{"report_id":"cbc851db-f0c4-41b3-aa98-3b487a1e74c1","version":0,"status":"done","tags":[],"date":"2026-07-14T13:56:52Z","url":{"schema":"http","addr":"myinvites.cfd","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"172.67.180.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"myinvites.cfd/","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"title":"Verifying browser...","dom":{"size":2898,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2896), with no line terminators","md5":"393aa9d770c6ee89410a71cf89a19aff","sha1":"e0ee319ae8a4aa14fce55d1f5142a4de02d49daa","sha256":"ec3311c87982f34480046fc761ab0652b70d254c7786cd256f71c948bb9f871c","sha512":"5f6482d35626966e5241232cbbef35deadde60285dfc10665a4a7ae9dd6c94bef8dd5b2b62b6e13394ed9408d7f9670569e0b65941f86f1e5961886d371be8fd","ssdeep":"","tlshash":"285188237b481c3cb15bb571b96be3482e7a08159447546c3dac2af4c2de74982f678e","dom_hash":"domhashce3c55281683b7494e6b8bf9a6bc365e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"myinvites.cfd","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"172.67.180.240","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T13:56:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"myinvites.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"myinvites.cfd","ip":{"addr":"104.21.18.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-13T21:07:38.246503Z","last_seen":"2026-07-13T21:07:38.246503Z","alert_count":3,"request_count":3,"received_data":8080,"sent_data":1487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"myinvites.cfd/","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"104.21.18.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b6118fb4552674cea2f250240a0078b","sha1":"dfecc3432bbd6b92890b6f4de8fd54da7383a15e","sha256":"b80f07d9c62f72a1478efda229ff229dee66d52b35f01d0a2fba8ec6d709015a","sha512":"3b4af0912ea752f813e12034c499b62388f07d2f29d9ca48c7378069bee46bb62aa31feef71f3acf365e077d30b2ea74c75a36ddf79b69a91f3ccdd152e5a60e","ssdeep":"","tlshash":"a5110d67b64a3c38629b7162ad6fe3006d37005164477454186d4ef81abda89c2ebb8b","size":870,"data":"","first_seen":"2026-06-30T14:31:39.141149Z","last_seen":"2026-07-14T13:56:52.716398Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"myinvites.cfd/","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"104.21.18.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T13:56:26.241Z","timestamp":1784037386241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myinvites.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:10:15 GMT","end":"Thu, 08 Oct 2026 08:07:30 GMT"},"fingerprint":{"sha1":"4C:6B:54:B5:3F:5D:64:C8:DE:B0:67:D7:39:6B:F6:80:77:17:DC:BE","sha256":"07:D3:27:2B:F6:E1:8F:8E:61:CE:E1:2E:99:5D:6F:B5:82:47:A8:03:9C:16:7F:C4:F3:2B:46:6E:4B:DE:78:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myinvites.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 13:56:26 GMT\r\nserver: cloudflare\r\nx-cloak-decision: slow_page\r\ncache-control: no-store, no-cache, must-revalidate\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqfJqwypost5ludXY0H4%2Bu5Q8xeLzc9N7cgghIhNQC0h1OhsLAgj0wHYEjTa9GVOou2Go9D6CrXWw4a6%2FiStHJt%2BfaYJxW7a9XM%2BF2jpLk%2FEJXH5xZzccvs2P2vlw7Ye\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1b107e04ca256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2890,"size_decoded":2040,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2888), with no line terminators","md5":"d69d1b3ea498238bea709f9ca559644f","sha1":"f9bedea5d06f483e2c4109dbfb2452e5e7ac1ee9","sha256":"fc123389c162101b38d9d76f314f539f062ec153e8311da6534e7c853485a464","sha512":"8025ab739908f0c1e1bf4918f6298fced8547bfb3883228306371ddbe3f1f15038f75c6fde409b163f15336d0e0d1d373013646b8563a5105b00258e57739617","ssdeep":"","tlshash":"065177237b482c3cb15bb570b96be3482e7a0415544254a83dac2af8c2de74982f678e","first_seen":"2026-06-29T07:20:42.227109Z","last_seen":"2026-07-14T13:56:52.714163Z","times_seen":18,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":6,"connect":17,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"myinvites.