{"report_id":"531bbb4b-3869-40de-9059-00521ddd50db","version":6,"status":"done","tags":[],"date":"2025-03-11T06:00:56Z","url":{"schema":"http","addr":"localhost.crcldu.com","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"ip":{"addr":"172.64.149.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"localhost.crcldu.com/","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"title":"localhost.crcldu.com/"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T06:00:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"localhost.crcldu.com","ip":{"addr":"172.64.149.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-05","domain_rank":0,"first_seen":"2024-07-09T15:43:10Z","last_seen":"2025-03-02T21:29:50.484247Z","alert_count":0,"request_count":4,"received_data":2588,"sent_data":1830,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"localhost.crcldu.com/","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"ip":{"addr":"172.64.149.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-11T06:00:33.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"localhost.crcldu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 18:30:09 GMT","end":"Fri, 23 May 2025 19:30:05 GMT"},"fingerprint":{"sha1":"E4:E5:B8:B7:3C:81:2A:60:BE:28:52:C0:85:B4:C5:6F:30:D7:91:07","sha256":"51:35:35:88:00:75:E4:59:FA:FB:66:02:12:C9:5B:7A:2C:D0:55:F8:7F:24:9F:7D:4B:49:D7:F6:CE:F7:20:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost.crcldu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 11 Mar 2025 06:00:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m7htY4%2FU%2Fakg%2FilpESDbj2NhAcnLls5MlOIM1%2FgA5r15cJ9ytqXuT2btmwAbWu4PDyVQT9qZ%2B1HXpKlU17Pu9Alktym6%2FUo0jwfdRNuuGy4LOsEHa4IY3pj9pGvEWeUk5KolRnGasQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 91e8d5097c6356c0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":31,"dns":1,"connect":1,"send":0,"wait":34,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"localhost.crcldu.com/","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"ip":{"addr":"172.64.149.139","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-11T06:00:33.725Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost.crcldu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 11 Mar 2025 06:00:33 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Tue, 11 Mar 2025 07:00:33 GMT\r\nLocation: https://localhost.crcldu.com/\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KtZ2qMVMEyvoHzgzGq7aS4ODucbLTz8TqaREse0vVJ%2BXpHwQnvFUKBYLcYbfAo5li%2B9QvhoCiOFw0aGojF7ylaN2YnTdFOVuA2BLS5E04WUPeDX5HP%2FPzyJs49eGG9873uu4kIwTlw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 91e8d50acec7b51d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"localhost.crcldu.com/","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"ip":{"addr":"172.64.149.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-03-11T06:00:33.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"localhost.crcldu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 18:30:09 GMT","end":"Fri, 23 May 2025 19:30:05 GMT"},"fingerprint":{"sha1":"E4:E5:B8:B7:3C:81:2A:60:BE:28:52:C0:85:B4:C5:6F:30:D7:91:07","sha256":"51:35:35:88:00:75:E4:59:FA:FB:66:02:12:C9:5B:7A:2C:D0:55:F8:7F:24:9F:7D:4B:49:D7:F6:CE:F7:20:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost.crcldu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1969,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 11 Mar 2025 06:00:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dFAQ8YDAWq2Bniz%2FIO3BccJqBbVHyEG6VAUWMWRkpwor%2FdjaSx3eKPkt9iR3s%2FJFnjpFk%2FWoiE6C74IBfgI5lYhhHTHareovC1IcBT8bmioEEtfuR1tSvrP7huEUX6jtvm4iI78gsQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 91e8d50afdc656c0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"localhost.crcldu.com/favicon.ico","fqdn":"localhost.crcldu.com","domain":"crcldu.com","tld":"com"},"ip":{"addr":"172.64.149.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://localhost.crcldu.com/","date":"2025-03-11T06:00:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"localhost.crcldu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 18:30:09 GMT","end":"Fri, 23 May 2025 19:30:05 GMT"},"fingerprint":{"sha1":"E4:E5:B8:B7:3C:81:2A:60:BE:28:52:C0:85:B4:C5:6F:30:D7:91:07","sha256":"51:35:35:88:00:75:E4:59:FA:FB:66:02:12:C9:5B:7A:2C:D0:55:F8:7F:24:9F:7D:4B:49:D7:F6:CE:F7:20:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: localhost.crcldu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://localhost.crcldu.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Mar 2025 06:00:34 GMT\r\ncontent-type: text/plain\r\ncontent-length: 16\r\naccess-control-allow-origin: *\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UU3O2xC9xruQl%2BEdHq%2BmQL0hg6pExNBA%2Fqc7b7Ml24s9Y70%2Bv6GdikjwnFrygzIT1gA8DshrPdZXmFGF6RQTPPwEMLFtobEDW02qfG4yis10EMX4s0H7kvDqEhc4%2FrFPqYVkBWT83A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 91e8d50cffcb56c0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"54315b74e4943b721bc1adb98c460a2a","sha1":"2071695e56d1201d47749ef27dbc7c4501af42fe","sha256":"3af9a554d161c4125e25091abdfb6d370a93606e0eddd167382da8d7d317b5b6","sha512":"167ba17d2f42fdab5e66a7a0cd985b21c71b23a93f26571fe34e673e091b0ad00ef6fcd83c624ca8ab37a30617cbc55d4d9351d3a4ee26eea2935f26467c986f","ssdeep":"","tlshash":"bf600000c3030c0c3000c03000f03cfc0f033003000cc000c00300c0cc03f0000c0300","first_seen":"2023-05-07T17:33:15Z","last_seen":"2026-02-05T01:02:35.353078Z","times_seen":125,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}