{"report_id":"02ca9463-6de4-4ca8-8f80-a5f7b30fe7ed","version":0,"status":"done","tags":[],"date":"2026-06-21T09:48:01Z","url":{"schema":"http","addr":"pub-91119ac3a0624373ac095908b14895cf.r2.dev/","fqdn":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","domain":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-91119ac3a0624373ac095908b14895cf.r2.dev/","fqdn":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","domain":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","tld":"r2.dev"},"title":"Unauthorized","dom":{"size":14110,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1053)","md5":"aeccebb95f3d25bd58835c8272ccb57f","sha1":"c1606c9b909c882e4292bcdac5825f1941bd103c","sha256":"99bd70c6a75408262d98e84bfe20eacbe91b86ab41bb5f84f017fc5e9995d65f","sha512":"6c871365caa201b5163bd0c72e35cb14da65f065b87c9a308d69e1d3e19251699f8e73acac94db1347ca88e291ff0381cffe8513094f91912e2fb83f0087816d","ssdeep":"192:5SD+TD90sp7aSVbJ9ODs+fYuP7VhGyE7dIJotVt1jTY5yhIJ+oO:j6s+NCys/1p6JxO","tlshash":"e352a4dc23b4196afaa443caef6550a8291760fb97898514f24c1b3c9f848ddcc3b2dd","dom_hash":"domhashe3da613b60282bda8b7321385c5354dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pub-91119ac3a0624373ac095908b14895cf.r2.dev/","fqdn":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","domain":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-26T09:48:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-21","alert":"Sinkholed","trigger":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-04-10T19:02:42.966164Z","last_seen":"2026-05-08T03:04:33.120267Z","alert_count":1,"request_count":1,"received_data":16982,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.cloudflare.com","ip":{"addr":"104.16.124.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":26817,"first_seen":"2012-05-22T13:19:15Z","last_seen":"2026-06-16T05:56:23.106999Z","alert_count":0,"request_count":1,"received_data":4847,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pub-91119ac3a0624373ac095908b14895cf.r2.dev/","fqdn":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","domain":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-21T09:47:39.181Z","timestamp":1782035259181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pub-91119ac3a0624373ac095908b14895cf.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nDate: Sun, 21 Jun 2026 09:47:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 16794\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCF-RAY: a0f217d20c8d0b65-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16794,"size_decoded":16982,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (986)","md5":"fa1d82f2891530d61f6971d335bbab89","sha1":"f03dbb5ac984e5dd307b53328212733d35843528","sha256":"369dca91b4e0045fe1c187d211d39c1f55e3306e6ae0707d526390db9b8d4598","sha512":"4865ae353b89b5146198dfc45419cf462a7994c58957e7ce0495c82afe06dd8891b4db97aaea4f35c2cdf0239c4892147b95c4d6296219f80856989d17557088","ssdeep":"192:oSD+TD90sp7aSVbJ9CtzfWdYdKG7VhN3EpIJ5tFtQjMY5VhIJ+Ik:GEzfVZ3LPQD6J7k","tlshash":"fa72a4dc6bf9a9d5c9ad42ebef5430a4260360f3478a5404f14d262d1f4a88ddd6b3ec","first_seen":"2026-06-18T17:44:06.054946Z","last_seen":"2026-07-25T02:52:52.277208Z","times_seen":70,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":15,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-21","alert":"Sinkholed","trigger":"pub-91119ac3a0624373ac095908b14895cf.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cloudflare.com/favicon.ico","fqdn":"www.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.124.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-91119ac3a0624373ac095908b14895cf.r2.dev/","date":"2026-06-21T09:47:39.486Z","timestamp":1782035259486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 16:54:23 GMT","end":"Wed, 05 Aug 2026 17:54:15 GMT"},"fingerprint":{"sha1":"9B:4D:64:43:0F:53:8F:4D:2F:41:15:64:AE:1D:50:B9:6C:F4:BC:40","sha256":"8A:3D:B2:9E:34:D4:4E:A1:10:47:17:BD:88:A0:A8:6D:E2:84:A4:EF:8D:F5:64:53:86:65:48:7B:A0:A8:1B:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pub-91119ac3a0624373ac095908b14895cf.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 21 Jun 2026 09:47:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlink: \u003c/.well-known/agents.json\u003e; rel=\"api-catalog\", \u003c/.well-known/webmcp.json\u003e; rel=\"service-desc\", \u003c/openapi.json\u003e; rel=\"service-desc\", \u003c/llms.txt\u003e; rel=\"service-doc\", \u003c/sitemap.xml\u003e; rel=\"sitemap\", \u003c/fonts/Kunst%20Grotesk%20Regular.woff2\u003e; rel=preload; as=font; type=\"font/woff2\"; crossorigin, \u003c/fonts/Kunst%20Grotesk%20Medium.woff2\u003e; rel=preload; as=font; type=\"font/woff2\"; crossorigin, \u003chttps://ot.www.cloudflare.com\u003e; rel=preconnect; crossorigin, \u003chttps://imagedelivery.net\u003e; rel=preconnect; crossorigin\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-placement: local-OSL\r\nx-served-by: marketing-site\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com wss://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https:; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=plXgJMc.Oj.2GGeVqQHdH8kEpxJOUHA9LLuxdy4DpyE-1782035259.5067737-1.0.1.1-xi1GUwWZvgF27a2ZRHUsdF8iW57QiJmg4jGNZ.i8Viz2JnaEekytpAld1BYuc2sXrozg47HpmI.qM1tAQzDSraVsvbTrIctzSoiW_iBojlweAhYkyUcZt7bPsfOthp3is4ADOfWGrrqchteIUjRyGw; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Sun, 21 Jun 2026 10:17:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyduBtECKxa9hUF81KlpFeXYZgDNBAkXLhoWWOeqkNd7X1bAE4WjMW8diHCFE6c1BQ8dVFCI9ZhFgC%2B9R7BKITDC5HRSZ%2FyFMCmkRyOx1vopB2m3Vs3y2ZGhBS1wyr4mjgcC9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d8b839e4b38223847e40cfad151520d4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0f217d3eb38b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908,"size_decoded":4851,"mime_type":"image/png","magic":"PNG image data, 99 x 96, 8-bit colormap, non-interlaced","md5":"f4d4f7e79fd34e08e729580664e75720","sha1":"f11081ef88c0de4ed6b5cc52e54ca12ac6eb1ad9","sha256":"5414bc6e4b3f6e10f99b5d37abf4420da4dcaece66f8f2c08e090e87267adbc5","sha512":"e4be9eee8a947f6cf111bfaa0e60a901a9e2469632b030faa4bbbac835f0cc5de133f934d954335cb9c9919c6bda30c7bd6e2df5532d840b34a4be597bd69145","ssdeep":"","tlshash":"0511b73a70aefde52bef791a56e32e8a6d1b003454840330e3425736c1468594299362","first_seen":"2025-10-16T21:46:37.126967Z","last_seen":"2026-07-26T16:19:59.305792Z","times_seen":13583,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}