{"report_id":"c27089fd-889f-4a4d-b8b6-6d03d8c240d5","version":6,"status":"done","tags":[],"date":"2025-11-24T03:12:19Z","url":{"schema":"http","addr":"paulsfantasy.com/","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":0,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome.html","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"title":"welcome to: Paulsfantasy.com “I did it for the love of porn” website. Porn History? Everything on this site is porn history including the best of the Golden Age. A true pioneer of porn... I was at ground zero of the porn explosion holding the match.","dom":{"size":31611,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1448)","md5":"44673917065abcccee5f4b8a41ebc611","sha1":"a74f4af9303f646f5d86d5860f191a6aed6f4ab7","sha256":"69a42cf7830d598daeac4ce3f8f1640f21174fe8419a3f5b282c0148cef33803","sha512":"721f15062b4cbfa2c2546ba9e8763f9663312a7aedfaed9cea7c870510a87c0833f8dd899fbb7ef7dbca0849ffe273cbbcfdabed1525ecfe35bb2e1c7cf41ce7","ssdeep":"384:5FZWoWuMsvGv2wu/bUM61aRpo40AxHQ+XSh:5FZWjHoGv2wu/bH61mHxHNSh","tlshash":"b0e2333186a66437e0abf1d1f6206f5a7b12864be3132c087afc3565d7c5c248d6b9ec","dom_hash":"domhash4995084dbaf10c356c462426a428b747","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paulsfantasy.com/","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":0,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-29T03:12:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paulsfantasy.com","ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"domain_registered":"2004-01-21","domain_rank":0,"first_seen":"2025-09-02T03:36:42.435443Z","last_seen":"2025-09-02T03:36:42.435444Z","alert_count":38,"request_count":38,"received_data":722076,"sent_data":19242,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"iWeb:3.0.4","description":"iWeb is a web site creation tool.","website":"https://apple.com/ilife/iweb","common_platform_enumeration":"","icon":"iWeb.png","categories":["Editors"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome.html","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b5b9ec2884009065743fd04fe88f26c","sha1":"56f04daca2cecec8cc944fe7fd53450d8deb54f5","sha256":"cae807bd14e69710e21a0b17cd52eb90a1d7f83357c9504a36e9a7b68fe223bf","sha512":"2497ae33b44a09f274c90e4e94167f1271832da29f3c3c1f78bd992e1726ccd943fef36275470783b31662376e19a95c3bd6e40dcc8af85221fc2a32cd6103d0","ssdeep":"","tlshash":"64319b59bc9110fded2b2cbe78eb9361773b5202de3342712a6db690c7664f4c196508","size":1485,"data":"","first_seen":"2025-11-24T03:12:22.794722Z","last_seen":"2025-11-24T03:12:22.794722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/Widgets/Navbar/navbar.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf8daf080e98e7a2b961122f039ab210","sha1":"267026c091fef34cfa489e1655d3413788c379a7","sha256":"02d67fa8778e6e35e14548d723df28ab60ecaee42eda83796621531921181eab","sha512":"4e32a675b3222d6007e37cf0eabde4d8d9e835dd0d6c405aff6399270603388a1b7e2bcc1c08e2ac7baf0088080955e00cac3dbac74ae571a1f605790bd5cd74","ssdeep":"96:IjsNQlSL72uewkH2S5Os6IIYDH0wK+5agQAvd6NmYc+26xT+qxBLwu:I9SL7Pf+IYDH0NNmY1BLwu","tlshash":"b2c1b44533e982b6cdcd3224386ba2a8b2bb346cd06dd015544dd8d624b8ed1716feba","size":5986,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.792402Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome.html","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"db8e1f473b2d4916c2bebeff72edf9c1","sha1":"e89bf7904928b902c9421a956113d48b4adb6a8b","sha256":"7ac7bc83a5d8924