{"report_id":"60a3d300-297f-4e07-89f1-551a35229a87","version":0,"status":"done","tags":[],"date":"2026-09-03T19:26:34Z","url":{"schema":"http","addr":"cassandrahunt.com/","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cassandrahunt.com/","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"title":"Life isn't about finding yourself. Life is about creating yourself. - George Bernard Shaw","dom":{"size":8965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b42d41a9f68da6b224d2c9650e6699f4","sha1":"0fc46275027cec05fcb701cf63ce3279900516fd","sha256":"5c9ed89b642bc6e7d85b6f1f2e1e82848158734e0bc772efbd8caac92078e550","sha512":"a00484490f4173bf84beaa71db143901ba928cb74126f23940fdb311d0e03bdb7f0c8ff101e663706372789a754f3a2d45cdf1ae41d04a505ee431245191a2cc","ssdeep":"192:j5Bf7NkK79+IwWpHBclactF4a5MoiABypBSVO+ww:fZ/8WpHFa57JBypBSVOE","tlshash":"1502c726d5d8115b028281e4b175be6a9ea38643d742cd40b5fc4edaafe5e9bcc031cc","dom_hash":"domhashf8d3c2169ad0e14d1b8f89af28028b66","first_seen":"2026-09-03T18:54:48.209801Z","last_seen":"2026-09-03T19:26:38.518119Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cassandrahunt.com/","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T19:26:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cassandrahunt.com","ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"domain_registered":"2013-11-23","domain_rank":0,"first_seen":"2026-06-21T12:45:55.629376Z","last_seen":"2026-09-03T18:54:45.89884Z","alert_count":50,"request_count":25,"received_data":41380743,"sent_data":12837,"comment":"","tags":null,"fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.6.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cassandrahunt.com/js/dropdown.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c74f5039e3fbeb9fce2ecd2f747ce136","sha1":"52ca9d09464288de0a67b5b7f459a0c0e02c888f","sha256":"020600735524c88163c5ebf431993a53270752117628875cef266a5c916939f3","sha512":"148070b54e3d12d74d4bc730c6336cca0fcfabb41a2fa9982b51516050696c3bdd05fa289c4308bd7aa60190ccab1aaa6f016e62e5006bc3ae3d3cccd4262fd0","ssdeep":"","tlshash":"dc0168ded60c036210f632f2519aaaaeb363c4328045da653e2d935849f4d7b68e08df","size":775,"data":"","first_seen":"2026-09-03T18:54:48.237697Z","last_seen":"2026-09-03T19:26:38.540122Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/js/jquery-3.1.1.min.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f02fff6f26630c9211f810e7792d2ac2","sha1":"472e99db849449fc41521a56d2ebebdebd8fb2d3","sha256":"c76c37095497b6694ec95d8b7149bda2025e9833a6fe9a90cfcb1b70b33941f4","sha512":"79990a6e78a33e569262dcc28f7ac359ca7cc8aee8c8f3dc4876422d2de17a374736ab81589ceb90a426bb6b33275603790ae37f9ecbfafb3afb2e3a76fa01ee","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDj:jxcq0hrLZwpsYbmzORDU8Cux","tlshash":"5b83d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86710,"data":"","first_seen":"2025-10-12T07:14:24.224741Z","last_seen":"2026-09-03T19:26:38.540869Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/js/slideshow.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aa47056bf701357b03e2e1b398ba7e1","sha1":"d6e4302396590c9d064248dfaa7de57fb46945f7","sha256":"c6a58920cb799548ce7e5c19fbcffa8e61233d7647f4f0e13f99d9f288470e4e","sha512":"6d9bdc001100c76c041a489161d13509a42c84f0c64144b5c17aae691d48dac377c199c0adb7767b27a8fbc13a071a0d7b9b7e37f1d0ec35cc76bc9bb5cdd4c7","ssdeep":"","tlshash":"98216509b4f22921dc723096376bb4182ebb61373505cb007a88e1906f5aba6d7c9bc4","size":1354,"data":"","first_seen":"2026-09-03T18:54:48.251118Z","last_seen":"2026-09-03T19:26:38.541521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cassandrahunt.com/css/style-slideshow.css","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.248Z","timestamp":1788463561248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/style-slideshow.css HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 2796\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 994\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Wed, 20 Mar 2019 22:26:20 GMT\r\netag: \"aec-5848e1c629b00\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2796,"size_decoded":3148,"mime_type":"text/css","magic":"ASCII