{"report_id":"cb5c203e-7d24-48f2-bc26-f399e7b61eef","version":0,"status":"done","tags":[],"date":"2026-06-18T23:42:57Z","url":{"schema":"http","addr":"pub-3201b0059e074b9486139d100a5af429.r2.dev/","fqdn":"pub-3201b0059e074b9486139d100a5af429.r2.dev","domain":"pub-3201b0059e074b9486139d100a5af429.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-3201b0059e074b9486139d100a5af429.r2.dev/","fqdn":"pub-3201b0059e074b9486139d100a5af429.r2.dev","domain":"pub-3201b0059e074b9486139d100a5af429.r2.dev","tld":"r2.dev"},"title":"Not Found","dom":{"size":23230,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (638)","md5":"c46e93190fd2574c48e4d0396d1a0823","sha1":"0dfc26d18aed78a3c4b86f076a6e29adfcd95f5c","sha256":"4307cd1238eee2fe2870a6a9a9792af068e6e5c5b68b0bb74da2a51b58f64372","sha512":"658132ddeeec4c2357cf5925817e0fd401e17126f6d263866c6b3756cbede8a639bef13871fa2bffbdaf99374299b19ec2a9d0384e696f4bb6e46ac6f5fca767","ssdeep":"384:FC2wlBr0sJQFCeSQh0AMcuUlAY05niKMgovCjQQo2NJXYNRB8:Ffnj0AVJ83MJRB8","tlshash":"74a2a2dd23b428e4b68543d9efba117d351ba0fb92404a19f61c0a286f405eccc7f9d9","dom_hash":"domhash68a76b73e1d51e0e62dca84a00f08c2c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pub-3201b0059e074b9486139d100a5af429.r2.dev/","fqdn":"pub-3201b0059e074b9486139d100a5af429.r2.dev","domain":"pub-3201b0059e074b9486139d100a5af429.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T23:42:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-18","alert":"Phishing Block","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.cloudflare.com","ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":26817,"first_seen":"2012-05-22T13:19:15Z","last_seen":"2026-06-16T05:56:23.106999Z","alert_count":0,"request_count":1,"received_data":4848,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pub-3201b0059e074b9486139d100a5af429.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2024-09-18T19:53:21Z","last_seen":"2026-06-16T09:31:10.083828Z","alert_count":4,"request_count":1,"received_data":27335,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.cloudflare.com/favicon.ico","fqdn":"www.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.123.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-3201b0059e074b9486139d100a5af429.r2.dev/","date":"2026-06-18T23:42:27.051Z","timestamp":1781826147051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 16:54:23 GMT","end":"Wed, 05 Aug 2026 17:54:15 GMT"},"fingerprint":{"sha1":"9B:4D:64:43:0F:53:8F:4D:2F:41:15:64:AE:1D:50:B9:6C:F4:BC:40","sha256":"8A:3D:B2:9E:34:D4:4E:A1:10:47:17:BD:88:A0:A8:6D:E2:84:A4:EF:8D:F5:64:53:86:65:48:7B:A0:A8:1B:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://pub-3201b0059e074b9486139d100a5af429.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 18 Jun 2026 23:42:27 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlink: \u003c/.well-known/agents.json\u003e; rel=\"api-catalog\", \u003c/.well-known/webmcp.json\u003e; rel=\"service-desc\", \u003c/openapi.json\u003e; rel=\"service-desc\", \u003c/llms.txt\u003e; rel=\"service-doc\", \u003c/sitemap.xml\u003e; rel=\"sitemap\", \u003c/fonts/Kunst%20Grotesk%20Regular.woff2\u003e; rel=preload; as=font; type=\"font/woff2\"; crossorigin, \u003c/fonts/Kunst%20Grotesk%20Medium.woff2\u003e; rel=preload; as=font; type=\"font/woff2\"; crossorigin, \u003chttps://ot.www.cloudflare.com\u003e; rel=preconnect; crossorigin, \u003chttps://imagedelivery.net\u003e; rel=preconnect; crossorigin\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-placement: local-OSL\r\nx-served-by: marketing-site\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com wss://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https:; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=xCnWlA_shcNq13Y2SDjinOuoAuUxzdxEuF_TTTUK4F0-1781826147.090404-1.0.1.1-b5eircmPi64rtYXLa9s.UJ_nzhzZfAs.VcdJ7pCB_1X3zSlMbyYaucHNW_P4NgcXCHW6HEKYOyTGBegutE09Tb39.taMiaX2_sAcOarXULo0zRPpja9l3KBZJ0uYsZBQjaJ30vpaBBumxYwSywbnaw; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Fri, 19 Jun 2026 00:12:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fTKGDdgK2mLeXOUsjcBvEN%2BHL7xe6J4vNnTjRJ6Yy1H6quPNiPzdPCAwlgyWJZs1ZfJ8V%2FjMnCU7q6MtWQmpAx0kT7oi2ueVT7LNzZorP6B9W5xmmHtPEU%2BzNmyP5WImLOy4xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d8b839e4b38223847e40cfad151520d4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0de268b4994723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908,"size_decoded":4852,"mime_type":"image/png","magic":"PNG image data, 99 x 96, 8-bit colormap, non-interlaced","md5":"f4d4f7e79fd34e08e729580664e75720","sha1":"f11081ef88c0de4ed6b5cc52e54ca12ac6eb1ad9","sha256":"5414bc6e4b3f6e10f99b5d37abf4420da4dcaece66f8f2c08e090e87267adbc5","sha512":"e4be9eee8a947f6cf111bfaa0e60a901a9e2469632b030faa4bbbac835f0cc5de133f934d954335cb9c9919c6bda30c7bd6e2df5532d840b34a4be597bd69145","ssdeep":"","tlshash":"0511b73a70aefde52bef791a56e32e8a6d1b003454840330e3425736c1468594299362","first_seen":"2025-10-16T21:46:37.126967Z","last_seen":"2026-07-13T09:12:59.385363Z","times_seen":11162,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":14,"connect":23,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-3201b0059e074b9486139d100a5af429.r2.dev/","fqdn":"pub-3201b0059e074b9486139d100a5af429.r2.dev","domain":"pub-3201b0059e074b9486139d100a5af429.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T23:42:25.632Z","timestamp":1781826145632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pub-3201b0059e074b9486139d100a5af429.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 18 Jun 2026 23:42:26 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCF-RAY: a0de268259da723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":27335,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"0822277b80f7c5cead2cc20ac41d25f6","sha1":"5713900dd2d72b5ea233146d40e6b090c38d7614","sha256":"62c1c0b235e26952857139537b65f8272026cd1c385c1bf6dba20481ee8a6619","sha512":"bb324cc33a57ee9422b878dffafff60ecc656bd69588623d43d3a50eedb7bd5e92231582c175fb0337cc402e18304742634a403861aad9c03be877f4d5014860","ssdeep":"384:abamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:a03Mp5If8WOmgW3","tlshash":"02c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2026-06-16T15:01:29.618246Z","last_seen":"2026-07-13T08:26:43.885195Z","times_seen":937,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":799,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-18","alert":"Phishing Block","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"pub-3201b0059e074b9486139d100a5af429.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}