It's about people abusing the r2 dev hosting to launch phishing campagins
It's about people abusing the r2 dev hosting to launch phishing campagins
F
F?
FIf you feel that a site is engaging in illegal or inappropriate activities, you can submit an abuse report at https://abuse.cloudflare.com/. The Trust and Safety team will review the details and reply if appropriate. You can also report the site to your relevant local authorities. Reports cannot be filed via Discord or with individual employees or Champs.
FDo u not read
HWhat was the question?
FSo in this specific case an abuse report wont do anything, you can not flag a site which uses r2.dev to host because it also hosts legit projects and sites. Each time their site gets reported, they just change the subdomain.
FMeaning it's kind of a bulletproof phishing host
IPlease keep this civil.
HWell yeah, but they can also flag the account itself. And if they bypass that, there isn’t much Cloudflare can do either
HOther than accept reports as they come
CHi, I would like to ask if your S2 can have custom domains?
C
Cmy account custom domain will directly cause an error
CI don't know if I can get a solution here
RCf can try and ban their IP/credit card but even then it's a whack a mole with nefarious actors / phishers
Ttoday I created my first R2 bucket and tried to give it a "custom domain", but if I give it any subdomain in my zone, it returns "It looks like we're having some internal issues" like the above screenshot (so I guess it's not just me, good to know)
Tcuriously, if I type in my apex domain itself, it successfully shows the preview of the DNS records it would create, but that's not what I want so I back out of that — with a subdomain it never reaches the DNS records preview
T@stephenpowerz That gave me a hunch, and I found a workaround:
- The apex domain DNS preview I mentioned above shows the "existing record" and "new record".
- The JS exception complains something is null.
- Maybe the frontend is trying to display an "existing record" when none exists?
Workaround: - I created a dummy record for (say, an record for ).
- Now R2's Custom Domain doesn't fail, shows me my dummy record, and lets me replace it with the special R2 record successfully.
CThanks for reporting, this issue is known and they're working on it
FDoes R2's custom domain only work with public consumption? Is it not possible to upload items using the subdomains? I currently use ...r2.cloudflarestorage...
HThat is correct. Custom domains are only for retrieving objects, not for listing/uploading
Ccc: @stephenpowerz
should be all fixed now
should be all fixed now
Tthanks! confirmed fixed on my end
ESorry about that and thank you for reporting!
SThanks for the response! I tried rclone too, and so far for me I get errors there too, including: sslv3 alert handshake failure
curl: (35) LibreSSL/3.3.6: error:1404B410:SSL routines:ST_CONNECT:sslv3 alert handshake failure
tls: handshake failure
curl: (35) LibreSSL/3.3.6: error:1404B410:SSL routines:ST_CONNECT:sslv3 alert handshake failure
tls: handshake failure
S(Have you gotten rclone to work on Mac with R2?)
SNo, it's roughly the latest OS version, certainly the latest major release (on a M2 Max studio, new in the last 12 months, and I usually update to the latest non-beta version shortly after release). I've tried forcing different TLS version in case there is some version issue, but so far that hasn't worked...
S@Erisa | Support Engineer, sorry for the ping - do you have access to the products of customers? i added a custom domain to a r2 bucket, but it just won't work. the weird thing is that it only doesn't work with a specific domain i have with cloudflare - a subdomain of another domain i have works just fine...? i honestly don't know what's the reason. is there any way you could help me with this?
Swhat the f is going on with the dns records?
Syeah, well hopefully the issue disappears by itself
Vhow would i move buckets from google cloud into r2?
Vi cant find the super slurper feature
KRclone is a great option. It’s very powerful. If you can, run it on a server instead of your local machine to have a better intermediate for transfers.
Dfound another benefit of public / r2 custom domains, favicons now work! 
KAlso robots.txt
S@Space - Ping in replies Thanks for the follow up! No, nothing unusual that I know of in terms of firewall. I am sometimes at a university, so I suppose I could try to transfer while there and see if there's any difference versus my home network... If you or anyone else has experience troubleshooting R2 access from Mac, I'm open to trying any ideas.
EHey, I'm trying to setup video streaming on r2, but I'm getting redirected to a video that says But I've seen online that R2 is supposed to allow for video streaming? Using the domain works fine, it's just using my custom domain that this happens.
KYou may have been flagged falsely in this case, this has happened before.
KYou're allowed to deliver video content if it is stored in R2, at least thats my understanding of the latest ToS construct.
EAlright. I've seen that other people have made posts on the community form and cloudflare staff have made tickets for them. Should I go that same route since I can't create proper tickets on the free tier?
KMaybe you just wait some time here until someone from the R2 team sees your message.
KOr upgrade your plan to have access to the ticket system and other nice features 
Ealright
Dah right, that too. I usually use since that is respected "more"
BDo you have a link to documentation?
Vmuch appreciated
BI see. Yes I know but I thought you could already have R2 events booked up to a queue