text","md5":"741921ea54c2d59c8c51e7071e2868a1","sha1":"34d178666c82198984e2db017457cf1805f14ccb","sha256":"cc7d72f1651d43a4639781ccb193367739f4c02b9770146820ffec700dbaf77d","sha512":"8879f0799ca0d7662baeda95e6441029cc25991b4ea1a2e148b90dc30381d6a5b17965f290d4280370cbbb4f793d35ae1c049baac2123db8d28f0efb3871affa","ssdeep":"","tlshash":"bc51cbda4ae31301bd8ff1eaab52531a6338140ba59bcd1c37dea25c9f814ec5153f94","first_seen":"2026-09-03T18:54:48.239276Z","last_seen":"2026-09-03T19:26:38.519033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/images/slideshow/blog-brains.jpg","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.256Z","timestamp":1788463561256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /images/slideshow/blog-brains.jpg HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 40707\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 991\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Fri, 02 Nov 2018 05:22:31 GMT\r\netag: \"9f03-579a7b8d4b3c0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":40707,"size_decoded":41063,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1024x482, components 3","md5":"afd4da4c62212b8d94f45b38b6da53d2","sha1":"be74ce426eb2540ddeb3e72a5ea7511ca0ee1bec","sha256":"27fc1a5ee2ad72ca98ffedaf13257f08bd3960bb1898f49e6463bcec78a9bb0f","sha512":"bd35719359413b4f3b7fc17b263b4abd7fa3c5e11e2e724e0531c831a026f75370cced083f2f7e6eb0276a65b6c96d367ead740d345b5b30e05e6170a15e2edc","ssdeep":"768:vMKDhvYfFA8h45sv5SyoAXElfU+90bXdPUWldAk4ysidFb9:vMKdyFK5s5SyoA0fn90DdtqWhdFb9","tlshash":"bd03f235932ce5906c4abeb7f6a3b38ed0f0a133714a501598ffefb415834939aa4702","first_seen":"2026-09-03T18:54:48.217859Z","last_seen":"2026-09-03T19:26:38.520152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/email2.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.265Z","timestamp":1788463561265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/email2.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 379\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 987\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:56 GMT\r\netag: \"17b-55b37f76d0800\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":379,"size_decoded":731,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2c5bcfef923107297a977494fe2a8adf","sha1":"2105b8d5b02ecfeb8a7d11b49f1a3c6ff10069c5","sha256":"3a163d9ba7c7905a594144614b07df4706bdac136afa65a6cc9a50673f748b6b","sha512":"760f107283b0ab504641145ad3fbab3ad502e108076fce7af2d9f31a3d8aafad197bf058ca99820d4649851a24dbd86dbaa140c8ecb3fecf5b8d4701f7d27954","ssdeep":"","tlshash":"b1e0c0cd07803dbae26980b7d30115b8c13a09996740309da821fb3bb40148c6419d15","first_seen":"2026-09-03T18:54:48.242585Z","last_seen":"2026-09-03T19:26:38.520805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":580,"dns":0,"connect":0,"send":0,"wait":603,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/linkedin.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.269Z","timestamp":1788463561269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/linkedin.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 981\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 997\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Fri, 02 Nov 2018 05:21:37 GMT\r\netag: \"3d5-579a7b59cba40\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":981,"size_decoded":1333,"mime_type":"image/png","magic":"PNG image data, 83 x 84, 8-bit/color RGBA, non-interlaced","md5":"9ad9d2cd061b696539d9ae28ee2a1063","sha1":"e6384ee38284cab18e33f52e5ccfb02e044a104f","sha256":"dbad9a9fedab6b022e553162655163fcdf8ceab740f7fb71be0ae8a53e2072e7","sha512":"9d52fc4d4b95e30de1a631abfa78c140569c83927bc435cf19547d15306ca32bfe858bf14152964bbb5144c1d5054b37ba8bbf3f3fc92963e6c18f4ebca575aa","ssdeep":"","tlshash":"8b11a59da7da0c29935999f6324114a461b78e092cc10d0d00ab0034e82666338c3903","first_seen":"2026-09-03T18:54:48.259138Z","last_seen":"2026-09-03T19:26:38.522853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":450,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/facebook2.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.271Z","timestamp":1788463561271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/facebook2.