← ECOENGINEREPORT · 4ed37aab
Target

example.com

domain · scanned 8/2/2026, 10:53:10 AM
safe · 3

Passive scan of example.com completed with SAFE risk. Registered via RESERVED-Internet Assigned Numbers Authority (11311 days old). Served by Cloudflare. No affiliate tracking parameters observed. Hosted in Toronto, Canada on Cloudflare, Inc..

INDICATORS
  • info
    Established domain
    11311 days old
  • low
    Registrant identity redacted
  • low
    No DMARC-style TXT observed
  • info
    No HSTS header
  • info
    Hosting: Cloudflare
  • info
    Server: cloudflare
  • info
    First Wayback snapshot
    2002-01-20
  • info
    Network: AS13335 (CLOUDFLARENET - Cloudflare, Inc.)
  • info
    Abuse contact: abuse@cloudflare.com
  • info
    No robots.txt published
  • info
    Host origin: Toronto, Canada (Cloudflare, Inc.)
WHOIS / RDAP
Domain
example.com
Registrar
RESERVED-Internet Assigned Numbers Authority
Registrant
redacted
Created
1995-08-14T04:00:00Z
Age
11311 days
Expires
2026-08-13T04:00:00Z
Nameservers
elliott.ns.cloudflare.com, hera.ns.cloudflare.com
Status
client delete prohibited, client transfer prohibited, client update prohibited
ORIGIN (HOST GEOLOCATION)
IP
172.66.147.243
Country
Canada (CA)
Region
Ontario
City
Toronto
Org / ISP
Cloudflare, Inc.
ASN
AS13335
Timezone
America/Toronto
Source
ipapi.co
DNS MAP
A
172.66.147.243, 104.20.23.154
AAAA
2606:4700:10::6814:179a, 2606:4700:10::ac42:93f3
MX
0 .
NS
hera.ns.cloudflare.com., elliott.ns.cloudflare.com.
TXT
"v=spf1 -all"
"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9"
HTTP PROBE
Final URL
http://example.com/
Status
200
Server
cloudflare
Hosting
Cloudflare
Content-Type
text/html
REDIRECT CHAIN (1)
  1. 1.
    http://example.com/
    200
AFFILIATE TRACE (0)
No affiliate parameters detected.
EVIDENCE (11)

Each finding below cites the exact public OSINT input it was derived from. All inputs are unauthenticated, passively collected, and reproducible from the raw sources on the right.

  • infoEstablished domain11311 days old
    [RDAP]events.registration:1995-08-14T04:00:00Z
    [RDAP]derived.ageDays:11311
    [RDAP]source:rdap.org
  • lowRegistrant identity redacted
    [RDAP]entities[registrant]:absent / redacted
  • lowNo DMARC-style TXT observed
    [DNS]TXT:["\"v=spf1 -all\"","\"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9\""]
  • infoNo HSTS header
    [HTTP]headers.strict-transport-security:absent
  • infoHosting: Cloudflare
    [HTTP]headers.cf-ray|x-served-by|x-vercel-id|x-amz-cf-id:Cloudflare
  • infoServer: cloudflare
    [HTTP]headers.server:cloudflare
  • infoFirst Wayback snapshot2002-01-20
    no direct evidence recorded
  • infoNetwork: AS13335 (CLOUDFLARENET - Cloudflare, Inc.)
    no direct evidence recorded
  • infoAbuse contact: abuse@cloudflare.com
    no direct evidence recorded
  • infoNo robots.txt published
    no direct evidence recorded
  • infoHost origin: Toronto, Canada (Cloudflare, Inc.)
    [ipapi.co]ip:172.66.147.243
    [ipapi.co]country:Canada (CA)
    [ipapi.co]city/region:Toronto, Ontario
    [ipapi.co]org/ASN:Cloudflare, Inc. · AS13335
FRAUD LINEAGE (NETWORK RISK CORRELATION)
Correlating against the archive…
NETWORK MAP

Top correlated entities for this target — hover a node for detail.

Open full Network Map
Building preview…
AI PATTERN CLASSIFIER

Classifies the repeating scam pattern from this scan's evidence and prior archive examples. Advisory only — not an accusation.

No classification yet.
Analyst override
ANALYST FEEDBACK

One click records your verdict. Feedback is visible to every analyst on this report and feeds classifier tuning.

EXPORTABLE INTELLIGENCE PACKAGE

Bundles the full report, harvester findings, fraud lineage, classification, and the complete evidence archive into a portable JSON package plus the PDF dossier.

PLAIN ENGLISH (TRANSLATOR)

Every finding above in normal words — no jargon. Explanations are general guidance, not accusations.

  • Established domain
    The domain has existed for a long time. Long-lived domains are more often legitimate.
  • Registrant identity redacted
    The owner used a privacy service to hide their name. Common and legal, but means we can't verify who is behind the domain.
  • No DMARC-style TXT observed
    The domain has no policy telling receiving mail servers what to do with forged mail. Anti-spoofing protection is weak.
  • No HSTS header
    The site does not force browsers to always use HTTPS. Low risk, but a small security-hygiene gap.
  • Hosting: Cloudflare
    The company that runs the physical servers this site sits on.
  • Server: cloudflare
    The web-server software the site is running.
  • Host origin: Toronto, Canada (Cloudflare, Inc.)
    Where in the world the servers behind this target physically sit, based on the IP address.
Glossary
  • RDAP / WHOIS
    Public registry of who owns a domain and when it was registered.
  • DNS
    The internet's phonebook — maps a domain name to an IP address and other records.
  • A record
    The IPv4 address a domain points to.
  • MX record
    The mail server(s) that accept email for a domain.
  • NS record
    The servers responsible for answering DNS questions for this domain.
  • TXT / SPF / DMARC
    Text records used mostly to prove which servers may send mail as this domain.
  • Redirect chain
    The list of intermediate URLs a browser gets bounced through before reaching the final page.
  • Affiliate parameter
    A tag in a URL (like ?ref= or ?tag=) that credits someone with a commission.
  • HSTS
    A header that forces browsers to only ever talk to this site over HTTPS.
  • ASN / Org
    The network operator (ISP / cloud provider) that owns the IP address the site is hosted on.
EVIDENCE ARCHIVE (17 sources)
started 2026-08-02T10:53:02.634Z · completed 2026-08-02T10:53:10.747Z · UA EcoEngine/1.0 (+passive-osint)

Every outbound request performed by this scan is preserved verbatim below, with retrieval timestamp, request URL, and raw response. Re-issue any of these requests to reproduce the report.