b64734010c2efda71b2a40ef3bfc9f7858129d1ebfc8b288e","sha512":"b09370fa3e0e19cb907b1c687a81afcdf73eb17b331216083ba27043591eedd18a79182d00e4cf5216fa34d261a6faf97413a0547e53660e8d04088ae21e0b65","ssdeep":"","tlshash":"9f60000c030030c0c00c330c30c0000c000003c30003c0c0030030003c000000033033","size":13,"data":"","first_seen":"2023-05-01T15:42:51Z","last_seen":"2026-04-03T22:17:15.804632Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome.html","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"4f18aca1febc19df75730931163817e2","sha1":"53514513eca6b5cd1daea030f641d597f2cb2618","sha256":"d7595a1a8c9b7abbed1ce0e4dd2dcff329333ce4b4742506da681075a08e487d","sha512":"4d053fb2470d9e87f22d94bff78b66ec778533646107d541f14fc9aea4df0f19ba2ab18d5de66a1c08350f9af307527fd2066537a77179fa845c9c78f056db1d","ssdeep":"","tlshash":"2460000003c0f000c033003c3003330c000033c300c3c0c000033c00fc300000030000","size":15,"data":"","first_seen":"2023-05-01T15:42:51Z","last_seen":"2026-04-03T22:17:15.803964Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/Welcome.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f81e867dec8203d70ec3cd64cc020a14","sha1":"710d15aa493525c1a455c32f2a3b4bd94b5f811a","sha256":"ec7990ef9629bb1e153e58bc45e9f8a9e80b4e419ca47498dbba2f28703daa71","sha512":"ced8fea10a33ef47812250572328179faff1faaae124b04674a2c0ebe17039f13fd2d56397c4727efc0665458a2563f9aa0e652b0e625313f8f28e1094975495","ssdeep":"","tlshash":"1a512a35d708bd2260b3737a72e727455ca2e10ef1a57b662a94cf3c9180643e172e75","size":2552,"data":"","first_seen":"2025-11-24T03:12:22.787964Z","last_seen":"2025-11-24T03:12:22.787964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/iWebSite.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5533f353620aa11d791ffa24bc943823","sha1":"cb2eef7efb4b8a0f790ea9355ed01d23d38dfebe","sha256":"53955fb279918ea741b55c650608dd7e4c53d82f486f569ccccb967becb9cca4","sha512":"edf3e3b2f24190a1772aa2f0ea6d6a47216b590febbcfa93c1e4adc3663e9d8fa6670a17ec6df07da3e8bd386caff25c07b5c092b278cd36483d11eaaba9fc0c","ssdeep":"1536:DDCMlIFobplCW/xmjOz5fZcW15Zs438gaZAD+Fx7b+AagMqewexKK+hYEeWwOkMg:DDCkhplCWX1/s4ZaZA3ZwL6TGz/EljSq","tlshash":"8ce3f8d83682317a47cf627a146f124cf23b4445880a9094f578c8e5aeb9f59b13bfbd","size":146115,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.800551Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/Widgets/SharedResources/WidgetCommon.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eea3a0a653317cac353c3ea52b25d18c","sha1":"717ecc5c1f206de53df96c29fe67480ebad4e893","sha256":"410ffb714e6dd0738fdaad21e5d385ee3f839f04885f4380d87e8796aa5da460","sha512":"2f0d148745ce92c60a86929471654afc910c1fd3528388e7c4920c932e62e5dce0652a5cebf0056a12a01252703f56840f0a60868c7db26adaeb17ae6cf7ac93","ssdeep":"768:FMDUiQo1H2LKvLx+7guycrRIP7IFPl0oT0hq//ShQpdXy:GrQo1H2LKvLx+7guycrRIDIFPl0oT0hd","tlshash":"75f28354b2a004a107cfa35d9877030f323b10da971d95ecb66c9ddd59a8f6912b3bb8","size":36124,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.801308Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/iWebImage.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da776842867c45e0003be006700b9754","sha1":"4395f0fba309a8dc23f58576695ee44c181e89ed","sha256":"05e4ddd601709540f2b0dada74189eea92a149725f250fab10b365b23cad78ce","sha512":"7d13062a751505f46c6e78ce89cbe35d36f5f6db59dd1e7fd04b80f7aaf47077e6635790b095305c4717e069dad4c1a1d34fab13293a8a2bccf486aeb10682e6","ssdeep":"768:XGYIM4JDWywKKEKIAup19ZBKvtt+9wE8O6odJltximyDovVFc+/TmBNzf9LDcnSI:XGYIM4JDWKrKDuVKe9z8O6oblimnVFc4","tlshash":"5303e9e8323220abbac7d34e48af0a08393358434647d75db92d90c8d9fda85547eb7d","size":39662,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.803227Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/006_Let%27s%20Pretend%20types_Sharon%20Cain-Lisa%20Loring-Lysa%20Thatcher.