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 322\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 996\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:56 GMT\r\netag: \"142-55b37f76d0800\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":674,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"08659ff2e71f0ff8e70cee8c2684a20b","sha1":"f72135dc18e25a87efa0494e1e1a404429e761ac","sha256":"a89d6a5c57e4bfdf3cbd35ef4f32c429acbc5f43e82d3b216294fd208f287768","sha512":"cabb77f2adad50b67fbb5b4b4a6b19d2a29fef545f8cb2aa45f24c8c36a30251b14d31aa2e7552d4c288735b0b59361bf062abc6fa084d5a612a3eefe97b0540","ssdeep":"","tlshash":"d7e0e7f757b12c7fc54440332f00c71c883ab41cbc4156008f4f713460815c9045b142","first_seen":"2026-09-03T18:54:48.234008Z","last_seen":"2026-09-03T19:26:38.524512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1586,"timings":{"blocked":1190,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/gear_sketch.jpg","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.900Z","timestamp":1788463561900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/gear_sketch.jpg HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 106786\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 995\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:56 GMT\r\netag: \"1a122-55b37f76d0800\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":106786,"size_decoded":107144,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 465x640, components 3","md5":"6f221fe571016d238423dcdca706516f","sha1":"e7734351d65b387f538e707a8371acad93f28ac5","sha256":"a970544e1abfcd62055b5547d0fbb563707f37807a6f6498ba462b896ca40257","sha512":"e88bd3b79dfa7e7c4eb7c61e258405c9159e962062da240202381cdfd3691964424d0747e64f5c8ca979a39492e903797ff6dd33d8c500423b1c2fdcb6b937b3","ssdeep":"1536:ncFpS4zYo/8X1fExGT+SeMPwpBohiuSQYMmUZfDqqo8TkIDHMLyglwAH8+B594L2:cPS4zF0WSCWUMmUdDqqv5Pg98+w2","tlshash":"70a312df39c99828e8bddc91b19deab074048f1061f859bd72772ef1e4da47e3a80145","first_seen":"2026-09-03T18:54:48.223222Z","last_seen":"2026-09-03T19:26:38.525307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":563,"dns":0,"connect":0,"send":0,"wait":396,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/orange_dot_10px.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.902Z","timestamp":1788463561902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/orange_dot_10px.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 355\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 992\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:57 GMT\r\netag: \"163-55b37f77c4a40\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":707,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced","md5":"657534fece696d3d403af94184826332","sha1":"fb68f021bfed70aedf68ac43d19d67700af675c6","sha256":"09a9fc7e47a574fc38c8a4f558c2e2c36e5368cf30027a3f2749684e05824971","sha512":"622567864e2a1c8a762191b8037d1d1976d734ce0f0875334eeb6c62f76b0c0fccf490fc9f5887a8195a6c70be63223dcdf3f707d23583f83fc0f09ca5287c19","ssdeep":"","tlshash":"17e0c0e75362093fd1450ead30390350e1326691ed30af980ce6881c199a2081d170be","first_seen":"2026-09-03T18:54:48.225695Z","last_seen":"2026-09-03T19:26:38.52612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":568,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/fonts/Fenix-Regular.ttf","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.959Z","timestamp":1788463561959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/fonts/Fenix-Regular.ttf HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/font-sfnt\r\ncontent-length: 45144\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 994\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Thu, 25 Apr 2019 00:12:14 GMT\r\netag: \"b058-5874fab8f1380\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":45144,"size_decoded":45511,"mime_type":"application/font-sfnt","magic":"TrueType Font data, digitally signed, 17 tables, 1st \"DSIG\", 32 names, Macintosh","md5":"11188e54ae9feb046acfa915bfe1203c","sha1":"6f26b0c7188ee55658aa4810d0f065174f2fd043","sha256":"5104f5f344f64b5532850b131d7b9e033c112fcfa97dfef00a64c0a40bdae911","sha512":"6c109247912f43d101307a9d6e7f4ae740b582296d84bd0398436cb5c8736d8ee15faee790c6e10f95483a05c2a4f5fdabf002ead37a6f11f90eec516107e924","ssdeep":"768:1HkA53z8SXmblCgkdwx0xBx3LEAE5f/Tzwjfonu4bUA7OeON:DbxgkdwyxBx3LEAE5frzwToxOV","tlshash":"90135b22b389c72fd9238b3b4e90e532e8d3f848bb5d1396f501576af88e9504c76b51","first_seen":"2026-09-03T18:54:48.23561Z","last_seen":"2026-09-03T19:26:38.527072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":395,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T19:25:54.600Z","timestamp":1788463554600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\ndate: Thu, 03 Sep 2026 19:26:00 GMT\r\nserver: Apache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":9124,"size_decoded":3597,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"636ab7e26ce5d72052fe6ad8c82d22f0","sha1":"8f2dcd2b04eca8592bb4fe6419ed6b25acdacdac","sha256":"e7fdfc94b1f3d75148aa6dbec75c98c1c88be4b847b401b481010e067341b940","sha512":"22f1c05c748ced215677a5016b172edc84d87c3001d0e7766b16d561fc13d6f11ba1c468293ac768d07e44842bf2e79aa2b6f05d4a4b65b781a54ea0d91b896d","ssdeep":"192:f5dfmFK79+msj614J7zRtF4a5Moi6BcxBEu5/tu:fOUMj61Fa57RBcxBEu51u","tlshash":"5e12a72795e8115b028382e5b171beaa9e638643d7428940b1fc4fda9fe5e9fcd031cc","first_seen":"2026-09-03T18:54:48.214209Z","last_seen":"2026-09-03T19:26:38.530067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6438,"timings":{"blocked":0,"dns":46,"connect":118,"send":0,"wait":187,"receive":0,"ssl":6087},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/images/photos/italy2014/monterosso_from_above.jpg","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.261Z","timestamp":1788463561261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /images/photos/italy2014/monterosso_from_above.jpg HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 1795430\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 990\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:30:42 GMT\r\netag: \"1b6566-55b3804e58480\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1795430,"size_decoded":1795790,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 350x350, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, description=                               , manufacturer=SONY, model=SLT-A65V, orientation=upper-left, xresolution=218, yresolution=226, resolutionunit=2, software=SLT-A65V v1.07, datetime=2014:07:01 20:42:41, GPS-Data], baseline, precision 8, 2256x1500, components 3","md5":"fd9f87f8cba15b3af9028e14c5d6aafb","sha1":"f966015970d86104b7d03bd9e1509300aa84566c","sha256":"31123b9b5ab4deddc6001144cddad62361ff425592247aaf57f68d8dc1abef18","sha512":"0a76273734b16bd06584f98f9aec8eeb0f9f2332d41e8aee4d1c1a3180b2449473ec6d78f0f1659c4e88c2c7ec73bb9968f4878378324aff3730a5c992477063","ssdeep":"12288:7ukND//A8S5tauVOw/hhLVrE1M2rWzdT+giVBVbQIPFfWKhR+KWLWk3tnz3KFIKw:NND/0auVOwHNiE+gMHMwdgnz3KFIKdCl","tlshash":"68253346ee8e8c29d064547a1580e3f0c92aeec8d6ec75737bde7b0b3de2e6611411d2","first_seen":"2026-09-03T18:54:48.255161Z","last_seen":"2026-09-03T19:26:38.532904Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":617,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/images/me_side_ed_2014.jpg","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.264Z","timestamp":1788463561264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /images/me_side_ed_2014.jpg HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 208964\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 988\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:27:29 GMT\r\netag: \"33044-55b37f9649240\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":208964,"size_decoded":209322,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 350x350, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=16, description=                               , manufacturer=SONY, model=SLT-A65V, orientation=upper-left, xresolution=254, yresolution=262, resolutionunit=2, software=GIMP 2.6.12, datetime=2014:06:18 19:26:47, GPS-Data], baseline, precision 8, 400x602, components 