  • dnsdns.AAAA2002026-08-02T10:53:02.639Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=AAAA
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bcaa94f9d-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "274",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": false,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Answer": [
        {
          "TTL": 247,
          "data": "2606:4700:10::6814:179a",
          "name": "example.com",
          "type": 28
        },
        {
          "TTL": 247,
          "data": "2606:4700:10::ac42:93f3",
          "name": "example.com",
          "type": 28
        }
      ],
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 28
        }
      ]
    }
  • dnsdns.NS2002026-08-02T10:53:02.645Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=NS
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bcbeb5897-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "278",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": false,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Answer": [
        {
          "TTL": 79263,
          "data": "hera.ns.cloudflare.com.",
          "name": "example.com",
          "type": 2
        },
        {
          "TTL": 79263,
          "data": "elliott.ns.cloudflare.com.",
          "name": "example.com",
          "type": 2
        }
      ],
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 2
        }
      ]
    }
  • dnsdns.TXT2002026-08-02T10:53:02.650Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=TXT
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bb9aeee38-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "278",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": true,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Answer": [
        {
          "TTL": 145,
          "data": "\"v=spf1 -all\"",
          "name": "example.com",
          "type": 16
        },
        {
          "TTL": 145,
          "data": "\"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9\"",
          "name": "example.com",
          "type": 16
        }
      ],
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 16
        }
      ]
    }
  • dnsdns.A2002026-08-02T10:53:02.637Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=A
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bdc4d0e90-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "252",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": false,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Answer": [
        {
          "TTL": 219,
          "data": "172.66.147.243",
          "name": "example.com",
          "type": 1
        },
        {
          "TTL": 219,
          "data": "104.20.23.154",
          "name": "example.com",
          "type": 1
        }
      ],
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 1
        }
      ]
    }
  • dnsdns.MX2002026-08-02T10:53:02.643Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=MX
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bdda5b987-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "177",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": true,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Answer": [
        {
          "TTL": 300,
          "data": "0 .",
          "name": "example.com",
          "type": 15
        }
      ],
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 15
        }
      ]
    }
  • dnsdns.CNAME2002026-08-02T10:53:02.650Z
    GET https://cloudflare-dns.com/dns-query?name=example.com&type=CNAME
    request headers
    {
      "accept": "application/dns-json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895bdd35312a-AMS",
      "server": "cloudflare",
      "alt-svc": "h3=\":443\"; ma=86400",
      "connection": "keep-alive",
      "content-type": "application/dns-json",
      "content-length": "256",
      "x-content-type-options": "nosniff",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "AD": true,
      "CD": false,
      "RA": true,
      "RD": true,
      "TC": false,
      "Status": 0,
      "Question": [
        {
          "name": "example.com",
          "type": 5
        }
      ],
      "Authority": [
        {
          "TTL": 1800,
          "data": "elliott.ns.cloudflare.com. dns.cloudflare.com. 2410849323 10000 2400 604800 1800",
          "name": "example.com",
          "type": 6
        }
      ]
    }
  • rdaprdap2002026-08-02T10:53:02.635Z
    GET https://rdap.org/domain/example.com
    request headers
    {
      "accept": "application/rdap+json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "content-type": "application/rdap+json",
      "content-length": "2355",
      "strict-transport-security": "max-age=15768000; includeSubDomains; preload",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "links": [
        {
          "rel": "self",
          "href": "https://rdap.verisign.com/com/v1/domain/EXAMPLE.COM",
          "type": "application/rdap+json",
          "value": "https://rdap.verisign.com/com/v1/domain/EXAMPLE.COM"
        }
      ],
      "events": [
        {
          "eventDate": "1995-08-14T04:00:00Z",
          "eventAction": "registration"
        },
        {
          "eventDate": "2026-08-13T04:00:00Z",
          "eventAction": "expiration"
        },
        {
          "eventDate": "2026-01-16T18:26:50Z",
          "eventAction": "last changed"
        },
        {
          "eventDate": "2026-08-02T10:52:50Z",
          "eventAction": "last update of RDAP database"
        }
      ],
      "handle": "2336799_DOMAIN_COM-VRSN",
      "status": [
        "client delete prohibited",
        "client transfer prohibited",
        "client update prohibited"
      ],
      "ldhName": "EXAMPLE.COM",
      "notices": [
        {
          "links": [
            {
              "rel": "terms-of-service",
              "href": "https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml",
              "type": "text/html",
              "value": "https://rdap.verisign.com/com/v1/domain/example.com"
            }
          ],
          "title": "Terms of Service",
          "description": [
            "Service subject to Terms of Use."
          ]
        },
        {
          "links": [
            {
              "href": "https://icann.org/epp",
              "type": "text/html"
            }
          ],
          "title": "Status Codes",
          "description": [
            "For more information on domain status codes, please visit https://icann.org/epp"
          ]
        },
        {
          "links": [
            {
              "rel": "help",
              "href": "https://icann.org/wicf",
              "type": "text/html",
              "value": "https://rdap.verisign.com/com/v1/domain/example.com"
            }
          ],
          "title": "RDDS Inaccuracy Complaint Form",
          "description": [
            "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
          ]
        }
      ],
      "entities": [
        {
          "roles": [
            "registrar"
          ],
          "handle": "376",
          "entities": [
            {
              "roles": [
                "abuse"
              ],
              "vcardArray": [
                "vcard",
                [
                  [
                    "version",
                    {},
                    "text",
                    "4.0"
                  ],
                  [
                    "fn",
                    {},
                    "text",
                    ""
                  ],
                  [
                    "tel",
                    {
                      "type": "voice"
                    },
                    "uri",
                    ""
                  ],
                  [
                    "email",
                    {},
                    "text",
                    ""
                  ]
                ]
              ],
              "objectClassName": "entity"
            }
          ],
          "publicIds": [
            {
              "type": "IANA Registrar ID",
              "identifier": "376"
            }
          ],
          "vcardArray": [
            "vcard",
            [
              [
                "version",
                {},
                "text",
                "4.0"
              ],
              [
                "fn",
                {},
                "text",
                "RESERVED-Internet Assigned Numbers Authority"
              ]
            ]
          ],
          "objectClassName": "entity"
        }
      ],
      "secureDNS": {
        "dsData": [
          {
            "digest": "C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A",
            "keyTag": 2371,
            "algorithm": 13,
            "digestType": 2
          }
        ],
        "delegationSigned": true
      },
      "nameservers": [
        {
          "ldhName": "ELLIOTT.NS.CLOUDFLARE.COM",
          "objectClassName": "nameserver"
        },
        {
          "ldhName": "HERA.NS.CLOUDFLARE.COM",
          "objectClassName": "nameserver"
        }
      ],
      "objectClassName": "domain",
      "rdapConformance": [
        "rdap_level_0",
        "icann_rdap_technical_implementation_guide_1",
        "icann_rdap_response_profile_1"
      ]
    }
  • httphttp.hop.02002026-08-02T10:53:02.654Z
    GET http://example.com/
    request headers
    {
      "accept": "text/html,*/*",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "age": "1749",
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "allow": "GET, HEAD",
      "cf-ray": "a24c895c1e2606d2-AMS",
      "server": "cloudflare",
      "connection": "keep-alive",
      "content-type": "text/html",
      "last-modified": "Sat, 01 Aug 2026 09:37:44 GMT",
      "cf-cache-status": "HIT",
      "content-encoding": "gzip",
      "transfer-encoding": "chunked"
    }
  • affiliateaffiliate.example.com/2026-08-02T10:53:02.744Z
    GET http://example.com/
    raw response (parsed)
    {
      "host": "example.com",
      "path": "/",
      "params": {}
    }
  • httprobots.txt4042026-08-02T10:53:02.751Z
    GET http://example.com/robots.txt
    request headers
    {
      "accept": "text/plain",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "age": "11270",
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "cf-ray": "a24c895c4883fb93-AMS",
      "server": "cloudflare",
      "connection": "keep-alive",
      "content-type": "text/html",
      "cf-cache-status": "HIT",
      "content-encoding": "gzip",
      "transfer-encoding": "chunked"
    }
    raw response (text)
    <!doctype html><html lang="en"><head><title>Example Domain</title><link rel="icon" href="data:,"><meta name="viewport" content="width=device-width, initial-scale=1"><style>body{background:#eee;width:60vw;margin:15vh auto;font-family:system-ui,sans-serif}h1{font-size:1.5em}div{opacity:0.8}a:link,a:visited{color:#348}</style></head><body><div><h1>Example Domain</h1><p>This domain is for use in documentation examples without needing permission. Avoid use in operations.</p><p><a href="https://iana.org/domains/example">Learn more</a></p></div></body></html>
    
