Owned synthetic Cloudflare bug-bounty fixture