{"report_id":"77187549-5ae7-4280-bf6f-cbf469054bf5","version":6,"status":"done","tags":[],"date":"2026-03-29T12:24:20Z","url":{"schema":"http","addr":"oauth-v2-consent.digital","fqdn":"oauth-v2-consent.digital","domain":"oauth-v2-consent.digital","tld":"digital"},"ip":{"addr":"104.21.17.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oauth-v2-consent.digital/","fqdn":"oauth-v2-consent.digital","domain":"oauth-v2-consent.digital","tld":"digital"},"title":"Site is created successfully!","dom":{"size":1349,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"66184b24b8f9701b7c797a59e36c03e0","sha1":"4f584aa3f75aaf998fa191ab2a3f0f35973fdd86","sha256":"a3ef2d1db43b3310b7958d0514d24af5fac791bec6a10b94e8444d96acbc5475","sha512":"3bd2c044a6a8f2c34e41e9a79f1db5fcc05cb79880e942eb62d991a522c7e3fb1f5f7ba1cc2e629f40a513c85c3a41f6d6a669be53de09bc0093ba5bc5c77ae1","ssdeep":"","tlshash":"fb21662353fe6091500340f0dff957949bb6c0c3d66b9e103d2c559cef86a16086b38d","dom_hash":"domhashdad1cc0202eb45656935487977c6d4ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"oauth-v2-consent.digital","fqdn":"oauth-v2-consent.digital","domain":"oauth-v2-consent.digital","tld":"digital"},"ip":{"addr":"104.21.17.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T12:24:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"oauth-v2-consent.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"oauth-v2-consent.digital","ip":{"addr":"104.21.17.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T12:23:49.049874Z","last_seen":"2026-03-29T12:23:49.049874Z","alert_count":2,"request_count":2,"received_data":2935,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oauth-v2-consent.digital/","fqdn":"oauth-v2-consent.digital","domain":"oauth-v2-consent.digital","tld":"digital"},"ip":{"addr":"104.21.17.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T12:23:58.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oauth-v2-consent.digital","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 15:18:36 GMT","end":"Thu, 25 Jun 2026 15:18:35 GMT"},"fingerprint":{"sha1":"E8:B6:2E:26:D4:C2:86:3A:F0:4C:9B:A5:C3:01:5A:95:B5:13:12:D7","sha256":"91:AB:63:42:AE:40:A8:97:EA:47:D4:13:D3:F1:74:AC:58:DA:D7:64:33:6D:8D:3B:2D:50:09:8A:3C:41:26:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oauth-v2-consent.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 12:23:59 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 27 Mar 2026 16:16:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CUGVT3mU5bhWA%2BrM54C%2B3%2BYvBNN9fibOLuLhlFgynwQFzZ6zxKGl%2FH9yhDKu8TAvwq6LwKvZvnKO%2FuVoUHTdXoKmHB6jtmlql11KK%2BnyhecdaIe1ZZz2woBjajtto4ddICpmqjIURTbPiFY%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e3ed9519c2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"9ed2f42d562702ac623da07660333bfd","sha1":"8388c7d2f94ab5ad11023fb14b05a5c03cc1b73c","sha256":"0bae6089419ea8f95d7ddf86ba40a6b6c8ae6fca852dd9b70351f869e19df27b","sha512":"81c2a15532bff1fce6eb0ba628dd20ab14f164d5b1c727cebd2b8ab9d20026a71efad9005dd5604b1b7f15e8e1bd370dd34056f3ab3730a2394007fbdefd5f76","ssdeep":"","tlshash":"4f21032353fe6091500340f09ffa5794abb7d0c3e66b9d143d2c95acef86a16586b38d","first_seen":"2024-12-12T09:49:10.65084Z","last_seen":"2026-05-10T22:40:07.725135Z","times_seen":446,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":29,"dns":6,"connect":6,"send":0,"wait":104,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"oauth-v2-consent.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oauth-v2-consent.digital/favicon.ico","fqdn":"oauth-v2-consent.digital","domain":"oauth-v2-consent.digital","tld":"digital"},"ip":{"addr":"104.21.17.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oauth-v2-consent.digital/","date":"2026-03-29T12:23:59.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oauth-v2-consent.digital","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 15:18:36 GMT","end":"Thu, 25 Jun 2026 15:18:35 GMT"},"fingerprint":{"sha1":"E8:B6:2E:26:D4:C2:86:3A:F0:4C:9B:A5:C3:01:5A:95:B5:13:12:D7","sha256":"91:AB:63:42:AE:40:A8:97:EA:47:D4:13:D3:F1:74:AC:58:DA:D7:64:33:6D:8D:3B:2D:50:09:8A:3C:41:26:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: oauth-v2-consent.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oauth-v2-consent.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FY2dUhsAr1ZIgnQuA9%2BWNytrUvngXQpjxh7aOFB5VsNx72%2BcEa4ZZadXorbeJ6Xf%2BsKgFh4uZRrUbwc%2BH1heCOq5RRxIR02JKT6%2F%2BiYO0bKU0AesfOOaTe5tQwIs%2BR45Chx8xi9iKHz%2BRc%3D\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sun, 29 Mar 2026 12:23:59 GMT\r\nserver: cloudflare\r\nage: 31\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e3ed9536906569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"201f0a62347a81a0e7305f3688389186","sha1":"2ae697e9c20aeeff837cbcbe97ca770000f04bab","sha256":"018b13a6b3327335e2ece1301f27e7730aebab48e84742490412a785c25c6814","sha512":"0bd00ee09efebb99d73d7574b99113b3ed47ebdd238d512f9ce2d5af371acc4531b0a5808efc49911ab81867f0bfa81dc0c9e55ed0c4fc946919df954c04551d","ssdeep":"","tlshash":"e9d02bad504733964821155039c211c2329912e6643dc5a83dc5d447579ca7dcdca29d","first_seen":"2026-03-29T12:23:52.967707Z","last_seen":"2026-03-29T12:24:20.668945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"oauth-v2-consent.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}