  • httpgeo.172.66.147.2432002026-08-02T10:53:02.744Z
    GET https://ipapi.co/172.66.147.243/json/
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "vary": "Host, origin",
      "allow": "GET, OPTIONS, HEAD, OPTIONS, POST",
      "cf-ray": "a24c895c58626568-AMS",
      "server": "cloudflare",
      "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCN5tgCkEx1g%2F3PqKqVbyoi5DAFgh7jvS8TvCKfHBLA%2B9p3ZlZwbiLOpzBaHYbSPH4mvXBURquDOg6fAYm%2BAEvt62H7xkyNwCkFeU4O1QbuiC7cJoESne41u\"}]}",
      "connection": "keep-alive",
      "content-type": "application/json",
      "cf-cache-status": "DYNAMIC",
      "referrer-policy": "same-origin",
      "x-frame-options": "DENY",
      "content-encoding": "br",
      "transfer-encoding": "chunked",
      "x-content-type-options": "nosniff",
      "cross-origin-opener-policy": "same-origin",
      "content-security-policy-report-only": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"
    }
    raw response (parsed)
    {
      "ip": "172.66.147.243",
      "asn": "AS13335",
      "org": "Cloudflare, Inc.",
      "city": "Toronto",
      "in_eu": false,
      "postal": "M5K",
      "region": "Ontario",
      "country": "CA",
      "network": "172.66.128.0/19",
      "version": "IPv4",
      "currency": "CAD",
      "latitude": 43.6469,
      "timezone": "America/Toronto",
      "languages": "en-CA,fr-CA,iu",
      "longitude": -79.3823,
      "utc_offset": "-0400",
      "country_tld": ".ca",
      "region_code": "ON",
      "country_area": 9984670,
      "country_code": "CA",
      "country_name": "Canada",
      "currency_name": "Dollar",
      "continent_code": "NA",
      "country_capital": "Ottawa",
      "country_code_iso3": "CAN",
      "country_population": 37058856,
      "country_calling_code": "+1"
    }
  • httparchive.latest2002026-08-02T10:53:02.747Z
    GET https://archive.org/wayback/available?url=example.com
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:03 GMT",
      "x-ip": "34.7.56.242",
      "x-na": "0",
      "x-rl": "0",
      "x-tr": "1184",
      "x-ts": "200",
      "x-nid": "INTERNET-ARCHIVE",
      "server": "nginx/1.31.3",
      "expires": "Sun, 02 Aug 2026 16:53:03 GMT",
      "connection": "keep-alive",
      "set-cookie": "wb-api-SERVER=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/",
      "x-location": "available",
      "content-type": "application/json",
      "x-app-server": "nomad-api6",
      "x-page-cache": "HIT",
      "cache-control": "max-age=21600",
      "server-timing": "TR;dur=0,Tw;dur=0,Tc;dur=0, HIT",
      "content-length": "199",
      "onion-location": "https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/wayback/available?url=example.com",
      "referrer-policy": "no-referrer-when-downgrade, no-referrer-when-downgrade",
      "memento-location": "http://web.archive.org/web/20260802030436/https://example.com/",
      "permissions-policy": "interest-cohort=()",
      "content-security-policy": "report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-c5214a29f8c926cc6ebee22bc1e2b998' https://archive.org/includes/ https://archive.org/includes/ https://archive.org/components/ https://archive.org/components/ https://archive.org/v/ https://archive.org/v/ https://archive.org/upload/app/ https://archive.org/offshoot_assets/ https://archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org",
      "strict-transport-security": "max-age=15724800",
      "access-control-allow-origin": "*",
      "access-control-allow-credentials": "true"
    }
    raw response (parsed)
    {
      "url": "example.com",
      "archived_snapshots": {
        "closest": {
          "url": "http://web.archive.org/web/20260802030436/https://example.com/",
          "status": "200",
          "available": true,
          "timestamp": "20260802030436"
        }
      }
    }
  • httparchive.first2002026-08-02T10:53:02.747Z
    GET https://archive.org/wayback/available?url=example.com&timestamp=1996
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:03 GMT",
      "x-ip": "34.7.56.242",
      "x-na": "0",
      "x-rl": "0",
      "x-tr": "275",
      "x-ts": "200",
      "x-nid": "INTERNET-ARCHIVE",
      "server": "nginx/1.31.3",
      "expires": "Sun, 02 Aug 2026 16:53:03 GMT",
      "connection": "keep-alive",
      "set-cookie": "wb-api-SERVER=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/",
      "x-location": "available",
      "content-type": "application/json",
      "x-app-server": "nomad-api6",
      "x-page-cache": "HIT",
      "cache-control": "max-age=21600",
      "server-timing": "TR;dur=0,Tw;dur=0,Tc;dur=0, HIT",
      "content-length": "222",
      "onion-location": "https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/wayback/available?url=example.com&timestamp=1996",
      "referrer-policy": "no-referrer-when-downgrade, no-referrer-when-downgrade",
      "memento-location": "http://web.archive.org/web/20020120142510/http://example.com:80/",
      "permissions-policy": "interest-cohort=()",
      "content-security-policy": "report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-5330b623f773e08cb3332fd5759c3461' https://archive.org/includes/ https://archive.org/includes/ https://archive.org/components/ https://archive.org/components/ https://archive.org/v/ https://archive.org/v/ https://archive.org/upload/app/ https://archive.org/offshoot_assets/ https://archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org",
      "strict-transport-security": "max-age=15724800",
      "access-control-allow-origin": "*",
      "access-control-allow-credentials": "true"
    }
    raw response (parsed)
    {
      "url": "example.com",
      "timestamp": "1996",
      "archived_snapshots": {
        "closest": {
          "url": "http://web.archive.org/web/20020120142510/http://example.com:80/",
          "status": "200",
          "available": true,
          "timestamp": "20020120142510"
        }
      }
    }
  • httpasn.network2002026-08-02T10:53:02.748Z
    GET https://stat.ripe.net/data/network-info/data.json?resource=172.66.147.243
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "vary": "Cookie",
      "server": "nginx",
      "connection": "keep-alive",
      "content-type": "application/json; charset=utf-8",
      "x-frame-options": "SAMEORIGIN",
      "content-encoding": "gzip",
      "x-xss-protection": "1; mode=block",
      "transfer-encoding": "chunked",
      "x-content-type-options": "nosniff",
      "strict-transport-security": "max-age=31536000; includeSubdomains",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "data": {
        "asns": [
          "13335"
        ],
        "prefix": "172.66.144.0/20"
      },
      "time": "2026-08-02T10:53:02.793849",
      "cached": false,
      "status": "ok",
      "version": "1.1",
      "messages": [],
      "pipeline": "1361814",
