WEBSITE ANALYSIS REPORT

http://97ee1.ralind.at/cnbcard/signin.php

06 Sep 2026 · 13:02:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:02:05.608 GET 200 document 4.6 KB 439 ms 3 alerts

13:02:06.228 GET 200 script 4.4 KB 42 ms 3 alerts

13:02:06.234 GET 404 script 396 B 143 ms 3 alerts

13:02:06.448 GET 302 script 0 B 36 ms —

13:02:06.451 GET 200 stylesheet 100.1 KB 35 ms —

13:02:06.452 GET 200 script 344 B 40 ms 3 alerts

13:02:06.462 GET 200 img 3.7 KB 59 ms —

13:02:06.489 GET 200 script 397.7 KB 13 ms —

13:02:06.864 GET 200 font 152.9 KB 22 ms —

13:02:06.894 GET 200 img 1.1 KB 52 ms 3 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://97ee1.ralind.at/cnbcard/favicon.ico

IP / ASN

31.59.121.53

AS834 · IPXO

Requested by: https://97ee1.ralind.at/cnbcard/signin.php

Resource information

File type: MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
MIME type: image/vnd.microsoft.icon
First seen (UTC): 06 Jul 2025 · 12:09:31.735 UTC
Last seen (UTC): 20 Oct 2026 · 10:25:28.459 UTC
Times seen: 446

Size: 1.1 KB (1150 bytes)
MD5: 1ca82eec639a786fc6356337e0f7be77
SHA1: 45efda0075b04705e79f61caa616f3b1d1588c68
SHA256: 90d32dc3c82462addda4a980562043cebd904dcb7c6c7f5390a623fce9f8ae49

Certificate information

Issuer: Let's Encrypt · YR2
Subject: ralind.at
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE
Valid from: Wed, 08 Jul 2026 09:54:21 GMT
Valid until: Tue, 06 Oct 2026 09:54:20 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /cnbcard/favicon.ico HTTP/1.1
Host: 97ee1.ralind.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://97ee1.ralind.at/cnbcard/signin.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 06 Sep 2026 13:02:06 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Wed, 26 Aug 2026 07:40:39 GMT
ETag: "47e-659ee55f0d66e"
Accept-Ranges: bytes

http://97ee1.ralind.at/cnbcard/signin.php

Domain graph

Hostnames

Connections

Network requests

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://97ee1.ralind.at/cnbcard/signin.php

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://97ee1.ralind.at/cnbcard/signin.php

Domain graph

Network requests