Report Overview
URL
pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html
Finishing URL
pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev/Client:DogsForOurBraveEventDate%204:07:2026Tue.html#h?H&o5cwSohQH_3jQwF&KWhY&SAo5Ll4WT3E9ohJc&7ezHL&rRJ=0dqNibE67hsvZfWD5=8e9KSfCWPJE=Qf9Nw2luBZ9d=PSl6bDS94i&6KDlca51jZEmIXO4Jn=ibvoni-lMjRtqq_5nTk0pQWgTMBPnlpy6u&u-eQbRM-dw-BPx5X_=RzbrVJMIz&5hJs_h0084c&locales=en-US
IP / ASN
104.18.54.45
Title
Sign-in to youârâ portal
Phishing - Skyw4lker Phishing Kit
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
rowiee.net 3 alert(s) on this Host | unknown | 2026-03-09 | 2026-04-27 | 2026-05-12 | 1.5 kB | 1.7 MB |  161.35.134.12 |  |
pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev 12 alert(s) on this Host | unknown | 2022-08-23 | 2026-04-09 | 2026-05-12 | 2.3 kB | 30 kB | 104.18.50.34 |  |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-05-10 | 451 B | 90 kB | 151.101.66.137 |   |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-10 | 958 B | 98 kB | 104.17.25.14 | |
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2026-05-13 | 487 B | 2.5 kB | 104.26.9.44 | |
aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-05-13 | 531 B | 47 kB | 13.107.246.53 |  |
Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev | phishing | Phishing Block |
| DNS4EU | pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev | malicious | Sinkholed |
| Quad9 DNS | pub-1e5d76a3f07d40fca9aaa348be68acb6.r2.dev | malicious | Sinkholed |
JavaScript (19)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| b03ec4f66d3bb16cd07336accf812ff4 | DocumentWrite | 95 B | 2023-10-17 | 2026-05-14 | |
Introduced by DocumentWrite First Seen 2023-10-17 Last Seen 2026-05-14 Times Seen 428 Size 95 B (95 bytes) MD5 b03ec4f66d3bb16cd07336accf812ff4 SHA1 346ba10e081c04b742b6e1afe946b1f0996e45a8 Loading... | |||||
| 8d3a4ec46ee2c39ee5207acb768066dc | DocumentWrite | 151 B | 2026-04-09 | 2026-05-14 | |
Introduced by DocumentWrite First Seen 2026-04-09 Last Seen 2026-05-14 Times Seen 4 Size 151 B (151 bytes) MD5 8d3a4ec46ee2c39ee5207acb768066dc SHA1 58ab7ee3031b66e9f7388be6ee5a15506eb303e6 Loading... | |||||
| da1962add6f9b361e73bdaf2b5353189 | DocumentWrite | 926 kB | 2026-04-09 | 2026-05-14 | |
Introduced by DocumentWrite First Seen 2026-04-09 Last Seen 2026-05-14 Times Seen 4 Size 926 kB (926505 bytes) MD5 da1962add6f9b361e73bdaf2b5353189 SHA1 d9be8385ed65533c3f888c8f8e7ad6997591732c Loading... | |||||
| 07670b0b3cfd1a575ce946695e4f23cd | DocumentWrite | 259 kB | 2026-04-09 | 2026-05-14 | |
Introduced by DocumentWrite First Seen 2026-04-09 Last Seen 2026-05-14 Times Seen 4 Size 259 kB (258614 bytes) MD5 07670b0b3cfd1a575ce946695e4f23cd SHA1 a5fe150768ea4cf7d50a1f35358a9dc851f63516 Loading... | |||||
HTTP Transactions (11)
| URL | IP | Response | Size |
|---|