{"report_id":"8c571657-42a1-44ae-b689-584e78b37b92","version":0,"status":"done","tags":[],"date":"2026-10-09T16:13:31Z","url":{"schema":"http","addr":"caschronickles.baby/","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"172.67.169.219","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"caschronickles.baby/","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"title":"Casino Chronicles — a museum of chance","dom":{"size":22642,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (497)","md5":"adeb76744fa98b8ebab1c61f6200a7dd","sha1":"7f5a56e31df8b160b78c3f4b0e9c6d949ee18f63","sha256":"9135bb7c2ffc3bb508e9837350b84b9345254982d45735273a7e2acf6a082915","sha512":"8b85b128f633d6cdcc8f3c6e82d4d62e1d6ec7856bf5c742ca04d7e8552d474959a726178000bdc7b47f8dc3342771a0a2a191c76b4a51e1dc39ed56884ba1f4","ssdeep":"384:DKeDfZw3dHilEFkOVNPAhKD3m+GLF9Dzxrl6LeX:Xdida5Zjhh","tlshash":"44a2fa27926412736033c6e07befa39d72a9c003e9051679bafc425cc7ced9c956bb49","dom_hash":"domhash0be67ab63b3e08f7b09713bf9bb958fe","first_seen":"2026-10-09T15:46:19.541844Z","last_seen":"2026-10-09T16:13:39.20066Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"caschronickles.baby/","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"172.67.169.219","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:13:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"caschronickles.baby","ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-25","domain_rank":0,"first_seen":"2026-10-09T15:46:15.473736Z","last_seen":"2026-10-09T15:46:15.473737Z","alert_count":11,"request_count":11,"received_data":2442660,"sent_data":5689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"caschronickles.baby/","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a232cacb5fc878119465ff0c63a14ef","sha1":"745bb748bd3903563c23500c20267920cbc125ed","sha256":"93633ef0fa17b908eb24c65b2231d8ed6f56f720e03661f6202c9ea145fb6f39","sha512":"ad1e922d8b0c72b3f6c799e089178b5c2a18fe7bbf41d2548ac17999f67321730b090c3ede13580f97fe9755e08681297bb1db54d3915504e97c706181f46df5","ssdeep":"","tlshash":"f9d02b113e5950afe06f51b781135ba7372c10483409587632f861aa0d9b830c9b46d7","size":272,"data":"","first_seen":"2026-10-09T16:13:39.234985Z","last_seen":"2026-10-09T16:13:39.234985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"caschronickles.baby/","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:10:04.821Z","timestamp":1791562204821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:04 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDgA384ukcEaxWiYQXrVW%2BnyEWiG1ZMWmcODyjMS36kHCKKKR5r6FkrPzZZUkRXauHqBjPY0y9rdxSGrjxBuTVva9g8wshBitEyjggLwQFoGZ4BEC%2FdqpCqOncODyIV%2Fkp%2BQh35y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47ea7447890a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22663,"size_decoded":8056,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (497)","md5":"8dc20022e81b9f3facbedf5fc61f87f1","sha1":"30f2f9d62d9a6a4b00ab9be68cd71955f3175665","sha256":"55b178d6dbbc8bdf7e7785631991c09491a7da2d9569ec5ea27de3c4bcd60600","sha512":"2bff34e881c6c860047030f4b51caf7637aebc8bf146e4f1ed5f60b0b611aabc8d3c0dd5bc88fe5b24b8c941c811f03fd45ca1c86ef837dfd675a056a9c52608","ssdeep":"384:FKe+fZw3dHilEFkOVNPAhKD3m+GLF9Dzxrl6Leb:Jaida5ZjhF","tlshash":"83a2fa27926412736033c5e07befa39d72a9c003e9051679bafc825cc7ced9c956bb49","first_seen":"2026-10-09T15:46:19.559914Z","last_seen":"2026-10-09T16:13:39.210147Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":30,"connect":19,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/icon.png","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.151Z","timestamp":1791562205151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/icon.png HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1c8b63959f54dc6ee5ed5d37bab34f3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrPThtshZpnzhpQcbTYZMEh86PphLXwi3VVBlUpz1Xg5i2OSWSisNdTJc0tbcnt2a7u%2FTC96p4hddqFn6KzZG%2F36PVvU%2Bu4UVITzbJJ8SJYnYjEo77x0av4FY9KGdxG4T0sIlM3G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a47ea746299ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111537\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111537,"size_decoded":112200,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d6cbd647a1e9442f3132ce96192a780f","sha1":"8953e341d3be23b375dfbe2082b2eae2836678fb","sha256":"7f26dd4246e0e512a752d5a8c9ab062487c1b8a4961bbd1b9b33dfef0cde1abc","sha512":"e8488d921fef69ba198d83d0c95b3731f7012e0170616fb769dd1d27c4b6cf762ce92615d391085856e553443775f635a8f3de086e2c468d1b935643896bf3bd","ssdeep":"3072:JIMjjn0fBvRoiZUAYA/l4Sud67+CQjbp43X:t0fBib64Sud66c","tlshash":"bcb31263eff676e09e0aa6868fcf803c5b40101427ec35d75243a9d78d13d61969a39b","first_seen":"2026-10-09T15:46:19.561711Z","last_seen":"2026-10-09T16:13:39.212004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/fonts/Inter-Variable.ttf","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.194Z","timestamp":1791562205194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /fonts/Inter-Variable.ttf HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\ncontent-encoding: zstd\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W44UeFzdQKqR2kqPq%2Fbrkj8HYMBQ8yqq5cOHjKSkHlgcMu3GzIvOsLu%2B3fDmEN8QuaBSnzTsPclyhSIIc%2BEG7UkQXiDWAJfLmAeZ4Bx8X1RpqWS51obQ9roXkua5at9OBN6uBO7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"efe4ac19c6def30653e3e6c60da62052\"\r\ncf-ray: a47ea74679c6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876576,"size_decoded":457171,"mime_type":"font/ttf","magic":"TrueType Font data, 21 tables, 1st \"GDEF\", 67 names, Macintosh, type 303 string, ThinExtraLightLightRegularMediumSemiBoldBoldExtraBoldBlack","md5":"bff0f6e3b9e2259a28313168a907054f","sha1":"97d4f3722d62c6cc5340bf6220ada3d64ca367b1","sha256":"29160a80ff49ddcab2c97711247e08b1fab27a484a329ce8b813d820dc559031","sha512":"3b71d2ca0b0b7649d939f982fe5b973c913c4b0a89e1b07ea6b8b1fcf5f8c8f25b5cf293936f936b1e8b43831ea976bd82151cd0ad0d2847b254f6a3ac0b7f9c","ssdeep":"24576:PY598csuuuPz2iKeRpz6iruEOwRy+4FFhex:PYv8cB2iKeRpz6iar9FU","tlshash":"36158d53f682cf5ac259273486b30b9962395871ff17030f596a33b8be933e1694d6e0","first_seen":"2025-11-24T01:15:25.098294Z","last_seen":"2026-10-10T02:40:32.631624Z","times_seen":90,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/fonts/PlayfairDisplay-Variable.ttf","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.196Z","timestamp":1791562205196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /fonts/PlayfairDisplay-Variable.ttf HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\ncontent-encoding: zstd\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpVp02dT0J2bObZeNWY1X0z0v2b4H5tsArn1508wEsstI1vdtk4ffshlemlR0qz%2FUPFDjJNraL6h9f6CteWYwRr2%2FGOEdq94fFgLKoBnofEeqS0r3LbnxoXXFXZtKqmgYsLlzGCy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ee3850da8908d5c6f71b119995e628eb\"\r\ncf-ray: a47ea74679c9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300724,"size_decoded":136846,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 20 tables, 1st \"DSIG\", 46 names, Macintosh, type 25 