      "query_id": "20260802105302-58c02883-7b10-4acd-9d55-4f8a095aaf2c",
      "see_also": [],
      "server_id": "app199",
      "status_code": 200,
      "process_time": 16,
      "build_version": "v0.11.4-2026.07.30",
      "data_call_name": "network-info",
      "data_call_status": "supported"
    }
  • httpasn.prefix2002026-08-02T10:53:02.748Z
    GET https://stat.ripe.net/data/prefix-overview/data.json?resource=172.66.147.243
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "vary": "Cookie",
      "server": "nginx",
      "connection": "keep-alive",
      "content-type": "application/json; charset=utf-8",
      "x-frame-options": "SAMEORIGIN",
      "content-encoding": "gzip",
      "x-xss-protection": "1; mode=block",
      "transfer-encoding": "chunked",
      "x-content-type-options": "nosniff",
      "strict-transport-security": "max-age=31536000; includeSubdomains",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "data": {
        "asns": [
          {
            "asn": 13335,
            "holder": "CLOUDFLARENET - Cloudflare, Inc."
          }
        ],
        "type": "prefix",
        "block": {
          "desc": "Administered by ARIN",
          "name": "IANA IPv4 Address Space Registry",
          "resource": "172.0.0.0/8"
        },
        "resource": "172.66.144.0/20",
        "announced": true,
        "query_time": "2026-08-02T00:00:00",
        "is_less_specific": true,
        "num_filtered_out": 0,
        "related_prefixes": [],
        "actual_num_related": 0
      },
      "time": "2026-08-02T10:53:02.894210",
      "cached": false,
      "status": "ok",
      "version": "1.3",
      "messages": [
        [
          "warning",
          "Given resource is not announced but result has been aligned to first-level less-specific (172.66.144.0/20)."
        ]
      ],
      "pipeline": "1361814",
      "query_id": "20260802105302-d0a4d78f-7393-4eaf-a7c0-e6407ed3a1d6",
      "see_also": [],
      "server_id": "app180",
      "status_code": 200,
      "process_time": 116,
      "build_version": "v0.11.4-2026.07.30",
      "data_call_name": "prefix-overview",
      "data_call_status": "supported"
    }
  • httpasn.abuse2002026-08-02T10:53:02.748Z
    GET https://stat.ripe.net/data/abuse-contact-finder/data.json?resource=172.66.147.243
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    response headers
    {
      "date": "Sun, 02 Aug 2026 10:53:03 GMT",
      "vary": "Cookie",
      "server": "nginx",
      "connection": "keep-alive",
      "content-type": "application/json; charset=utf-8",
      "x-frame-options": "SAMEORIGIN",
      "content-encoding": "gzip",
      "x-xss-protection": "1; mode=block",
      "transfer-encoding": "chunked",
      "x-content-type-options": "nosniff",
      "strict-transport-security": "max-age=31536000; includeSubdomains",
      "access-control-allow-origin": "*"
    }
    raw response (parsed)
    {
      "data": {
        "parameters": {
          "cache": null,
          "resource": "172.66.147.243"
        },
        "latest_time": "2026-08-02T10:53:03",
        "earliest_time": "2026-08-02T10:53:03",
        "abuse_contacts": [
          "abuse@cloudflare.com"
        ],
        "authoritative_rir": "arin"
      },
      "time": "2026-08-02T10:53:03.651471",
      "cached": false,
      "status": "ok",
      "version": "2.1",
      "messages": [],
      "pipeline": "1361814",
      "query_id": "20260802105302-05bf2a7e-9c06-4593-8beb-d587650d2813",
      "see_also": [],
      "server_id": "app197",
      "status_code": 200,
      "process_time": 868,
      "build_version": "v0.11.4-2026.07.30",
      "data_call_name": "abuse-contact-finder",
      "data_call_status": "supported"
    }
  • httpcert.crtsherror2026-08-02T10:53:02.745Z
    GET https://crt.sh/?q=example.com&output=json
    request headers
    {
      "accept": "application/json",
      "user-agent": "EcoEngine/1.0 (+passive-osint)"
    }
    error: timeout
RAW REPORT JSON
{
  "id": "4ed37aab-1870-4e03-ac4a-c3cb699503a7",
  "target": "example.com",
  "target_type": "domain",
  "status": "completed",
  "risk_score": 3,
  "risk_level": "safe",
  "summary": "Passive scan of example.com completed with SAFE risk. Registered via RESERVED-Internet Assigned Numbers Authority (11311 days old). Served by Cloudflare. No affiliate tracking parameters observed. Hosted in Toronto, Canada on Cloudflare, Inc..",
  "whois": {
    "geo": {
      "ip": "172.66.147.243",
      "asn": "AS13335",
      "org": "Cloudflare, Inc.",
      "city": "Toronto",
      "region": "Ontario",
      "source": "ipapi.co",
      "country": "Canada",
      "latitude": 43.6469,
      "timezone": "America/Toronto",
      "longitude": -79.3823,
      "country_code": "CA"
    },
    "domain": "example.com",
    "source": "rdap.org",
    "status": [
      "client delete prohibited",
      "client transfer prohibited",
      "client update prohibited"
    ],
    "ageDays": 11311,
    "created": "1995-08-14T04:00:00Z",
    "expires": "2026-08-13T04:00:00Z",
    "passive": {
      "asn": {
        "ip": "172.66.147.243",
        "asn": "AS13335",
        "holder": "CLOUDFLARENET - Cloudflare, Inc.",
        "prefix": "172.66.144.0/20",
        "source": "stat.ripe.net",
        "abuse_contacts": [
          "abuse@cloudflare.com"
        ]
      },
      "cert": {
        "error": "timeout",
        "source": "crt.sh"
      },
      "robots": {
        "source": "robots.txt",
        "status": 404,
        "present": false,
        "allows_root": true
      },
      "archive": {
        "source": "web.archive.org",
        "snapshot_url": "http://web.archive.org/web/20260802030436/https://example.com/",
        "last_snapshot": "2026-08-02",
        "first_snapshot": "2002-01-20"
      }
    },
    "updated": "2026-01-16T18:26:50Z",
    "registrar": "RESERVED-Internet Assigned Numbers Authority",
    "nameservers": [
      "elliott.ns.cloudflare.com",
      "hera.ns.cloudflare.com"
    ]
  },
  "dns": {
    "a": [
      "172.66.147.243",
      "104.20.23.154"
    ],
    "mx": [
      "0 ."
    ],
    "ns": [
      "hera.ns.cloudflare.com.",
      "elliott.ns.cloudflare.com."
    ],
    "txt": [
      "\"v=spf1 -all\"",
      "\"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9\""
    ],
    "aaaa": [
      "2606:4700:10::6814:179a",
      "2606:4700:10::ac42:93f3"
    ],
    "cname": []
  },
  "http": {
    "server": "cloudflare",
    "status": 200,
    "headers": {
      "age": "1749",
      "date": "Sun, 02 Aug 2026 10:53:02 GMT",
      "allow": "GET, HEAD",
      "cf-ray": "a24c895c1e2606d2-AMS",
      "server": "cloudflare",
      "connection": "keep-alive",
      "content-type": "text/html",
      "last-modified": "Sat, 01 Aug 2026 09:37:44 GMT",
      "cf-cache-status": "HIT",
      "content-encoding": "gzip",
