9595e7b2c4","ssdeep":"","tlshash":"bb219c18b0f745a064b7616b07fb89026e281617890cda507e5d68e44fbd29db3337ee","size":1132,"data":"","first_seen":"2026-02-06T05:08:49.419276Z","last_seen":"2026-02-27T08:58:28.757912Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/jquery.min.js","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T12:41:10.757722Z","times_seen":166477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cex-io-user-login.at/public/apple-touch-icon.png","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/apple-touch-icon.png HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nQtIsBDYZhBU4pVp; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 01 Oct 2024 19:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8508\r\ncontent-type: image/png\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e6be5f670dacc69b73b4e404254f0816","sha1":"3a679da2352b5342094194e91f769adbfbedee6c","sha256":"0db9f3b1f083bdc464bf3029764277ca95170ae7456e961b5c768feca9e847c2","sha512":"5010255ab9b82ed5a7379adc816b25007d6d6f114cfcf69b014e5aa76246a78c694804b1a320a3afc87f12068c1ffdb254708692bf4c199528420b03c5fe4acf","ssdeep":"192:h2RevKNeNSchcCKMWuIH1ZvLdiU5wFCnATvY/IPzPb80:h2RetAcPKpueZbOFCnATvYQPD","tlshash":"1d0290c377daab640e861e03eecbad2c856297520c601e9a1c7791f4f9b49ba6595400","first_seen":"2026-01-05T07:11:22.935462Z","last_seen":"2026-02-27T08:58:28.750767Z","times_seen":42,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":73,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/style.css?v=2222","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/style.css?v=2222 HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eXScDJQwrDbgw8EH; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Sun, 02 Nov 2025 08:59:56 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":27388,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ebbaab93b2032b73c04ea6b7b88eccaa","sha1":"08d773de23ecbb48394de8106aecf2713b1990cf","sha256":"fb62779c0cb4279ee619afe72b18714327449773369ede9dcf74f768e646afea","sha512":"1dd503f7ff6f7b82159a1e6f5c4b33c12ac7688fb0146e5da19a1c0491e999772472ee47d7aeecae2ec3561ec0174a3c7378ae8f8c522b3da99ba013ba6cf9d8","ssdeep":"384:6muV8qamuV8UqthBOL33cl+Rt6b8oGsYntBmuV5F6muVV:LqrUR33cl+Rt6hwtz4","tlshash":"99c26315c6050046a133deec27f6ca46fba651239a02c27d7fea2240cffa47456a2fdd","first_seen":"2026-02-06T05:08:49.397717Z","last_seen":"2026-02-27T08:58:28.745986Z","times_seen":38,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/CEX-Login600-600.png","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/CEX-Login600-600.png HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lqad50s5ZHEXSroo; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 01 Oct 2024 20:02:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71630\r\ncontent-type: image/png\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":71630,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"f5214f3389af1d28bc6ae685f6edffda","sha1":"dfcc7623ad93b3e2215391089cc120b8918d4ad3","sha256":"b6ef6826353a54e23b7d2e5f4380321a73994da7830d731d31fae52a471a599f","sha512":"0c321399301fff98576db17534d87a4b6bf60b3f712a2314be2ec1b3b459b3ddfc30bf95c724e722970470a3dfa0760ec2b363791f77f5f9100d85cf33d74cee","ssdeep":"1536:4DVC8+N2SsH63V4Y/ncxDqjodLY0gW1uJf5LADZWPAhALi:4D9+N2Sp7fc2od51urADZH/","tlshash":"df63023f2702a397bc92e9ec9d490ab0db46be497ce9497f129c4c2d224f5c347d2809","first_seen":"2026-02-06T05:08:49.381149Z","last_seen":"2026-02-27T08:58:28.749191Z","times_seen":38,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/android-chrome-512x512.png","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/android-chrome-512x512.png HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2DPEc4Kjx24wHV5M; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 01 Oct 2024 19:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25293\r\ncontent-type: