{"report_id":"3d3af858-ac63-4d93-a7b0-2bcf48507556","version":6,"status":"done","tags":[],"date":"2026-05-11T15:08:45Z","url":{"schema":"http","addr":"www.service-cloudflare.com/","fqdn":"www.service-cloudflare.com","domain":"service-cloudflare.com","tld":"com"},"ip":{"addr":"38.54.108.85","port":0,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.service-cloudflare.com/","fqdn":"www.service-cloudflare.com","domain":"service-cloudflare.com","tld":"com"},"title":"Just a moment...","dom":{"size":431622,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42291)","md5":"2866bc122eccb269fde97f270f6568c3","sha1":"c76d6902278a077e28485876c257246f429cea9f","sha256":"2b6e8b8524219138c323496691b9b7c90eeeff6953dfad631d1f06a97d363034","sha512":"27c93abee070290fd1d553d51a3b1f7a3e390749cdb127cf95d6dbcf705c620c497c1077731ae600926540f65ac4b19bfae3e6a1fb3ad19c732ef047ccfed2ea","ssdeep":"6144:TOTubyhNSOt8uGgr23Ot8uGgr22Ot8uGgr2hOt8uGgr25h2GTix:Tf+zi/grZi/grgi/grfi/grWh2GTix","tlshash":"3994d0f7562b1f4936e77d40a45427043db9f89bea18da9db8ccc21647ed2208c2e8f5","dom_hash":"domhash008bcfd26b066a6bbd75b19557aea6c2","first_seen":"2026-05-11T15:08:47.345241Z","last_seen":"2026-05-11T15:08:47.345241Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.service-cloudflare.com/","fqdn":"www.service-cloudflare.com","domain":"service-cloudflare.com","tld":"com"},"ip":{"addr":"38.54.108.85","port":0,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T15:08:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"www.service-cloudflare.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.slack.com","ip":{"addr":"18.159.197.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"1992-10-21","domain_rank":687116,"first_seen":"2013-08-25T13:41:28Z","last_seen":"2026-04-27T01:36:07.086716Z","alert_count":0,"request_count":1,"received_data":25314,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"slack.com","ip":{"addr":"18.159.197.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"1992-10-21","domain_rank":200,"first_seen":"2017-10-27T23:48:44Z","last_seen":"2026-05-06T15:56:13.986547Z","alert_count":0,"request_count":1,"received_data":25536,"sent_data":395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"a.slack-edge.com","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-12-18","domain_rank":22293,"first_seen":"2016-03-11T01:34:19Z","last_seen":"2026-05-03T06:27:41.600174Z","alert_count":0,"request_count":1,"received_data":25328,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.service-cloudflare.com","ip":{"addr":"38.54.108.85","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"United States","country_code":"US"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-03-31T02:08:42.495074Z","last_seen":"2026-04-27T01:36:07.084354Z","alert_count":5,"request_count":1,"received_data":431752,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.service-cloudflare.com/","fqdn":"www.service-cloudflare.com","domain":"service-cloudflare.com","tld":"com"},"ip":{"addr":"38.54.108.85","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fade532ceebc0f88e3cce5cdd28213c1","sha1":"b6a99e3ec2ad302daa473a9bb71ef9a485351015","sha256":"2b53a0ab76de85b17edc1c15225c0001f4692c9cf2455711ebb901197ebd81f0","sha512":"c009240a9b9f67b0e69a8876c45cb88d9af18ae9e4023a7e6aedf468772e23141fc75c80ea85bf029e93ed3290b7c2bb8a78b2554e6e522a8060a708c61f7189","ssdeep":"768:WdtEZlnEEqj/Ex3NIoS04r42GTiqTKMLPXl62:WAnRXx+H04r42GTiqWYk2","tlshash":"c023f7e56abb0b2415fef29274da2b70313ac4ebc9dc857f69d8c32a1a91761503f0c5","size":46093,"data":"","first_seen":"2026-04-27T01:36:10.711378Z","last_seen":"2026-05-11T15:08:47.349765Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.slack.com/favicon.ico","fqdn":"www.slack.com","domain":"slack.com","tld":"com"},"ip":{"addr":"18.159.197.