3","md5":"c60e9e2c63238c7f97bcd27dfb510974","sha1":"99c8c72a4258b633e63b852085c1d882a68db7ac","sha256":"c224927c8e2ab8b1ba68288ffd5594dca21cb9d28e3cef5683abd550df3d8357","sha512":"945814fd3f0d2504a1f45e788ee448bd529edd58600f59e12c09a8cd7a601ccd2f1a7bf5d45ffa38a01953fbf031602f3d43097d92c9ca7e06c53dea9ac03597","ssdeep":"3072:qLiAYhlvOtH3QIEUl2PqlLchhzWnYai1yOCfIjWXELh02XfMy7/UM7:qeArAO475yY2ONjPi2XXsM7","tlshash":"66140182bf03bd47ea6148300854c7269f0eed899f921707b5f5ef56ee270a05f6a9c4","first_seen":"2026-09-03T18:54:48.256535Z","last_seen":"2026-09-03T19:26:38.534104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":604,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/favicon.ico","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:03.007Z","timestamp":1788463563007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/favicon.ico HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 272\r\nlocation: https://cassandrahunt.com/topics.php?id=error404\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\ndate: Thu, 03 Sep 2026 19:26:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T23:47:52.933414Z","times_seen":18264659,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/topics.php?id=error404","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:03.411Z","timestamp":1788463563411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /topics.php?id=error404 HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cassandrahunt.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 289\r\nlocation: https://cassandrahunt.com/topics/error404\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 998\r\ndate: Thu, 03 Sep 2026 19:26:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T23:47:52.933414Z","times_seen":18264659,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/topics/error404","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:03.881Z","timestamp":1788463563881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /topics/error404 HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cassandrahunt.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 997\r\ndate: Thu, 03 Sep 2026 19:26:03 GMT\r\nserver: Apache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.6.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5601,"size_decoded":2298,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ae152aae92333d085b2aab329406ebb9","sha1":"702389b4b768b8d52397ebe662c1372bbfc34374","sha256":"5a4597eff5ac80d38c566ca363a5708fe005260c7b813b5f0541b415ccc4090c","sha512":"b2b9fb553ed239be27ba8fc99f79a28ab4249a5da9de054f9d3694541a99e00acf24df6a52ef4bcb96d6ec2c2143a4bb8dfce57f489be6cf57b985821e087e1b","ssdeep":"96:FB5EwwIOD0VuUCu1LAKf6BccuBEpk5/nasu:FB5EwwISWTAKf6BcxBEu5/tu","tlshash":"b9c1661fccd8918702929be1b471ea54da638143d652dca4b6ec8e9adfe4f5f580328c","first_seen":"2026-09-03T18:54:48.247661Z","last_seen":"2026-09-03T19:26:38.535804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/images/slideshow/legend-laser-cr.jpg","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.258Z","timestamp":1788463561258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /images/slideshow/legend-laser-cr.jpg HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 374367\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 992\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Fri, 02 Nov 2018 05:22:27 GMT\r\netag: \"5b65f-579a7b897aac0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":374367,"size_decoded":374725,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, orientation=upper-left, software=Shotwell 0.28.2], baseline, precision 8, 1688x843, components 3","md5":"b9aa2980bdc788bff5aae99204b219ce","sha1":"7d904c968d9a26d9e12df1dc211f81b9500d3261","sha256":"5952105ec38e40c63d73ff315974bc6378ce473089fbfdd5074e2f94710cc15a","sha512":"92e74d08cd7bc437927d6713eaf4ce255a6d0426ef523818d69ebdd921cedb10496beae6863cfe6c78b217435a0377e84c1b945829b17a4a3e274ba97bdf7ea7","ssdeep":"6144:XCruhLEZ74tvOdm/bPD2irXZmDIB0jkt6EIhlErrQaw/LLCrbqcftk6BAX:X+uhm74thn2irkIB0jLEIhlGwTLKqcfC","tlshash":"ae842310ef175462243f48a3ba56669be3c7b7169c7637cab71e907b3f1c08b31191a8","first_seen":"2026-09-03T18:54:48.252321Z","last_seen":"2026-09-03T19:26:38.537088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/GSicon.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.266Z","timestamp":1788463561266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/GSicon.