image/png\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":25293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f1cf20dcb77b550f403750a6f9e3dca8","sha1":"fed454e756f05fca2aadbfa7745cbf7d84fb54f3","sha256":"311b3b97a97667909976434b5800348b7dd2536b50181fa5d6d5a143fc648357","sha512":"7f434b0b544a18ca2d0ee3fd57db5a823771eb2ccf25a6c215879991352b462376e58f1d0a3331c48dd9d41387da723960b0ea23fef4bdb95999e2c5800cedda","ssdeep":"384:4IHfX4yrUuiqg68zvIXw/HQ0s5yatTTuOTHuXxOKvX8JT46dDXYl4sxQPhRt8:ffXTfiqY+w/wl5pTiC0tkC6ZXKd+Tt8","tlshash":"eeb2e125bed82046dc133bb5514145ff417c96ab82b909a230fafb1cea0fb1c607b5c2","first_seen":"2026-02-06T05:08:49.383797Z","last_seen":"2026-02-27T08:58:28.753744Z","times_seen":38,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24376\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 20:17:46 GMT\r\nexpires: Wed, 24 Feb 2027 20:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Sep 2023 23:22:16 GMT\r\ncontent-type: font/woff2\r\nage: 218087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24376,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24376, version 1.0","md5":"fc03edc2c67353b7608b593ee05565c6","sha1":"72106071998b0ef5f145ea4f9d53459e52a33e9f","sha256":"14be4114dcfde74652f19f9ffae8c9bb50707e9e88bd2b1fcd86fb50224109e7","sha512":"444759b488bd8724b40429e1b0e05c5e11a4a1b9a2defc03cde8e9156e237510a943c4d24fe312e0c7a5fb3929f47222fe1d44027ec242a58087a0a57be388d2","ssdeep":"384:t7xtNx1nP7nxzKxS93jTnjRBAb37o/YkoqNkyeMNCVZN6iAwOUoD+AilTeC:Zxt1DnxzTTFab3aoqhNCo/X+lB","tlshash":"62b2d01c899113dbeb45f6f46089e0104670f53062cb86c7583aa4e62b6673ebf72d5f","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-06-08T10:54:12.353593Z","times_seen":5392,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":108,"dns":1,"connect":21,"send":0,"wait":27,"receive":13,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Feb 2026 08:52:33 GMT\r\ndate: Fri, 27 Feb 2026 08:52:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4288,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f431aa8254e443be5e4884271918b18a","sha1":"b4df66449b341ac0d2934c877d4857a4b32f329a","sha256":"8ac1f4c1f1825d5faa3b89d614f4d2c98119fc130efbd536e8ea566870755bcc","sha512":"86717110f548d3d66b313dc81ec017099865b9f9d104955665777c690e9ef2158f7ff884fe332007220d1258698b7052a14b459266692bf8d986d7b10c604688","ssdeep":"96:cOEaJsOEaLFZvOEaV3ZOEaZOEa4Jc+u1OEatNlOxMaJsOxMaLFZvOxMaV3ZOxMag:zJDEV3WW894JlOV3MM8bs","tlshash":"3291a990002be804eb470cd677ce7e39ad4e61567441c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-26T16:24:23.020324Z","last_seen":"2026-06-05T03:43:24.644688Z","times_seen":123,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":100,"dns":2,"connect":20,"send":0,"wait":37,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/hammer.min.js","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/hammer.min.js HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=p8suVDkPKRzyQjPB; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Sun, 09 Jun 2024 15:14:58 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":20765,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20581)","md5":"084aa824c6e6f64cf28551d070abe00c","sha1":"dabfade6656a1018d065b5f3673f4154aaf7a8ba","sha256":"7953631f0e54794d2352a3cfa591c0914d73e14f90141058e3cf16bee7939bcf","sha512":"517ba666b64d88ec274dc6521cb39f713b346a8b363330561d73873ae07427f478e100747706392607dbbe58d77249557fae46738125e918d9fa59f07766b3da","ssdeep":"384:2b5vj+l3jfaksTAAvNWUwLATFqNCns+CSHDJDLrx:y5vj+5jfSTtrTFqNCs+CSHtD5","tlshash":"8b92c68633c7728192a720b5a0af020b6137988694cd596cb4bcdad57eb553c927bf3c","first_seen":"2023-03-07T12:26:23Z","last_seen":"2026-06-07T09:51:15.582762Z","times_seen":1225,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/logo.svg","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/logo.svg HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=194gCnVnLDkmFYnG; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Sat, 28 Sep 2024 05:11:32 