{"report_id":"89cf7a87-5dbf-46c4-bfc4-7e70668de8c9","version":0,"status":"done","tags":[],"date":"2026-06-17T16:51:46Z","url":{"schema":"http","addr":"owa-production-26ca.up.railway.app","fqdn":"owa-production-26ca.up.railway.app","domain":"owa-production-26ca.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.113","port":0,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"owa-production-26ca.up.railway.app/","fqdn":"owa-production-26ca.up.railway.app","domain":"owa-production-26ca.up.railway.app","tld":"up.railway.app"},"title":"404 Not Found","dom":{"size":4415,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (509)","md5":"e63dce528dc2dd094e994cdca040a196","sha1":"e6ca781a23f1b4548a024315f519e0a1de4afc03","sha256":"233454af71171cfcbe581e207fdfeb9b9437f3d6c77735d8a1cb3269166dd043","sha512":"0e6598f8919e30f924b57430a31de60e4f2f95c0e6de1d3f959dd68bc2b670f4c72878e46baf5ad5bec74d1384585edbf18bbf6982a6f0a7ef2fe8e15d89e88c","ssdeep":"96:LRv3mUy3Lz7KPWvncJ+ro0CpcSWB/DPiO:LRv3qn7QWvncJPVeLB/D7","tlshash":"c291b7aa99730268981fe55d2ffb226533d5f093860fdc1a7ecc964ccfc6194ed91288","dom_hash":"domhash5c26f465170516a0868493169578c4f7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"owa-production-26ca.up.railway.app","fqdn":"owa-production-26ca.up.railway.app","domain":"owa-production-26ca.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.113","port":0,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T16:51:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"owa-production-26ca.up.railway.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"owa-production-26ca.up.railway.app","ip":{"addr":"69.46.46.113","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"domain_registered":"2019-08-01","domain_rank":0,"first_seen":"2026-06-17T12:22:27.643354Z","last_seen":"2026-06-17T12:22:27.643355Z","alert_count":2,"request_count":2,"received_data":5234,"sent_data":1047,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"owa-production-26ca.up.railway.app/","fqdn":"owa-production-26ca.up.railway.app","domain":"owa-production-26ca.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.113","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T16:51:24.310Z","timestamp":1781715084310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:01:34 GMT","end":"Sun, 02 Aug 2026 14:01:33 GMT"},"fingerprint":{"sha1":"72:C0:23:86:C3:67:31:BD:EB:D4:7D:C0:D9:54:F7:77:B0:2C:A4:7D","sha256":"D0:97:19:86:FD:B1:9F:E9:36:DA:41:E2:0D:FF:F6:6C:ED:97:54:C1:BA:65:66:0D:D7:B8:05:CD:69:B7:B1:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: owa-production-26ca.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=5\r\ncontent-type: text/html\r\nserver: railway-hikari\r\nx-railway-edge: railway/us-west2\r\nx-railway-fallback: true\r\nx-railway-request-id: 8PB4SjoJRK6Oryv4LPU1MQ\r\ncontent-encoding: gzip\r\ndate: Wed, 17 Jun 2026 16:51:24 GMT\r\nx-hikari-trace: ams1.kxr8\r\nvary: accept-encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":4482,"size_decoded":2181,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (485)","md5":"ba506fa126a9dc1a5fab366417510dac","sha1":"9eae4bf51b276a254bdd8e7ea7135015d0ea1e80","sha256":"b0d7d4f320ea5097d9e4cb70fdd8e4ac110fee4aeb83705b520314cf9c358b6c","sha512":"fce39fc669e4c7c38e67c3be8247e2b4700d42179d890dbaa33b49b01bf70c012df5d549c78fde5fe8f31634b39683a1a5d8bc56f4b130db8cd08677046441f4","ssdeep":"48:0Oe3rQw+EvDbPnuU5ADuydLi2Vm1VK7cVDP9DscVXR4nXaXJPaEdrX4x2RcpTNDF:oRv3mUy3Lz7KPWvncJnro0Cp6WBmPMr","tlshash":"c191b89a9a7302a8981fe56d2feb22643395f053860fdc1a7ecc921c8fc6154edd1388","first_seen":"2026-06-17T16:51:47.142455Z","last_seen":"2026-06-17T16:51:47.142455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":23,"connect":18,"send":0,"wait":184,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"owa-production-26ca.up.railway.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"owa-production-26ca.up.railway.app/favicon.ico","fqdn":"owa-production-26ca.up.railway.app","domain":"owa-production-26ca.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.113","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://owa-production-26ca.up.railway.app/","date":"2026-06-17T16:51:24.893Z","timestamp":1781715084893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 14:01:34 GMT","end":"Sun, 02 Aug 2026 14:01:33 GMT"},"fingerprint":{"sha1":"72:C0:23:86:C3:67:31:BD:EB:D4:7D:C0:D9:54:F7:77:B0:2C:A4:7D","sha256":"D0:97:19:86:FD:B1:9F:E9:36:DA:41:E2:0D:FF:F6:6C:ED:97:54:C1:BA:65:66:0D:D7:B8:05:CD:69:B7:B1:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: owa-production-26ca.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://owa-production-26ca.up.railway.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=5\r\ncontent-type: application/json\r\nserver: railway-hikari\r\nx-railway-edge: railway/us-west2\r\nx-railway-fallback: true\r\nx-railway-request-id: bERrjSl8SY6B7kkL0_TJvA\r\ncontent-length: 101\r\ndate: Wed, 17 Jun 2026 16:51:25 GMT\r\nx-hikari-trace: ams1.kxr8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":101,"size_decoded":417,"mime_type":"application/json","magic":"JSON text data","md5":"f948cf8b5f9144b24baf2ad61491257c","sha1":"b25ee367ecddfdd27da1c64b1517dfa312f92950","sha256":"ab6a8cadd3c0057fa4cb066529767c0913a7585b070ff7c249d2c755032cea1b","sha512":"0b46181d6741d334dc3551c43dbf2682990a2688ac2a88f92d8ca399c25f757d495e5f78920e75ca0be303f48b2486d648f3be988776d6125d40860cea9d7047","ssdeep":"","tlshash":"cfb012db4137687dbfe20433545432f017e9538858f13ad50808c06c010c155db1100c","first_seen":"2026-06-17T16:51:47.143878Z","last_seen":"2026-06-17T16:51:47.143878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"owa-production-26ca.up.railway.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}