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1867\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 986\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:56 GMT\r\netag: \"74b-55b37f76d0800\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1867,"size_decoded":2220,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"827b3bf99ec826b2663342cc4678a210","sha1":"40d646a52177728ee31c5ace89a768a73a656923","sha256":"f1cf7c3c45be42a1668eeeaffbf2e0d1e4b2dc35ac2b9726a6eed1cc3ddc605b","sha512":"fe35c39799e1b60ac636f486d386c4be4c85dad9b29e1e94f653d94ea80c038c53a15cd99c9a2a1c15fff418d27507c3c8c34fc467a6a5052d67b7e911a8dbbf","ssdeep":"","tlshash":"2c311b37d21a1cdaeeb85cf103646d00964d7758fe2f24546ca8e07e8364558ad70ec7","first_seen":"2026-09-03T18:54:48.220716Z","last_seen":"2026-09-03T19:26:38.538096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":580,"dns":0,"connect":0,"send":0,"wait":603,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/fonts/FrederickatheGreat-Regular.ttf","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.960Z","timestamp":1788463561960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/fonts/FrederickatheGreat-Regular.ttf HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/font-sfnt\r\ncontent-length: 486216\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 993\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Thu, 25 Apr 2019 00:12:14 GMT\r\netag: \"76b48-5874fab8f1380\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":486216,"size_decoded":486585,"mime_type":"application/font-sfnt","magic":"TrueType Font data, 13 tables, 1st \"OS/2\", 29 names, Macintosh, Copyright (c) 2011 by Font Diner, Inc DBA Tart Workshop (diner@fontdiner.com) with Reseved Font ","md5":"0ed964b46cdfeeff9e07717b9285bd7f","sha1":"8b6fbfb4e45242e8cbcdaee232015fdfdc101b51","sha256":"990272dea68d64b9a819554b57e80ceb5276e3df1eaa32ac78190c6232a07132","sha512":"607eeabc140f451e53ebbe20f53b6aaf6f0479d3e65f3e6862a7e53c5abb60de2bde7e1fb6201806f4dbbcf1620925ab1f9bdb70496a42d914f6f0e5ec88f5e4","ssdeep":"3072:XePUXP5oqYRHPtHJyccguB5vof/GaPjwAyAi+cEQ:OOP5oqYRvtwcZuB5vofOarPRiHl","tlshash":"02a4f94169cd3f8de545319b89105b99c2d3a02a97fb38e9ff877f9a56061c0fb26203","first_seen":"2024-12-21T07:24:29.770556Z","last_seen":"2026-09-03T19:26:38.538881Z","times_seen":6,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":510,"dns":0,"connect":0,"send":0,"wait":395,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/style.css","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.239Z","timestamp":1788463561239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 26330\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 998\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Thu, 22 Aug 2019 21:30:27 GMT\r\netag: \"66da-590bb65ef02c0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26330,"size_decoded":26684,"mime_type":"text/css","magic":"ASCII text","md5":"00a81ca3631313e4edf3c747acc41ff6","sha1":"6d6fc178856edbeadbb6e667987d27cb69766137","sha256":"737e28b67e15e7aa171de84343ee6453967d2d727d0370986a9712d3615c3de6","sha512":"ca89c304dc5930e9d6eac52fe182ffac343a4108513ab53fd8d7e0c08e9f3b627e6e9981774597a5e82b2e8298f98273bcfc2830951d6b947131c9cfdf892447","ssdeep":"768:k0a06ySlViGkffkb6chTFv/3F5zhLSUeYx0WFQelPzkacPzA:H0bNR/3n5StY1BdV","tlshash":"f6c2ff468a931503b84be0e9bfb657c1233a8213d95aca587eac735cdf091f4c5b1b8d","first_seen":"2026-09-03T18:54:48.229268Z","last_seen":"2026-09-03T19:26:38.539428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/js/dropdown.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.240Z","timestamp":1788463561240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /js/dropdown.js HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 775\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 997\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:34:11 GMT\r\netag: \"307-55b38115a9ac0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":775,"size_decoded":1133,"mime_type":"text/javascript","magic":"ASCII text","md5":"c74f5039e3fbeb9fce2ecd2f747ce136","sha1":"52ca9d09464288de0a67b5b7f459a0c0e02c888f","sha256":"020600735524c88163c5ebf431993a53270752117628875cef266a5c916939f3","sha512":"148070b54e3d12d74d4bc730c6336cca0fcfabb41a2fa9982b51516050696c3bdd05fa289c4308bd7aa60190ccab1aaa6f016e62e5006bc3ae3d3cccd4262fd0","ssdeep":"","tlshash":"dc0168ded60c036210f632f2519aaaaeb363c4328045da653e2d935849f4d7b68e08df","first_seen":"2026-09-03T18:54:48.237697Z","last_seen":"2026-09-03T19:26:38.540122Z","times_seen":2,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/js/jquery-3.1.1.min.