WEBSITE ANALYSIS REPORT

http://97ee1.ralind.at/cnbcard/signin.php

06 Sep 2026 · 13:02:36.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:02:05.608 GET 200 document 4.6 KB 439 ms 3 alerts

13:02:06.228 GET 200 script 4.4 KB 42 ms 3 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://97ee1.ralind.at/cnbcard/js/redirect.js

IP / ASN

31.59.121.53

AS834 · IPXO

Requested by: https://97ee1.ralind.at/cnbcard/signin.php

Resource information

File type: JavaScript source, Unicode text, UTF-8 text
MIME type: application/javascript; charset=UTF-8
First seen (UTC): 04 Apr 2026 · 19:40:21.535 UTC
Last seen (UTC): 18 Oct 2026 · 08:25:33.842 UTC
Times seen: 191

Size: 4.4 KB (4463 bytes)
MD5: ddab5bab2ef627aa264c508f02ef01dd
SHA1: c53d75cb9d49f35d0575f46160b420c5c3c39932
SHA256: 9fc4de3632844cd0d933464afb34d27818101adb004e95f4a6f60e861a0eda42

Certificate information

Issuer: Let's Encrypt · YR2
Subject: ralind.at
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: A0:B5:3F:5D:A6:FB:DD:64:0F:DF:90:18:78:FF:24:0A:7E:4D:A3:FE
Valid from: Wed, 08 Jul 2026 09:54:21 GMT
Valid until: Tue, 06 Oct 2026 09:54:20 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cnbcard/js/redirect.js HTTP/1.1
Host: 97ee1.ralind.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://97ee1.ralind.at/cnbcard/signin.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 06 Sep 2026 13:02:06 GMT
Content-Type: application/javascript; charset=UTF-8
Last-Modified: Wed, 26 Aug 2026 07:40:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6a8e9877-116f"
Expires: Mon, 07 Sep 2026 13:02:06 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip

13:02:06.234 GET 404 script 396 B 143 ms 3 alerts

13:02:06.448 GET 302 script 0 B 36 ms —

13:02:06.451 GET 200 stylesheet 100.1 KB 35 ms —

13:02:06.452 GET 200 script 344 B 40 ms 3 alerts

13:02:06.462 GET 200 img 3.7 KB 59 ms —

13:02:06.489 GET 200 script 397.7 KB 13 ms —

13:02:06.864 GET 200 font 152.9 KB 22 ms —

13:02:06.894 GET 200 img 1.1 KB 52 ms 3 alerts

http://97ee1.ralind.at/cnbcard/signin.php

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://97ee1.ralind.at/cnbcard/signin.php

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://97ee1.ralind.at/cnbcard/signin.php

Domain graph

Network requests