      "transfer-encoding": "chunked"
    },
    "hosting": "Cloudflare",
    "finalUrl": "http://example.com/",
    "redirects": [
      {
        "url": "http://example.com/",
        "status": 200
      }
    ]
  },
  "redirects": [
    {
      "url": "http://example.com/",
      "status": 200
    }
  ],
  "affiliates": [],
  "indicators": [
    {
      "id": "aged-domain",
      "label": "Established domain",
      "detail": "11311 days old",
      "severity": "info"
    },
    {
      "id": "registrant-private",
      "label": "Registrant identity redacted",
      "severity": "low"
    },
    {
      "id": "no-dmarc",
      "label": "No DMARC-style TXT observed",
      "severity": "low"
    },
    {
      "id": "no-hsts",
      "label": "No HSTS header",
      "severity": "info"
    },
    {
      "id": "hosting",
      "label": "Hosting: Cloudflare",
      "severity": "info"
    },
    {
      "id": "server",
      "label": "Server: cloudflare",
      "severity": "info"
    },
    {
      "id": "archive-first",
      "label": "First Wayback snapshot",
      "detail": "2002-01-20",
      "severity": "info"
    },
    {
      "id": "asn",
      "label": "Network: AS13335 (CLOUDFLARENET - Cloudflare, Inc.)",
      "severity": "info"
    },
    {
      "id": "abuse",
      "label": "Abuse contact: abuse@cloudflare.com",
      "severity": "info"
    },
    {
      "id": "robots-missing",
      "label": "No robots.txt published",
      "severity": "info"
    },
    {
      "id": "origin",
      "label": "Host origin: Toronto, Canada (Cloudflare, Inc.)",
      "severity": "info"
    }
  ],
  "error": null,
  "created_at": "2026-08-02T10:53:10.897266+00:00",
  "evidence": {
    "sources": [
      {
        "id": "dns.AAAA",
        "raw": {
          "AD": false,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Answer": [
            {
              "TTL": 247,
              "data": "2606:4700:10::6814:179a",
              "name": "example.com",
              "type": 28
            },
            {
              "TTL": 247,
              "data": "2606:4700:10::ac42:93f3",
              "name": "example.com",
              "type": 28
            }
          ],
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 28
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=AAAA",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.639Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bcaa94f9d-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "274",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "dns.NS",
        "raw": {
          "AD": false,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Answer": [
            {
              "TTL": 79263,
              "data": "hera.ns.cloudflare.com.",
              "name": "example.com",
              "type": 2
            },
            {
              "TTL": 79263,
              "data": "elliott.ns.cloudflare.com.",
              "name": "example.com",
              "type": 2
            }
          ],
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 2
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=NS",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.645Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bcbeb5897-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "278",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "dns.TXT",
        "raw": {
          "AD": true,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Answer": [
            {
              "TTL": 145,
              "data": "\"v=spf1 -all\"",
              "name": "example.com",
              "type": 16
            },
            {
              "TTL": 145,
              "data": "\"_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9\"",
              "name": "example.com",
              "type": 16
            }
          ],
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 16
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=TXT",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.650Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bb9aeee38-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "278",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "dns.A",
        "raw": {
          "AD": false,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Answer": [
            {
              "TTL": 219,
              "data": "172.66.147.243",
              "name": "example.com",
              "type": 1
            },
            {
              "TTL": 219,
              "data": "104.20.23.154",
              "name": "example.com",
              "type": 1
            }
          ],
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 1
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=A",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.637Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bdc4d0e90-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "252",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "dns.MX",
        "raw": {
          "AD": true,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Answer": [
            {
              "TTL": 300,
              "data": "0 .",
              "name": "example.com",
              "type": 15
            }
          ],
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 15
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=MX",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.643Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bdda5b987-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "177",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "dns.CNAME",
        "raw": {
          "AD": true,
          "CD": false,
          "RA": true,
          "RD": true,
          "TC": false,
          "Status": 0,
          "Question": [
            {
              "name": "example.com",
              "type": 5
            }
          ],
          "Authority": [
            {
              "TTL": 1800,
              "data": "elliott.ns.cloudflare.com. dns.cloudflare.com. 2410849323 10000 2400 604800 1800",
              "name": "example.com",
              "type": 6
            }
          ]
        },
        "url": "https://cloudflare-dns.com/dns-query?name=example.com&type=CNAME",
        "kind": "dns",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.650Z",
        "request_headers": {
          "accept": "application/dns-json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895bdd35312a-AMS",
          "server": "cloudflare",
          "alt-svc": "h3=\":443\"; ma=86400",
          "connection": "keep-alive",
          "content-type": "application/dns-json",
          "content-length": "256",
          "x-content-type-options": "nosniff",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "rdap",
        "raw": {
          "links": [
            {
              "rel": "self",