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.service-cloudflare.com/","date":"2026-05-11T15:08:22.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slack.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 09:47:06 GMT","end":"Fri, 03 Jul 2026 09:47:05 GMT"},"fingerprint":{"sha1":"40:45:8E:F6:06:14:DC:FD:C0:63:A5:39:A0:53:91:10:BA:F4:9B:D9","sha256":"67:BE:C3:76:96:A8:04:37:9F:9A:CA:DB:BD:75:F7:73:92:FE:15:7A:13:6B:5D:37:B7:BD:D3:E6:69:6F:3F:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.slack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.service-cloudflare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 11 May 2026 15:08:22 GMT\r\nserver: Apache\r\nlocation: https://slack.com/favicon.ico\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer\r\nx-slack-unique-id: agHw5gelJY3qc6gZA3WJ0wAAEDQ\r\nx-slack-backend: r\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html\r\ncontent-length: 0\r\nvia: 1.1 slack-prod.tinyspeck.com, envoy-www-iad-hodynmfu,envoy-edge-fra-arxaqjrq\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 96\r\nx-backend: main_normal\r\nx-server: slack-www-hhvm-main-iad-gb35j677f16y\r\nx-slack-shared-secret-outcome: no-match\r\nx-edge-backend: envoy-www\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, quic=\":443\"; ma=2592000\r\nx-slack-edge-shared-secret-outcome: no-match\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24499,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T23:49:08.313059Z","times_seen":17808208,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":66,"connect":22,"send":0,"wait":126,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"slack.com/favicon.ico","fqdn":"slack.com","domain":"slack.com","tld":"com"},"ip":{"addr":"18.159.197.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.service-cloudflare.com/","date":"2026-05-11T15:08:22.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slack.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 09:47:06 GMT","end":"Fri, 03 Jul 2026 09:47:05 GMT"},"fingerprint":{"sha1":"40:45:8E:F6:06:14:DC:FD:C0:63:A5:39:A0:53:91:10:BA:F4:9B:D9","sha256":"67:BE:C3:76:96:A8:04:37:9F:9A:CA:DB:BD:75:F7:73:92:FE:15:7A:13:6B:5D:37:B7:BD:D3:E6:69:6F:3F:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: slack.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 11 May 2026 15:08:22 GMT\r\nserver: Apache\r\nlocation: https://a.slack-edge.com/cebaa/img/ico/favicon.ico\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreferrer-policy: no-referrer\r\nx-slack-unique-id: agHw5ulLFitFw01GBlnGHgAAEDs\r\nx-slack-backend: r\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/html\r\ncontent-length: 0\r\nset-cookie: b=02c941691d4dc7842a31b3c830b6e4e4; expires=Sun, 11-May-2036 15:08:22 GMT; Max-Age=315619200; path=/; domain=.slack.com; secure; SameSite=None\nx=02c941691d4dc7842a31b3c830b6e4e4.1778512102; expires=Mon, 11-May-2026 15:23:22 GMT; Max-Age=900; path=/; domain=.slack.com; secure; SameSite=None\r\nvia: 1.1 slack-prod.tinyspeck.com, envoy-www-iad-jbhqolsr,envoy-edge-fra-augekpqy\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 97\r\nx-backend: main_normal\r\nx-server: slack-www-hhvm-main-iad-tbzlkhuob6g7\r\nx-slack-shared-secret-outcome: no-match\r\nx-edge-backend: envoy-www\r\ntiming-allow-origin: *\r\nx-slack-edge-shared-secret-outcome: no-match\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24499,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T23:49:08.313059Z","times_seen":17808208,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":38,"connect":24,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.slack-edge.com/cebaa/img/ico/favicon.ico","fqdn":"a.slack-edge.com","domain":"slack-edge.