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59dd7546eee82ad8710b21e278841bfa","sha1":"d4129c027b76216303311836bae4a318fd10ef51","sha256":"96a1f66f55d3d98be3465a11d14abddc931233408919334937b0f07c1d7226ba","sha512":"cf239c8e1549f26f8d50b84b6c5188ffec748ef24537dc979b0d75ad16e21e6339681b874835559fdef1f16d70ba7b24886ce8fe559ff655be56386de236a342","ssdeep":"","tlshash":"c781a7e9539473e4f50acbf9c9314d66762a20bf7a91c298f58e6898d3310ad04cedc0","first_seen":"2026-01-05T07:11:22.933338Z","last_seen":"2026-02-27T08:58:28.753275Z","times_seen":42,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24376\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 20:17:46 GMT\r\nexpires: Wed, 24 Feb 2027 20:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Sep 2023 23:22:16 GMT\r\ncontent-type: font/woff2\r\nage: 218087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24376,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24376, version 1.0","md5":"fc03edc2c67353b7608b593ee05565c6","sha1":"72106071998b0ef5f145ea4f9d53459e52a33e9f","sha256":"14be4114dcfde74652f19f9ffae8c9bb50707e9e88bd2b1fcd86fb50224109e7","sha512":"444759b488bd8724b40429e1b0e05c5e11a4a1b9a2defc03cde8e9156e237510a943c4d24fe312e0c7a5fb3929f47222fe1d44027ec242a58087a0a57be388d2","ssdeep":"384:t7xtNx1nP7nxzKxS93jTnjRBAb37o/YkoqNkyeMNCVZN6iAwOUoD+AilTeC:Zxt1DnxzTTFab3aoqhNCo/X+lB","tlshash":"62b2d01c899113dbeb45f6f46089e0104670f53062cb86c7583aa4e62b6673ebf72d5f","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-06-08T10:54:12.353593Z","times_seen":5392,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":116,"dns":1,"connect":21,"send":0,"wait":48,"receive":9,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggmxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggmxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 23:00:58 GMT\r\nexpires: Thu, 25 Feb 2027 23:00:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Sep 2023 00:00:39 GMT\r\ncontent-type: font/woff2\r\nage: 121895\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14804, version 1.0","md5":"91e6441f12d215255a6b2045ec824975","sha1":"0e7287327b6e43469291a9dd14564c5db07f03ae","sha256":"c184517a0e8aa8b086eeb86897d34750aeb95e881502a424d02ffec19a9c91af","sha512":"afa7b12938c64e7216840bbd3d973b933592ab887aa408efc7fe3a044d07f3f8fe278f4b6e4fc0c056b6a15ea4bbc351bb930c02126af59d0ee93189c12f9eeb","ssdeep":"384:h/GgGM0pnD0gxJDuKoajZIWSUZ9wIp+2pXiT5nbapg0:hegGzDyKoadfSQfpXiT0pg0","tlshash":"3262df5397287d5a71b6346dc239ce8c9d77a49930862830285188bdb9f6f8f34bd230","first_seen":"2023-05-05T15:07:26Z","last_seen":"2026-06-07T22:32:33.454719Z","times_seen":294,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":100,"dns":9,"connect":8,"send":0,"wait":47,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggmxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggmxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 23:00:58 GMT\r\nexpires: Thu, 25 Feb 2027 23:00:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Sep 2023 00:00:39 GMT\r\ncontent-type: font/woff2\r\nage: 121895\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14804, version 1.0","md5":"91e6441f12d215255a6b2045ec824975","sha1":"0e7287327b6e43469291a9dd14564c5db07f03ae","sha256":"c184517a0e8aa8b086eeb86897d34750aeb95e881502a424d02ffec19a9c91af","sha512":"afa7b12938c64e7216840bbd3d973b933592ab887aa408efc7fe3a044d07f3f8fe278f4b6e4fc0c056b6a15ea4bbc351bb930c02126af59d0ee93189c12f9eeb","ssdeep":"384:h/GgGM0pnD0gxJDuKoajZIWSUZ9wIp+2pXiT5nbapg0:hegGzDyKoadfSQfpXiT0pg0","tlshash":"3262df5397287d5a71b6346dc239ce8c9d77a49930862830285188bdb9f6f8f34bd230","first_seen":"2023-05-05T15:07:26Z","last_seen":"2026-06-07T22:32:33.454719Z","times_seen":294,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":76,"dns":5,"connect":21,"send":0,"wait":46,"receive":4,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggmxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggmxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 