              "href": "https://rdap.verisign.com/com/v1/domain/EXAMPLE.COM",
              "type": "application/rdap+json",
              "value": "https://rdap.verisign.com/com/v1/domain/EXAMPLE.COM"
            }
          ],
          "events": [
            {
              "eventDate": "1995-08-14T04:00:00Z",
              "eventAction": "registration"
            },
            {
              "eventDate": "2026-08-13T04:00:00Z",
              "eventAction": "expiration"
            },
            {
              "eventDate": "2026-01-16T18:26:50Z",
              "eventAction": "last changed"
            },
            {
              "eventDate": "2026-08-02T10:52:50Z",
              "eventAction": "last update of RDAP database"
            }
          ],
          "handle": "2336799_DOMAIN_COM-VRSN",
          "status": [
            "client delete prohibited",
            "client transfer prohibited",
            "client update prohibited"
          ],
          "ldhName": "EXAMPLE.COM",
          "notices": [
            {
              "links": [
                {
                  "rel": "terms-of-service",
                  "href": "https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml",
                  "type": "text/html",
                  "value": "https://rdap.verisign.com/com/v1/domain/example.com"
                }
              ],
              "title": "Terms of Service",
              "description": [
                "Service subject to Terms of Use."
              ]
            },
            {
              "links": [
                {
                  "href": "https://icann.org/epp",
                  "type": "text/html"
                }
              ],
              "title": "Status Codes",
              "description": [
                "For more information on domain status codes, please visit https://icann.org/epp"
              ]
            },
            {
              "links": [
                {
                  "rel": "help",
                  "href": "https://icann.org/wicf",
                  "type": "text/html",
                  "value": "https://rdap.verisign.com/com/v1/domain/example.com"
                }
              ],
              "title": "RDDS Inaccuracy Complaint Form",
              "description": [
                "URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"
              ]
            }
          ],
          "entities": [
            {
              "roles": [
                "registrar"
              ],
              "handle": "376",
              "entities": [
                {
                  "roles": [
                    "abuse"
                  ],
                  "vcardArray": [
                    "vcard",
                    [
                      [
                        "version",
                        {},
                        "text",
                        "4.0"
                      ],
                      [
                        "fn",
                        {},
                        "text",
                        ""
                      ],
                      [
                        "tel",
                        {
                          "type": "voice"
                        },
                        "uri",
                        ""
                      ],
                      [
                        "email",
                        {},
                        "text",
                        ""
                      ]
                    ]
                  ],
                  "objectClassName": "entity"
                }
              ],
              "publicIds": [
                {
                  "type": "IANA Registrar ID",
                  "identifier": "376"
                }
              ],
              "vcardArray": [
                "vcard",
                [
                  [
                    "version",
                    {},
                    "text",
                    "4.0"
                  ],
                  [
                    "fn",
                    {},
                    "text",
                    "RESERVED-Internet Assigned Numbers Authority"
                  ]
                ]
              ],
              "objectClassName": "entity"
            }
          ],
          "secureDNS": {
            "dsData": [
              {
                "digest": "C988EC423E3880EB8DD8A46FE06CA230EE23F35B578D64E78B29C3E1C83D245A",
                "keyTag": 2371,
                "algorithm": 13,
                "digestType": 2
              }
            ],
            "delegationSigned": true
          },
          "nameservers": [
            {
              "ldhName": "ELLIOTT.NS.CLOUDFLARE.COM",
              "objectClassName": "nameserver"
            },
            {
              "ldhName": "HERA.NS.CLOUDFLARE.COM",
              "objectClassName": "nameserver"
            }
          ],
          "objectClassName": "domain",
          "rdapConformance": [
            "rdap_level_0",
            "icann_rdap_technical_implementation_guide_1",
            "icann_rdap_response_profile_1"
          ]
        },
        "url": "https://rdap.org/domain/example.com",
        "kind": "rdap",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.635Z",
        "request_headers": {
          "accept": "application/rdap+json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "content-type": "application/rdap+json",
          "content-length": "2355",
          "strict-transport-security": "max-age=15768000; includeSubDomains; preload",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "http.hop.0",
        "url": "http://example.com/",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.654Z",
        "request_headers": {
          "accept": "text/html,*/*",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "age": "1749",
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "allow": "GET, HEAD",
          "cf-ray": "a24c895c1e2606d2-AMS",
          "server": "cloudflare",
          "connection": "keep-alive",
          "content-type": "text/html",
          "last-modified": "Sat, 01 Aug 2026 09:37:44 GMT",
          "cf-cache-status": "HIT",
          "content-encoding": "gzip",
          "transfer-encoding": "chunked"
        }
      },
      {
        "id": "affiliate.example.com/",
        "raw": {
          "host": "example.com",
          "path": "/",
          "params": {}
        },
        "url": "http://example.com/",
        "kind": "affiliate",
        "method": "GET",
        "fetched_at": "2026-08-02T10:53:02.744Z"
      },
      {
        "id": "robots.txt",
        "url": "http://example.com/robots.txt",
        "kind": "http",
        "method": "GET",
        "status": 404,