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.service-cloudflare.com/","date":"2026-05-11T15:08:22.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slack-edge.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 10:48:44 GMT","end":"Wed, 15 Jul 2026 10:48:43 GMT"},"fingerprint":{"sha1":"3E:37:28:6A:6D:13:86:2B:D4:3C:FC:8B:B2:7A:5B:17:02:63:36:F5","sha256":"C1:6A:97:18:50:30:00:F6:F0:B5:98:87:80:D2:C8:71:1E:A7:57:5A:F1:30:A8:E0:AF:C2:9C:4B:3A:6E:99:08"}}},"request":{"raw":"GET /cebaa/img/ico/favicon.ico HTTP/1.1\r\nHost: a.slack-edge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 24499\r\ndate: Thu, 11 Dec 2025 07:19:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\nlast-modified: Tue, 22 Jan 2019 18:42:00 GMT\r\netag: \"d761676f45743f2870388fa7c5cab5c3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-s3cmd-attrs: md5:d761676f45743f2870388fa7c5cab5c3\r\ncache-control: max-age=315360000, public\r\nexpires: Fri, 10 Jan 2020 23:30:00 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 42hdQ0UFCnt1DJw1HRnpW2kTWZnUQaOtVHKSAZxzntK_1Pxou9ZE2w==\r\nage: 13074518\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":24499,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d761676f45743f2870388fa7c5cab5c3","sha1":"1ac5bcf1ceb274a93f8cc4258e773069499b6b66","sha256":"4fd3cddc170cb38ff02baae1fb10f032b1c91c5f6ed02258e8d28a3f1bdd9054","sha512":"ec09594222738f29b8160d9729b2315f528f6508af84a48e28910b9820a5a5a3818e338dccbd46166010027dac5aeb1c891313cfc762f3391eac7c2512790eab","ssdeep":"384:dQo+UC0HpC+dSjjKgXQXcM6h3BQJYY2WqMTKAUjGv:9+UC0Y+Mjj9McMgRQm33AiGv","tlshash":"62b259142a381b97d781cd79dbc95a050c2b3867cc9df7c262d1d202eba269f4bc27b5","first_seen":"2023-05-19T10:16:14Z","last_seen":"2026-08-08T22:34:02.945112Z","times_seen":1199,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":58,"connect":1,"send":0,"wait":2,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.service-cloudflare.com/","fqdn":"www.service-cloudflare.com","domain":"service-cloudflare.com","tld":"com"},"ip":{"addr":"38.54.108.85","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T15:08:21.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-cloudflare.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 06:27:47 GMT","end":"Sun, 28 Jun 2026 06:27:46 GMT"},"fingerprint":{"sha1":"AE:95:C5:3F:8F:D2:D5:64:2C:E7:72:86:CE:38:15:3C:7C:59:FD:CE","sha256":"85:41:2A:28:FE:9D:3D:5B:22:7A:8B:97:4F:71:AE:78:B7:89:75:03:FA:6F:47:4F:9F:6E:95:5E:C3:26:8D:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.service-cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 11 May 2026 15:08:22 GMT\r\nServer: Apache/2.4.58 (Ubuntu)\r\nLast-Modified: Wed, 01 Apr 2026 06:57:17 GMT\r\nETag: \"6952e-64e60982a4d40-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.58","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":431406,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (42291)","md5":"fa01599d8f19c46303b88af69a478929","sha1":"3071925d306dab4293cb005f684442bdcc9ebe84","sha256":"f36dba233e5795a0087585a054f0d453b02925932e9f38355840a32b264ffdba","sha512":"39d9bf8542e17fc9b5950e079644b4b00ebee5000984806059a24fa499132759142c2d75c9fff241cdfe33ea24abb4a30c227daf9572bf1e19ce0f3678f6c71f","ssdeep":"6144:lOTubyhNSOt8uGgr23Ot8uGgr26Ot8uGgr2hOt8uGgr2Wh2GTiP:lf+zi/grZi/grWi/grfi/grxh2GTiP","tlshash":"7494d0f7562b1f4936e77d40a45427043db9f89baa18da9db8ccc21647ed220cc2e8f5","first_seen":"2026-04-27T01:36:10.710367Z","last_seen":"2026-05-11T15:08:47.348622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":226,"dns":1,"connect":104,"send":0,"wait":106,"receive":425,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"www.service-cloudflare.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"www.service-cloudflare.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}