03:13:34 GMT\r\nexpires: Fri, 26 Feb 2027 03:13:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:07 GMT\r\ncontent-type: font/woff2\r\nage: 106739\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15120,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15120, version 1.0","md5":"6d36d5bdedfabb5bbee2ab6b6ded3416","sha1":"1f62546fa0a051004f4faa3f40a4a8074a2e06ea","sha256":"3911b66d9f2e005a4b989223405d0e5032619c668597ba467cc76a23c8fffcfb","sha512":"21c425a24911d63daee9242105549805d53dbe91d463be1512949245d3c72769bd81b6a5617388776a204a45995a4365fb5dc0abc9b081f6abbb4018f36c2138","ssdeep":"384:BCX/6yjzk4RmmVzZQVIiSeYWsfTZW3xYuiM:BQ/2bm3QVd1YWB3X/","tlshash":"6162c0c2e4149ad6cea76175d373c84196d98ce0bdefa84098e32b414317b24bbdb7b4","first_seen":"2025-06-04T20:22:57.505569Z","last_seen":"2026-06-08T08:37:53.736909Z","times_seen":1555,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":73,"dns":1,"connect":28,"send":0,"wait":49,"receive":6,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T08:52:33.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HdzpVwYzm0QlonwG; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg1_=68BkgA27oM2TozNcdqg7; Domain=.cex-io-user-login.at; HttpOnly; Path=/; Expires=Sat, 27-Feb-2027 08:52:33 GMT\nPHPSESSID=6ae309121880475988d6e92b67db8343; path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:31 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]}],"data":{"size":74273,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1472), with CRLF line terminators","md5":"1243beed5731886094953eab59285a70","sha1":"f7d65039e651744edcfb0574d905982c11ab28f0","sha256":"eb106063a4b2c12731124d0eacabb87e91b44fa56bf3ab73de8fd96aa26bc7c6","sha512":"019dbaa238c910562abfcd6d6acf1cbedd4890af75b33cbaf4d48297a08dd45408cb67f7ccbf51aaa4f8d1291a1c723ee3b2e3ebce843dc78a13b0f08a96ebad","ssdeep":"768:AaSnpIdnmIUVPYVBPOSR0pHQ3kNSdzSF4l/X7xfX2TpsLLkS2o:4vSR0p6kNS8kLZEsLmo","tlshash":"8e73a66950d8282645730288c9524f5bfeef905fa6068eb77abd86c70ff3c44463f94a","first_seen":"2026-02-27T08:52:59.23695Z","last_seen":"2026-02-27T08:52:59.23695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":48,"dns":1,"connect":18,"send":0,"wait":186,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/jquery.min.js","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/jquery.min.js HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YtbymP1gjw1965aP; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 23 Apr 2024 17:29:52 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-06-08T12:41:10.757722Z","times_seen":166477,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/cap/cap.css?v=ssss1","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/cap/cap.css?v=ssss1 HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sQYZpTKQREAwpjBV; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Mon, 30 Sep 2024 07:53:14 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6e6e2907db1f2c9f081703e81cc5f14b","sha1":"1262d232122dace7441dba1f2ad9371492b72fe8","sha256":"98cfe6443eefd2834e0a53800e00a808b0ef1a7598123ef9d6b4622fc69fc77b","sha512":"13613348838d85978bd155cf08b3ed36f66356e9b234f1368af8eda2b0636d811f007e6b3756728660a7fb06c203749359eae49edc0b034f95da56b7cd62d5cf","ssdeep":"192:/9neMHORclYu1F71WnPsqZqffelzHKMuQo3by0QJqtIrpQrp2yybyyJJNJ2eZe3c:/gCOohWnPZqHU+MI3byma","tlshash":"84e2fd37f9030104213f6a13ff85a758e63ec563ca220bbe72b9d8898f56d9851e7d52","first_seen":"2025-08-08T11:17:48.687852Z","last_seen":"2026-02-27T09:18:44.452143Z","times_seen":50,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/layout-desktop-bg.svg","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/layout-desktop-bg.svg HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/public/style.css?v=2222\r\nCookie: __ddg8_=nQtIsBDYZhBU4pVp; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=seAgeNfRp5jPOI4u; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Sat, 