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.241Z","timestamp":1788463561241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 86710\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 996\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Thu, 22 Aug 2019 22:26:14 GMT\r\netag: \"152b6-590bc2d6e2d80\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":86710,"size_decoded":87072,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"f02fff6f26630c9211f810e7792d2ac2","sha1":"472e99db849449fc41521a56d2ebebdebd8fb2d3","sha256":"c76c37095497b6694ec95d8b7149bda2025e9833a6fe9a90cfcb1b70b33941f4","sha512":"79990a6e78a33e569262dcc28f7ac359ca7cc8aee8c8f3dc4876422d2de17a374736ab81589ceb90a426bb6b33275603790ae37f9ecbfafb3afb2e3a76fa01ee","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDj:jxcq0hrLZwpsYbmzORDU8Cux","tlshash":"5b83d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2025-10-12T07:14:24.224741Z","last_seen":"2026-09-03T19:26:38.540869Z","times_seen":8,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/js/slideshow.js","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.243Z","timestamp":1788463561243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /js/slideshow.js HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\ncontent-length: 1354\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 995\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Wed, 27 Mar 2019 16:11:55 GMT\r\netag: \"54a-58515b24188c0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1354,"size_decoded":1713,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3aa47056bf701357b03e2e1b398ba7e1","sha1":"d6e4302396590c9d064248dfaa7de57fb46945f7","sha256":"c6a58920cb799548ce7e5c19fbcffa8e61233d7647f4f0e13f99d9f288470e4e","sha512":"6d9bdc001100c76c041a489161d13509a42c84f0c64144b5c17aae691d48dac377c199c0adb7767b27a8fbc13a071a0d7b9b7e37f1d0ec35cc76bc9bb5cdd4c7","ssdeep":"","tlshash":"98216509b4f22921dc723096376bb4182ebb61373505cb007a88e1906f5aba6d7c9bc4","first_seen":"2026-09-03T18:54:48.251118Z","last_seen":"2026-09-03T19:26:38.541521Z","times_seen":2,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/images/slideshow/YBCO-excitation.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.260Z","timestamp":1788463561260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /images/slideshow/YBCO-excitation.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 813474\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 993\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Fri, 02 Nov 2018 05:22:33 GMT\r\netag: \"c69a2-579a7b8f33840\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]}],"data":{"size":813474,"size_decoded":813831,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit/color RGBA, non-interlaced","md5":"e872a4ebc749b62ba218f08e6abc9f7c","sha1":"7171031b86a64b878e1ac6e9d6308fc24e066208","sha256":"f85955ea8622c4cf86e629372c8114c81e1dc59ede193c25c08be53618bee71f","sha512":"814a221acd53ce67fd59d043da2b1febeef81701eadc60e097f380ec9c653235966d052817f59188b5f8738434c3ae82a37ce89065917a6aa760bf26ed73f05a","ssdeep":"24576:yGVXOUPgEVrZVpexwAbfBu8AC0UPUNRylHlaqBtKU8duuWUGI1:neCgEf4wAbBtJ0UMEa1uBUGI1","tlshash":"710533dbed0f24748629157867dca2fc5ce76d884fe788e31c5d0adac67643cb112a22","first_seen":"2026-09-03T18:54:48.253866Z","last_seen":"2026-09-03T19:26:38.542659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/hobbit/images/title-card-first-meeting-2.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.262Z","timestamp":1788463561262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /hobbit/images/title-card-first-meeting-2.