        "raw_text": "<!doctype html><html lang=\"en\"><head><title>Example Domain</title><link rel=\"icon\" href=\"data:,\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><style>body{background:#eee;width:60vw;margin:15vh auto;font-family:system-ui,sans-serif}h1{font-size:1.5em}div{opacity:0.8}a:link,a:visited{color:#348}</style></head><body><div><h1>Example Domain</h1><p>This domain is for use in documentation examples without needing permission. Avoid use in operations.</p><p><a href=\"https://iana.org/domains/example\">Learn more</a></p></div></body></html>\n",
        "fetched_at": "2026-08-02T10:53:02.751Z",
        "request_headers": {
          "accept": "text/plain",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "age": "11270",
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "cf-ray": "a24c895c4883fb93-AMS",
          "server": "cloudflare",
          "connection": "keep-alive",
          "content-type": "text/html",
          "cf-cache-status": "HIT",
          "content-encoding": "gzip",
          "transfer-encoding": "chunked"
        }
      },
      {
        "id": "geo.172.66.147.243",
        "raw": {
          "ip": "172.66.147.243",
          "asn": "AS13335",
          "org": "Cloudflare, Inc.",
          "city": "Toronto",
          "in_eu": false,
          "postal": "M5K",
          "region": "Ontario",
          "country": "CA",
          "network": "172.66.128.0/19",
          "version": "IPv4",
          "currency": "CAD",
          "latitude": 43.6469,
          "timezone": "America/Toronto",
          "languages": "en-CA,fr-CA,iu",
          "longitude": -79.3823,
          "utc_offset": "-0400",
          "country_tld": ".ca",
          "region_code": "ON",
          "country_area": 9984670,
          "country_code": "CA",
          "country_name": "Canada",
          "currency_name": "Dollar",
          "continent_code": "NA",
          "country_capital": "Ottawa",
          "country_code_iso3": "CAN",
          "country_population": 37058856,
          "country_calling_code": "+1"
        },
        "url": "https://ipapi.co/172.66.147.243/json/",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.744Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "nel": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "vary": "Host, origin",
          "allow": "GET, OPTIONS, HEAD, OPTIONS, POST",
          "cf-ray": "a24c895c58626568-AMS",
          "server": "cloudflare",
          "report-to": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCN5tgCkEx1g%2F3PqKqVbyoi5DAFgh7jvS8TvCKfHBLA%2B9p3ZlZwbiLOpzBaHYbSPH4mvXBURquDOg6fAYm%2BAEvt62H7xkyNwCkFeU4O1QbuiC7cJoESne41u\"}]}",
          "connection": "keep-alive",
          "content-type": "application/json",
          "cf-cache-status": "DYNAMIC",
          "referrer-policy": "same-origin",
          "x-frame-options": "DENY",
          "content-encoding": "br",
          "transfer-encoding": "chunked",
          "x-content-type-options": "nosniff",
          "cross-origin-opener-policy": "same-origin",
          "content-security-policy-report-only": "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';"
        }
      },
      {
        "id": "archive.latest",
        "raw": {
          "url": "example.com",
          "archived_snapshots": {
            "closest": {
              "url": "http://web.archive.org/web/20260802030436/https://example.com/",
              "status": "200",
              "available": true,
              "timestamp": "20260802030436"
            }
          }
        },
        "url": "https://archive.org/wayback/available?url=example.com",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.747Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:03 GMT",
          "x-ip": "34.7.56.242",
          "x-na": "0",
          "x-rl": "0",
          "x-tr": "1184",
          "x-ts": "200",
          "x-nid": "INTERNET-ARCHIVE",
          "server": "nginx/1.31.3",
          "expires": "Sun, 02 Aug 2026 16:53:03 GMT",
          "connection": "keep-alive",
          "set-cookie": "wb-api-SERVER=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/",
          "x-location": "available",
          "content-type": "application/json",
          "x-app-server": "nomad-api6",
          "x-page-cache": "HIT",
          "cache-control": "max-age=21600",
          "server-timing": "TR;dur=0,Tw;dur=0,Tc;dur=0, HIT",
          "content-length": "199",
          "onion-location": "https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/wayback/available?url=example.com",
          "referrer-policy": "no-referrer-when-downgrade, no-referrer-when-downgrade",
          "memento-location": "http://web.archive.org/web/20260802030436/https://example.com/",
          "permissions-policy": "interest-cohort=()",
          "content-security-policy": "report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-c5214a29f8c926cc6ebee22bc1e2b998' https://archive.org/includes/ https://archive.org/includes/ https://archive.org/components/ https://archive.org/components/ https://archive.org/v/ https://archive.org/v/ https://archive.org/upload/app/ https://archive.org/offshoot_assets/ https://archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org",
          "strict-transport-security": "max-age=15724800",
          "access-control-allow-origin": "*",
          "access-control-allow-credentials": "true"
        }
      },
      {
        "id": "archive.first",
        "raw": {
          "url": "example.com",
          "timestamp": "1996",
          "archived_snapshots": {
            "closest": {
              "url": "http://web.archive.org/web/20020120142510/http://example.com:80/",
              "status": "200",
              "available": true,
              "timestamp": "20020120142510"
            }
          }
        },
        "url": "https://archive.org/wayback/available?url=example.com&timestamp=1996",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.747Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:03 GMT",
          "x-ip": "34.7.56.242",
          "x-na": "0",
          "x-rl": "0",
          "x-tr": "275",
          "x-ts": "200",
          "x-nid": "INTERNET-ARCHIVE",
          "server": "nginx/1.31.3",
          "expires": "Sun, 02 Aug 2026 16:53:03 GMT",
          "connection": "keep-alive",
          "set-cookie": "wb-api-SERVER=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/",
          "x-location": "available",
          "content-type": "application/json",
          "x-app-server": "nomad-api6",
          "x-page-cache": "HIT",
          "cache-control": "max-age=21600",
          "server-timing": "TR;dur=0,Tw;dur=0,Tc;dur=0, HIT",
          "content-length": "222",
          "onion-location": "https://archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion/wayback/available?url=example.com&timestamp=1996",