28 Sep 2024 05:11:08 GMT\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":81968,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70effa58736d314d5ff20c2ac9162b91","sha1":"ae69280b2483bbbc14042bcf28afcc05d6c3f217","sha256":"6fad7ae6f60cd3d2b3686059dadf237e2caa5eca2a2a92bdf4a358017b025b61","sha512":"08aef553cbbf28012be8629eebaa782e682b529d429f863b6f568c977e5dda7191d84c16c38f4b2a84aac63abd150bf183aa2b7fa1e2c7e29a14a49a10fd8d08","ssdeep":"1536:BJhN12dprBBJtiLAF2g9/yb8qmlSlIda9H0uTWakhtIBZIFbKRfl/AvEbkZjz:B3Or1wF8PGIdaHWakha7IKojz","tlshash":"e2830130cdfba85f15a870e9a18b08393ba9dc46d18c51515cbe31f7e21caba9d790c6","first_seen":"2026-01-05T07:11:22.951263Z","last_seen":"2026-02-27T08:58:28.749712Z","times_seen":42,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/checker.php","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:34.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"POST /checker.php HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 95\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=seAgeNfRp5jPOI4u; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":95,"data":"formSubmitted=false\u0026csrf_token=89d8b06100a81958e98c4f1f2c9cd0f432d41578426329a3b1251274aeab5fd0"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=E08BilgEyClRDFyG; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg10_=1772182354; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"d361e6b3f641788dace6707209d55a63","sha1":"02826cbae05e1312a9b9fd2e58ca2a07e488c76b","sha256":"fe85cceb474303eb80a5ca9a60b16d92208a8e0b38647647654b0c42447b51f7","sha512":"2dfdf35e0d21943e04a5a5a4eea19302af309931523cf0b87548f189c418a0a318c1ad2ff703895b3c50946c9660f26c2345d0abc8017593360ed41857e2363a","ssdeep":"","tlshash":"a1600000000000030cc00c000c000030ff333f00000f00c0000c00f00000cc0c00c000","first_seen":"2023-04-05T19:24:08Z","last_seen":"2026-06-08T13:13:53.894951Z","times_seen":1251,"resource_available":false,"data":null}},"time_used":14538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/apple-touch-icon.png","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:34.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/apple-touch-icon.png HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=seAgeNfRp5jPOI4u; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eTs6FWRGfMYgMcqy; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg10_=1772182354; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 01 Oct 2024 19:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8508\r\ncontent-type: image/png\r\nage: 2\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":8508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e6be5f670dacc69b73b4e404254f0816","sha1":"3a679da2352b5342094194e91f769adbfbedee6c","sha256":"0db9f3b1f083bdc464bf3029764277ca95170ae7456e961b5c768feca9e847c2","sha512":"5010255ab9b82ed5a7379adc816b25007d6d6f114cfcf69b014e5aa76246a78c694804b1a320a3afc87f12068c1ffdb254708692bf4c199528420b03c5fe4acf","ssdeep":"192:h2RevKNeNSchcCKMWuIH1ZvLdiU5wFCnATvY/IPzPb80:h2RetAcPKpueZbOFCnATvYQPD","tlshash":"1d0290c377daab640e861e03eecbad2c856297520c601e9a1c7791f4f9b49ba6595400","first_seen":"2026-01-05T07:11:22.935462Z","last_seen":"2026-02-27T08:58:28.750767Z","times_seen":42,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/favicon-16x16.png","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:34.