string, PlayfairDisplayRomanWeightRegularMediumSemiBoldBoldExtraBoldBlackPlayfairDisplayRoman-RegularPla","md5":"038aec929d8d05c5de0bb20e040f9973","sha1":"a0e3babd3c318e1b14fd3e43b9570153a5b194fe","sha256":"c40f2293766a503bc70cce9e512ef844a4ccb7cbcde792fe2ea31d191917d8d6","sha512":"529b4e3f6c8d7f4dd5ccc03e0fe43cec96f800bc4e491448353cbc51cc636559bd851f147e00453b8a3fcc0e966226f8d63687f0b0e8e814ea2b075c49c2a765","ssdeep":"6144:FYz6TLKLkuIkutvuu3Cqpe2suw0yCkOIuPIiySx:FYm/KLkuIkutvuu3CqpeVuwvlVB4","tlshash":"a7548d22f6168f8fd2056f3c84366a94b95ef548e72cd3879315a53bfc2237009d16ea","first_seen":"2026-05-12T06:30:58.454749Z","last_seen":"2026-10-09T16:13:39.214576Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/fonts/CormorantGaramond-Italic-Variable.ttf","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.198Z","timestamp":1791562205198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /fonts/CormorantGaramond-Italic-Variable.ttf HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\ncontent-encoding: zstd\r\ncontent-type: font/ttf\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBSb55zH2vmoB70A3norYKnjQ7D1ZdjKM8bAIEiO8g1vjBiBxcNuwdAR6RFxI3zU0qf4cNh5DDvGllq8DypFbvD6fnUAp5SpK6nFdThgjcQZYM8ovlFy%2BxhhGxJ93%2FeOqoQMSWWF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"26a56325983e2c90d5bebfd9135e5a77\"\r\ncf-ray: a47ea74679cca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":715644,"size_decoded":198325,"mime_type":"font/ttf","magic":"TrueType Font data, 20 tables, 1st \"GDEF\", 49 names, Macintosh, type 257 string, Light ItalicCormorantGaramond-LightItalicItalicCormorantGaramond-ItalicMedium ItalicCormorantGar","md5":"fd5aaca0d720740005cbd86b1462fdd2","sha1":"06b2a021db953ff81c77b303dafe988a6db4415c","sha256":"0f48ea6abb2084537854f7174c470991a463b13036309e3b50a81511611c530d","sha512":"2e61cbe85e8713d3d7eb2c9e4be9c98d32431763fa104ccf901f8a8811a3156a7e47ab7900f6dba2980664c778d6c9cbc9732a9244e577c91d2e754c56618c4d","ssdeep":"12288:0wYzc9vjkg7ZSZi9d4m00x1+EKr/jMljQRsGlNroFarjo7Cn4WH4IhWXf+obD+00:Z8EG/FNceZhWXf+obD+0UjCWgA","tlshash":"d3e49f13604d1aced7072d3cd411c3b295a9e92c27a246a7f6261f15fe313b0e3b6ad6","first_seen":"2026-10-09T15:46:19.552758Z","last_seen":"2026-10-09T16:13:39.215475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/icon.png","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.288Z","timestamp":1791562205288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/icon.png HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1c8b63959f54dc6ee5ed5d37bab34f3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O8XTgKR59stEAcpjdjUlALDZN8jIeSSsmdyCLEhc%2FilelXTKaTzF2ApbH1Ch6FddnpdoEFHpC2nkmE2Fas77V2AlZN1658inuh0OVESehU%2BrNlGWR01ZakkWHckPB0zLrjM521K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a47ea7470a52a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111537\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111537,"size_decoded":112201,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d6cbd647a1e9442f3132ce96192a780f","sha1":"8953e341d3be23b375dfbe2082b2eae2836678fb","sha256":"7f26dd4246e0e512a752d5a8c9ab062487c1b8a4961bbd1b9b33dfef0cde1abc","sha512":"e8488d921fef69ba198d83d0c95b3731f7012e0170616fb769dd1d27c4b6cf762ce92615d391085856e553443775f635a8f3de086e2c468d1b935643896bf3bd","ssdeep":"3072:JIMjjn0fBvRoiZUAYA/l4Sud67+CQjbp43X:t0fBib64Sud66c","tlshash":"bcb31263eff676e09e0aa6868fcf803c5b40101427ec35d75243a9d78d13d61969a39b","first_seen":"2026-10-09T15:46:19.561711Z","last_seen":"2026-10-09T16:13:39.212004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/era_pascal_wheel.jpg","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.154Z","timestamp":1791562205154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/era_pascal_wheel.jpg HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a4c7f5a3b07dfe74eda6e2de3f7b9933\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGX4vsHxMoG%2Fv82uIC3KV8Kmb%2BuDHwOvPk%2F%2BlgH26G3sPF2eRnkcNW4Zg7RsbFqYPZP0xaUQ5do2iHRMsH%2Bf6x1o5%2FjhMIV2dWFBcMLIqNj6lRmcY%2Fgrm0fpqyh2z6MZx6C7EXd4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a47ea74639a0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79335,"size_decoded":80006,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x537, components 3","md5":"4437dc135ab1c20709c19ba2114f5727","sha1":"c676418a29633cc705317d984410a7268515508e","sha256":"683b9d6ed13c2005f01c1111128d757fa257408ac30f90d5b3dfbbdb80db1c51","sha512":"0e3c65664757bfd73d2e814fdbd2924a4dc74b2cae52ae0269f9c73774050dcd9746b77b180accd49fda903ddaf147011c218af58b3bb6f766cd4a7e8f843c58","ssdeep":"1536:dZS2oNFJqQPrAw0Row9WN58ZKv+9dg6QRig5nQviwtY5eX1812OZLR:3INXqQORoX8Ev+9KvRBwtYMC8Oj","tlshash":"ab73025852c1a0c5c7773e79b039c9793c71879ae4468f0f62a6f09273251f82e9476d","first_seen":"2026-10-09T15:46:19.565034Z","last_seen":"2026-10-09T16:13:39.218168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/era_rome_dice.jpg","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.211Z","timestamp":1791562205211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/era_rome_dice.jpg HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"58c71459eacae80176dae7554a82b924\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hf97pT9F21%2F8y0bcPw8AaA7xLoYVlxd3jifTmA%2FKYi2zSn6DueHUwMHggN%2BeNW7voPYV1HQLA%2F7UmwZMd6SEV1OPLlp76WiW8TgYc%2BBHRPaxJTJGjOPobcOKZJTySUR0cXap8y3l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a47ea74689d3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73843,"size_decoded":74510,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x537, components 3","md5":"04435a04019683c32856791ed92b0242","sha1":"08887e0a243ad971b7d6b2c1dd4fbf7379ef06a8","sha256":"d4a872d239d0b75f597ea9cb704d1cb493747beec118cc8e284c55d293bb6325","sha512":"5e1d0b4768079489baaac993541f33effa490a95493c140cffa4a4a6f5422b552cd4cda33d4ac533543a1fedbbca515ca23a8b1b5c67a108a70f1052264573f8","ssdeep":"1536:2YEcgh9XUJFv//oHN6TbWN5V686lAiQuzqPncmbc01wGTCigNMj:9Jq9XUJNw6TqLiB8cmI0KGANMj","tlshash":"6d7302ebb65942c7d9feb2359f0a3d501d53cbd85b305afeaba09424c4752a378e3180","first_seen":"2026-10-09T15:46:19.554634Z","last_seen":"2026-10-09T16:13:39.219447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/era_cards.jpg","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.216Z","timestamp":1791562205216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/era_cards.jpg HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b1a47d88d91b4e02ba53db67c638f28a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9m1maukaJcWymm8zErV8S3A15c%2F%2Bx6vZwRBbZuE5gsVEtlkg%2F68vqLO5psHXrd6rEGTpNwMiWJbLsfH%2Fn4zO8NwMpRZ9p2N7P0BVq6zt8ZbOLyiCLcHdalWHxdN3%2FzFzNYXhMCC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a47ea74699d7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66420,"size_decoded":67087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x537, components 3","md5":"f051f08a6ffbab4b5c9f3c21cd54ffa0","sha1":"2157b8929c5211c08af2a39f740b23f809338eb8","sha256":"54975a63202c1c7a84028f5a9c3784c366c4efe66bcb88ee2cc37e49ac36e0d3","sha512":"5ccacb5c00f40626226fd50744c936e4b7f0ed6e737bbcf7db8c01cf1ed12e78b3e0edf63b72321bf8a15ae2bef287e163f08e0b2e66392a1ca8bf0e0266fc63","ssdeep":"1536:XkfUHn5xth7Wwz+IBwd3hKIgdUkxC7LWfXX9/2u/Iuq9F:XkcHj/Bi3hKIyHs7LWfXXUuANF","tlshash":"2053024ff65b806ad2e45abfb13ceb5e9559db4021cb418a58cec184460bfca5cf08ed","first_seen":"2026-10-09T15:46:19.563249Z","last_seen":"2026-10-09T16:13:39.221261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/img/era_liberty_bell.jpg","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.222Z","timestamp":1791562205222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /img/era_liberty_bell.jpg HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"939f4b6d9e150b6d622f8b333902175e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mVLODCXiBgPWPPzETsbQfkX1aKwdpX7bSisegy%2B%2BHXuR%2Fcma36uMChRJPQMG4JyV%2BA4i1wEiv6qzlDjksIRTJn%2F3HvzsK1soheW6k%2B%2FUmLgX8BlLKFR%2Bld4kUY1g4F0M%2F8ZS9K40\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a47ea746a9dea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 66197\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66197,"size_decoded":66872,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x537, components 3","md5":"d6f5ce74103d4377e0ee33f7ca0ea08f","sha1":"25ad7f882856b7cd018c6e09bc929851d0cd0366","sha256":"ec6f8e9a6c590ff9804086be18f6efd32a0e9d9ca34ae6120adeffd690649502","sha512":"0af88153d75f43921b34907ab60f4cf8f58f34f8816a67e950d5584c5c75e921b2c87abd8c4d4714b98eb8124a567bf98830479612804dfc12305707d34bc935","ssdeep":"1536:wdUdGsgPOFr3zwGEuuo91kGrLRa4rq4+wF552JPNv9Zm:wVArjwKj91kGHEps550l/m","tlshash":"6353022cb11b53a7f07bb21821375708a96a642573bcf71b7a09f6117699f8bc402cdb","first_seen":"2026-10-09T15:46:19.556376Z","last_seen":"2026-10-09T16:13:39.224887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caschronickles.baby/favicon.png","fqdn":"caschronickles.baby","domain":"caschronickles.baby","tld":"baby"},"ip":{"addr":"104.21.95.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caschronickles.baby/","date":"2026-10-09T16:10:05.290Z","timestamp":1791562205290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caschronickles.baby","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Oct 2026 06:07:39 GMT","end":"Wed, 30 Dec 2026 07:07:37 GMT"},"fingerprint":{"sha1":"A4:03:50:65:23:7F:89:78:C6:04:AA:AC:8A:B2:06:6A:4F:1C:3E:0C","sha256":"A4:DD:A9:2C:A5:C6:C9:04:39:79:43:7C:1A:45:76:C4:4E:CA:2F:52:96:E5:AA:9B:98:73:67:F9:5E:D8:9E:C2"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: caschronickles.baby\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caschronickles.baby/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 09 Oct 2026 16:10:05 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"03edd2134d59022e16596e7a31908e9d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWe3wejV448DWMb1Vh%2BDjPFiBJuE%2FGDwzuxX0Q0xBC3dNghOiADND2jolSPwG01u%2BhAeyCQvFUnuXesZbQHR4vblz9gxXJg36HsHp4%2F4zZDmQRjU4%2F0CsQWTg%2FdLkA7tnnDgUejj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a47ea7470a57a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10884,"size_decoded":11555,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"52440f349d09b50b38b17145f00cf6b5","sha1":"0d8a412aa1aeaf9550aab1966ae224b808c41634","sha256":"50857435791f351a1bc5899e12b09be74de9fe1e8525e3d459e2b6d200c72172","sha512":"c32f7bdc55f3292c9e79dbec8e59e49f1f4d427f5e33fa595a304445d073cbfcf0074ff15643266ad4b6d2d3f540865733484dd2d977e484159467bde74d176b","ssdeep":"192:UOc0Nu13TSrENWHbaVLfioLWa/1S4VWvOltN29QnRqF03oD/iiWmH+0:UOJNu1D8E+Aa5ac4VWGltNy8R603oqmR","tlshash":"9222bf8c36b817236ae809d1ff5260e95e034e62d80c19c17e6dadc75fe2f1554973c4","first_seen":"2026-10-09T15:46:19.557923Z","last_seen":"2026-10-09T16:13:39.232045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"caschronickles.baby","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}