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 37356867\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 989\r\ndate: Thu, 03 Sep 2026 19:26:01 GMT\r\nserver: Apache\r\nlast-modified: Wed, 24 Apr 2019 23:35:36 GMT\r\netag: \"23a0543-5874f288c4200\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37356867,"size_decoded":37357228,"mime_type":"image/png","magic":"PNG image data, 5616 x 3744, 8-bit/color RGBA, non-interlaced","md5":"689aadf672d026a4c2fd0d0649f624a3","sha1":"927cfe31b832b6de563be4438b99a2f71cc2d648","sha256":"ab1763e76941e140801df74bde4eb3c8e9f6b3ff93ab76267b6c7692a44f1254","sha512":"88c24b52a9cc6831efb0f999fe1a908d59f82086c945ce98e237abb08cb4094960b4be748828319b91bfaf19af105e81d7117cd2fee5ea0a96204faf71da70c2","ssdeep":"24576:ogXfpYt58ciFe3k2DqHqeUbRqRTw7W8Yq/fmd41Puxjf:pfmv8ciI3kJHqvbRqIfmd4E","tlshash":"322523edc4e46eb8f81635a486060db619e0fdb28bd43272e4d9fbfd61a8944c7c0395","first_seen":"2026-09-03T18:54:48.240951Z","last_seen":"2026-09-03T19:26:38.5436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2580,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":747,"receive":1492,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/researchgate.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.267Z","timestamp":1788463561267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/researchgate.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1226\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Tue, 10 Oct 2017 21:26:59 GMT\r\netag: \"4ca-55b37f79acec0\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1226,"size_decoded":1579,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3b62fe9050812913e023bb024a046842","sha1":"36ceef87f99b9fc287ba4fc1da14e6716f971430","sha256":"8d39eebabf405c0e1372e00328c307ef5119e180e3920ed1013c74c4e58bdc17","sha512":"4bb08db25bb326c57b54ebfc58798c3c9a1fb0ee683f345c9a2160cff4cf8d5d212c79bb712865f738075b73cf0700597ef4550cb3b9db41430fc0b70539d1db","ssdeep":"","tlshash":"8f21eaf61b13a1ccc1e06033d620666c970551c5721bb661674b76284afdb689246db5","first_seen":"2026-09-03T18:54:48.257933Z","last_seen":"2026-09-03T19:26:38.544194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1196,"timings":{"blocked":667,"dns":0,"connect":0,"send":0,"wait":516,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cassandrahunt.com/css/images/github.png","fqdn":"cassandrahunt.com","domain":"cassandrahunt.com","tld":"com"},"ip":{"addr":"74.208.236.207","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cassandrahunt.com/","date":"2026-09-03T19:26:01.268Z","timestamp":1788463561268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cassandrahunt.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 26 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6F:ED:C8:89:25:2A:65:01:10:B5:5D:A4:26:DD:59:94:60:54:D2:D3","sha256":"EC:BA:5A:EE:FF:23:4D:AD:96:90:DB:88:DA:53:8A:7A:A5:F3:8F:96:FE:45:9A:A0:56:F3:A2:92:FF:D0:91:D5"}}},"request":{"raw":"GET /css/images/github.png HTTP/1.1\r\nHost: cassandrahunt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cassandrahunt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 6414\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 998\r\ndate: Thu, 03 Sep 2026 19:26:02 GMT\r\nserver: Apache\r\nlast-modified: Fri, 02 Nov 2018 05:21:36 GMT\r\netag: \"190e-579a7b58d7800\"\r\naccept-ranges: bytes\r\nx-clacks-overhead: GNU Terry Pratchett\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"X-Clacks-Overhead","description":"X-Clacks-Overhead is a non-standard HTTP header used to transmit tribute messages within server responses.","website":"https://xclacksoverhead.org/home/about","common_platform_enumeration":"","icon":"XClacksOverhead.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6414,"size_decoded":6768,"mime_type":"image/png","magic":"PNG image data, 209 x 201, 8-bit/color RGBA, non-interlaced","md5":"4e601fc112aec35f24cdfb07dc5002e9","sha1":"690862f544bbb8f8f6e5f2dc6dfb92a432894b24","sha256":"e5145490b0972f9e8484e0ab008ce676e5ec4f6f1b5a3eb27dbf30589cfdcbd9","sha512":"3109a33eca467ad2e3fd94f7ce8d3fc73ec621ed5cc10b5789a09eab4b27da7660ff5bf7ec5c28b432dcbb87299777e5892267562fd801bad265f532da6fb50b","ssdeep":"192:pCJ2M/ApnLBC56pmdgexzKpgST6Hviefm88:o2M/Apnla6pmGecpj6q88","tlshash":"edd19eb891cbcce588c43f2593546db106b39bce8c330bd5b067628d5dbf69d4a8520d","first_seen":"2026-09-03T18:54:48.231309Z","last_seen":"2026-09-03T19:26:38.544889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1414,"timings":{"blocked":912,"dns":0,"connect":0,"send":0,"wait":494,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"cassandrahunt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"cassandrahunt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}