          "referrer-policy": "no-referrer-when-downgrade, no-referrer-when-downgrade",
          "memento-location": "http://web.archive.org/web/20020120142510/http://example.com:80/",
          "permissions-policy": "interest-cohort=()",
          "content-security-policy": "report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-5330b623f773e08cb3332fd5759c3461' https://archive.org/includes/ https://archive.org/includes/ https://archive.org/components/ https://archive.org/components/ https://archive.org/v/ https://archive.org/v/ https://archive.org/upload/app/ https://archive.org/offshoot_assets/ https://archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org",
          "strict-transport-security": "max-age=15724800",
          "access-control-allow-origin": "*",
          "access-control-allow-credentials": "true"
        }
      },
      {
        "id": "asn.network",
        "raw": {
          "data": {
            "asns": [
              "13335"
            ],
            "prefix": "172.66.144.0/20"
          },
          "time": "2026-08-02T10:53:02.793849",
          "cached": false,
          "status": "ok",
          "version": "1.1",
          "messages": [],
          "pipeline": "1361814",
          "query_id": "20260802105302-58c02883-7b10-4acd-9d55-4f8a095aaf2c",
          "see_also": [],
          "server_id": "app199",
          "status_code": 200,
          "process_time": 16,
          "build_version": "v0.11.4-2026.07.30",
          "data_call_name": "network-info",
          "data_call_status": "supported"
        },
        "url": "https://stat.ripe.net/data/network-info/data.json?resource=172.66.147.243",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.748Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "vary": "Cookie",
          "server": "nginx",
          "connection": "keep-alive",
          "content-type": "application/json; charset=utf-8",
          "x-frame-options": "SAMEORIGIN",
          "content-encoding": "gzip",
          "x-xss-protection": "1; mode=block",
          "transfer-encoding": "chunked",
          "x-content-type-options": "nosniff",
          "strict-transport-security": "max-age=31536000; includeSubdomains",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "asn.prefix",
        "raw": {
          "data": {
            "asns": [
              {
                "asn": 13335,
                "holder": "CLOUDFLARENET - Cloudflare, Inc."
              }
            ],
            "type": "prefix",
            "block": {
              "desc": "Administered by ARIN",
              "name": "IANA IPv4 Address Space Registry",
              "resource": "172.0.0.0/8"
            },
            "resource": "172.66.144.0/20",
            "announced": true,
            "query_time": "2026-08-02T00:00:00",
            "is_less_specific": true,
            "num_filtered_out": 0,
            "related_prefixes": [],
            "actual_num_related": 0
          },
          "time": "2026-08-02T10:53:02.894210",
          "cached": false,
          "status": "ok",
          "version": "1.3",
          "messages": [
            [
              "warning",
              "Given resource is not announced but result has been aligned to first-level less-specific (172.66.144.0/20)."
            ]
          ],
          "pipeline": "1361814",
          "query_id": "20260802105302-d0a4d78f-7393-4eaf-a7c0-e6407ed3a1d6",
          "see_also": [],
          "server_id": "app180",
          "status_code": 200,
          "process_time": 116,
          "build_version": "v0.11.4-2026.07.30",
          "data_call_name": "prefix-overview",
          "data_call_status": "supported"
        },
        "url": "https://stat.ripe.net/data/prefix-overview/data.json?resource=172.66.147.243",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.748Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:02 GMT",
          "vary": "Cookie",
          "server": "nginx",
          "connection": "keep-alive",
          "content-type": "application/json; charset=utf-8",
          "x-frame-options": "SAMEORIGIN",
          "content-encoding": "gzip",
          "x-xss-protection": "1; mode=block",
          "transfer-encoding": "chunked",
          "x-content-type-options": "nosniff",
          "strict-transport-security": "max-age=31536000; includeSubdomains",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "asn.abuse",
        "raw": {
          "data": {
            "parameters": {
              "cache": null,
              "resource": "172.66.147.243"
            },
            "latest_time": "2026-08-02T10:53:03",
            "earliest_time": "2026-08-02T10:53:03",
            "abuse_contacts": [
              "abuse@cloudflare.com"
            ],
            "authoritative_rir": "arin"
          },
          "time": "2026-08-02T10:53:03.651471",
          "cached": false,
          "status": "ok",
          "version": "2.1",
          "messages": [],
          "pipeline": "1361814",
          "query_id": "20260802105302-05bf2a7e-9c06-4593-8beb-d587650d2813",
          "see_also": [],
          "server_id": "app197",
          "status_code": 200,
          "process_time": 868,
          "build_version": "v0.11.4-2026.07.30",
          "data_call_name": "abuse-contact-finder",
          "data_call_status": "supported"
        },
        "url": "https://stat.ripe.net/data/abuse-contact-finder/data.json?resource=172.66.147.243",
        "kind": "http",
        "method": "GET",
        "status": 200,
        "fetched_at": "2026-08-02T10:53:02.748Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        },
        "response_headers": {
          "date": "Sun, 02 Aug 2026 10:53:03 GMT",
          "vary": "Cookie",
          "server": "nginx",
          "connection": "keep-alive",
          "content-type": "application/json; charset=utf-8",
          "x-frame-options": "SAMEORIGIN",
          "content-encoding": "gzip",
          "x-xss-protection": "1; mode=block",
          "transfer-encoding": "chunked",
          "x-content-type-options": "nosniff",
          "strict-transport-security": "max-age=31536000; includeSubdomains",
          "access-control-allow-origin": "*"
        }
      },
      {
        "id": "cert.crtsh",
        "url": "https://crt.sh/?q=example.com&output=json",
        "kind": "http",
        "error": "timeout",
        "method": "GET",
        "fetched_at": "2026-08-02T10:53:02.745Z",
        "request_headers": {
          "accept": "application/json",
          "user-agent": "EcoEngine/1.0 (+passive-osint)"
        }
      }
    ],
    "user_agent": "EcoEngine/1.0 (+passive-osint)",
    "scan_started_at": "2026-08-02T10:53:02.634Z",
    "scan_completed_at": "2026-08-02T10:53:10.747Z"
  },
  "kind": "domain",
  "candidates": null,
  "harvest": null,
  "fingerprints": null,
  "classification": null
}