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myinvites.cfd/favicon.ico","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"104.21.18.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myinvites.cfd/","date":"2026-07-14T13:56:26.597Z","timestamp":1784037386597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myinvites.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:10:15 GMT","end":"Thu, 08 Oct 2026 08:07:30 GMT"},"fingerprint":{"sha1":"4C:6B:54:B5:3F:5D:64:C8:DE:B0:67:D7:39:6B:F6:80:77:17:DC:BE","sha256":"07:D3:27:2B:F6:E1:8F:8E:61:CE:E1:2E:99:5D:6F:B5:82:47:A8:03:9C:16:7F:C4:F3:2B:46:6E:4B:DE:78:E8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: myinvites.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myinvites.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Tue, 14 Jul 2026 13:56:26 GMT\r\nserver: cloudflare\r\nx-cloak-decision: static_bypass\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nlocation: /blocked.html\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p80tE6EjG1nhs8SNvyo5fJk9AZByBXDXd3mwjzwtheQNf0E6Gssui6Fa36uq6nG7mf98kZxjqXzGbXEV8u4jvvKB7U%2BffSemZpmaJ8F4qV16DAGhEDXeB0bkeqRp9o2Z\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\ncf-ray: a1b107e25cdd56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-16T20:40:23.423558Z","times_seen":17297509,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"myinvites.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myinvites.cfd/blocked.html","fqdn":"myinvites.cfd","domain":"myinvites.cfd","tld":"cfd"},"ip":{"addr":"104.21.18.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myinvites.cfd/","date":"2026-07-14T13:56:26.708Z","timestamp":1784037386708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myinvites.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:10:15 GMT","end":"Thu, 08 Oct 2026 08:07:30 GMT"},"fingerprint":{"sha1":"4C:6B:54:B5:3F:5D:64:C8:DE:B0:67:D7:39:6B:F6:80:77:17:DC:BE","sha256":"07:D3:27:2B:F6:E1:8F:8E:61:CE:E1:2E:99:5D:6F:B5:82:47:A8:03:9C:16:7F:C4:F3:2B:46:6E:4B:DE:78:E8"}}},"request":{"raw":"GET /blocked.html HTTP/1.1\r\nHost: myinvites.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://myinvites.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 13:56:26 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nlast-modified: Tue, 14 Jul 2026 13:50:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FgGOpRNTwi5iO2nizIdVlV%2B7GNk3MUA3hJRURGWgAA7p8QgdMFOmTewVfYFYraw%2FTYcvv7XJX7Lq2qBDGhCjQVY4y1XNdVhj5rFVJJD5oRQQ%2BD5xORbJa015JRo5zKU\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1b107e30cf556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3127,"size_decoded":2087,"mime_type":"text/html","magic":"PHP script, Unicode text, UTF-8 text","md5":"6df22b06659179140db7ebfc6ed74532","sha1":"e51551d91fffd40dee6f078e9ebaef5340e51a26","sha256":"1de6ad6009292a46be68282bb499df13f25e5f16c32aa378fc4d4fb9fc071406","sha512":"ab32a4c185afb582dd0b2f6c1540bb6212878ea32503e4cde3979ca7e5ce278f1b88200c005b724f885facd65425dca4b07e412bf6c096c541adb9d003a6c78b","ssdeep":"","tlshash":"c8510e6e5ae300467517a5682ff773093265d407864bcc793fcc6298cfc91a9aae378c","first_seen":"2026-06-15T16:26:39.302893Z","last_seen":"2026-07-14T13:56:52.715471Z","times_seen":36,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"myinvites.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}