{"report_id":"bae86af8-331c-4b68-a210-9dae46d49ba3","version":0,"status":"done","tags":[],"date":"2026-07-17T08:37:55Z","url":{"schema":"http","addr":"com-qr.me","fqdn":"com-qr.me","domain":"com-qr.me","tld":"me"},"ip":{"addr":"195.181.166.158","port":0,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"com-qr.me/","fqdn":"com-qr.me","domain":"com-qr.me","tld":"me"},"title":"Example Domain","dom":{"size":544,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (529)","md5":"379a8339775ddeaf288c762934a17ce9","sha1":"fda00611f98fca6e96dec3a12de88570d0e27068","sha256":"31cbda82ae6aaca6662eb6555637185cc8c40a4e6ec197f5f1ef73d9d7a20b24","sha512":"29c12951c4e48fa1ce7800a7657fd981ae9df8964179f4dd052d2e903ddfa2d84044b8ac0feb39a4208f67b03a39243f7c428a811f16529c8573c44f3ba007e0","ssdeep":"","tlshash":"d7f0054bc181611db55282ef3cf371486615584c57d51cb17c9a7796d8c0172b27175d","dom_hash":"domhash1002b38b83fafb7d23575bb1dd8d2ba7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"com-qr.me","fqdn":"com-qr.me","domain":"com-qr.me","tld":"me"},"ip":{"addr":"195.181.166.158","port":0,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:37:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"com-qr.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"com-qr.me","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-07-17T01:55:16.455426Z","last_seen":"2026-07-17T01:55:16.455426Z","alert_count":1,"request_count":1,"received_data":1182,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"com-qr.me/","fqdn":"com-qr.me","domain":"com-qr.me","tld":"me"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:37:28.940Z","timestamp":1784277448940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-qr.me","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 13:52:04 GMT","end":"Wed, 14 Oct 2026 13:52:03 GMT"},"fingerprint":{"sha1":"7A:CC:89:3F:EA:36:A3:6A:FA:27:59:84:E2:4B:E4:0D:29:B7:D5:4D","sha256":"97:C5:D2:43:E9:14:0A:67:86:AC:C3:69:1D:DD:E9:B3:97:8E:F9:FC:79:4C:DA:73:8E:D7:B5:7A:2F:F8:65:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: com-qr.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:37:29 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 6167537\r\ncdn-requestcountrycode: NO\r\nage: 5986\r\nallow: GET, HEAD\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 15 Jul 2026 17:45:58 GMT\r\ncf-cache-status: HIT\r\ncf-ray: a1c1dfb72a7948d0-ARN\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/16/2026 14:59:59\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 2afd0e5b23969b070a1ae76072501540\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":559,"size_decoded":1019,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (558)","md5":"c35dafa74975d89a1236a2591acb3616","sha1":"51591dc40201f393e8e650deed960e1b1dbba13f","sha256":"ff67a9d764d6a2367a187734e697f6a53217db9a21c101d410a113ca871a299d","sha512":"356a71a6fd7862385ab9884781f11be233c4ee6b9d380b4dffd428e75d2cc6d4d49139080f039f5a4792d20e558e1931b594b94a8efe4d2c2d0f6d147ee6f134","ssdeep":"","tlshash":"4bf0208bc180201db55286ef2ce370086615544867d11cb07c9b66b2e8c1232b23174d","first_seen":"2026-06-09T23:31:10.109331Z","last_seen":"2026-07-20T17:45:42.357505Z","times_seen":3047,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":77,"connect":8,"send":0,"wait":15,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"com-qr.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}