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/favicon-16x16.png HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=seAgeNfRp5jPOI4u; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EMuRxG3FIaUWO3n5; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg10_=1772182354; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Tue, 01 Oct 2024 19:10:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 775\r\ncontent-type: image/png\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"259b853ffd58b5706ed499bf3c838a8e","sha1":"1c008c3b4296e10f889c1c71219f98af0ce1a91b","sha256":"35bfed345b3edc352d6c56d1f39069bab08d79f2fd7539fd1e7e7cbf923c3a6d","sha512":"4cc89dd1c41e871bbb3aff111e42e530fbd6bea82de6d0f57030a9f08230cbb6c0a8c5b1548e80c6bd3f55e4fbc5bfede4a200e65beecf2ff727c8b548f20045","ssdeep":"","tlshash":"8a0120c3759055a8cc4313674901bd91ff36c22722604d4caa2dfc0d89a47e84bb4fd1","first_seen":"2026-01-05T07:11:22.937948Z","last_seen":"2026-02-27T08:58:28.754771Z","times_seen":42,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cex-io-user-login.at/public/def.css","fqdn":"cex-io-user-login.at","domain":"cex-io-user-login.at","tld":"at"},"ip":{"addr":"186.2.175.29","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cex-io-user-login.at","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 11:34:03 GMT","end":"Wed, 08 Apr 2026 11:34:02 GMT"},"fingerprint":{"sha1":"D9:74:CC:51:45:5C:B2:22:52:6E:D6:A7:E7:CD:F6:7A:E0:F6:5E:3C","sha256":"AA:B4:C0:06:7F:5E:9D:E4:90:F6:53:7A:36:68:D5:86:C0:83:F6:A1:46:CC:9C:40:A4:22:A7:D5:82:52:B6:A2"}}},"request":{"raw":"GET /public/def.css HTTP/1.1\r\nHost: cex-io-user-login.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nCookie: __ddg8_=HdzpVwYzm0QlonwG; __ddg10_=1772182353; __ddg9_=91.90.42.154; __ddg1_=68BkgA27oM2TozNcdqg7; PHPSESSID=6ae309121880475988d6e92b67db8343\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vGBfPC7Ia6yC6U8U; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg10_=1772182353; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\n__ddg9_=91.90.42.154; Domain=.cex-io-user-login.at; Path=/; Expires=Fri, 27-Feb-2026 09:12:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 27 Feb 2026 08:52:32 GMT\r\nlast-modified: Sat, 28 Sep 2024 10:40:46 GMT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 1\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"843bfc93d532ec13a93e89d6c9cffe5b","sha1":"8ac7fd95b141613de8a932866afec0d31e339a12","sha256":"a160d1a596326c7f93226c2a6fb8c309a694e591fd648f40073bf69c3b1d05bf","sha512":"03c9c8d97b4de16a0bef2d871a433183f147551cdfbf7e3a27aa696e16bc94316d0aa988c144c7abeae3d3dc7cfc714c77cf8f153b4949bac92a5f74d6f4399f","ssdeep":"","tlshash":"0b61ed55b9020192f73b4378abf84a7aea70a4130d431abef7e0121e0f7456c4366fad","first_seen":"2025-04-14T20:20:11.628778Z","last_seen":"2026-03-20T10:13:11.079102Z","times_seen":53,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-27","alert":"Phishing Block","trigger":"cex-io-user-login.at","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"cex-io-user-login.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggixSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cex-io-user-login.at/","date":"2026-02-27T08:52:33.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggixSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cex-io-user-login.at\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cex-io-user-login.at/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8308\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 08:51:03 GMT\r\nexpires: Sat, 27 Feb 2027 08:51:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Sep 2023 23:54:47 GMT\r\ncontent-type: font/woff2\r\nage: 90\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8308, version 1.0","md5":"35e522616aece4d1d7b6acb5b94c64ce","sha1":"6ad481d162e5d3c09d9d5829821befee57bff659","sha256":"41fac913beffc12e3e94666ab5babadb6af5154d1886ffb9105fe1379bdb6b3d","sha512":"66a0dc23cc8e1bc8f55bf5128cd4a1f37d172d664c78f2442312477df55a20d649cd9274c171f92cc459c98cef8d33cd57875ff3f30b76dd70f57040e2edbcaa","ssdeep":"192:XKqbNMFON40I80+7TpYoTDxw/ajQXDKdw/3QP:JNMFS40XtrfQD3YP","tlshash":"3802af85e984076ef3908c7b5c295e5002f65f701b406e67c027f562f99f22a4973273","first_seen":"2023-11-01T13:43:25Z","last_seen":"2026-05-22T11:16:42.312505Z","times_seen":75,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":60,"dns":1,"connect":14,"send":0,"wait":39,"receive":9,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