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/006_Let%27s%20Pretend%20types_Sharon%20Cain-Lisa%20Loring-Lysa%20Thatcher.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 39527\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, PhotometricInterpretation=RGB, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2011:12:20 08:43:26], progressive, precision 8, 232x300, components 3","md5":"4ee00e88d4382dbb482f18e509ae06eb","sha1":"569e2f481025e6403fa365050e8590fa04aca3a6","sha256":"ffce1e64c58f749523ff91cedf6245d6b18613285475a0c9ac68af4eddbc9f5d","sha512":"f943f4cf579f6c2bc1bc8595251b55d02ec72d12131de1e34dbfcdef49e293c9ede6672a84ba944c7307fe94b92b7dae8fb87847b83d939aac8b71108e6c100b","ssdeep":"768:RYyEv1g8Bdq5LHfgMNiP9W5D5chCPXiSylAv7goVWfadpOGAjdo+S1gS7jvmfi+7:R/8+F/gIiI5mhCPXh37gVkv0dQS+vmfp","tlshash":"2403f19b9a4c5787c1a8ea3548d3a73335373da92772622770b427d98cc40e736852eb","first_seen":"2025-11-24T03:12:22.735297Z","last_seen":"2025-11-24T03:12:22.735297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/feed.xml","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/feed.xml HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, text/html, application/xml, text/xml, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-Prototype-Version: 1.6.0\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:46 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5522\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5522,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"f6eb8080dd60a6398db5cf5670e507e7","sha1":"181df68602c03a31d081b14c5f5c0e2c55f2e98e","sha256":"0c9316d816b875701d334a8c79a226cd219f6aa4987a0d33bbb4073afb2d0fce","sha512":"2d19b336e8018e17a34668f080fc235f018811c68841611ce5973ae50336259f54481b746c2d2f68f02859368c4f1bb117386328577208033c4ab5c78cf5659e","ssdeep":"96:BNHq0i77XhOCioSm7xiVQDweiqXCnniHuoYiQFi0TeiKixplO6PfiW9vgoiQehoG:/Hq53hcO7MewbFnivYiQQxinBO6PKugF","tlshash":"53b16e70c4e8ba65d53046951c807d8565c9e1bec3cf4798a48a1fad8486fb3c0fbba7","first_seen":"2025-11-24T03:12:22.737988Z","last_seen":"2025-11-24T03:12:22.737988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_6.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_6.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 111\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 211 x 4, 8-bit/color RGBA, non-interlaced","md5":"ccf088f1e029a2e3ab6ef12680a38a1f","sha1":"5dd900fe19d0a0d34af4c009c20d3f9cf116104f","sha256":"eddd0f7375daecb1f850ee3422ca22954a89bd64823494cfcaf00ce038920dec","sha512":"a43a18f33e18a15fd9306afb127531617b4b09c14a4d9f002ffa43295a1d422d5bcb5b724513d09db3fe3bf185d2d87134a15a00497cb20ffdf02ba23f35be7a","ssdeep":"","tlshash":"8db092e2b794ae68cac91637d6ab1159a821140c01612608b084a6652ab212881846a9","first_seen":"2025-11-24T03:12:22.740809Z","last_seen":"2025-11-24T03:12:22.740809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_4.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_4.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 155\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 312, 8-bit/color RGBA, non-interlaced","md5":"06b8b9c7b7ce22e983bf7df71cd60dd1","sha1":"9239e5e52686231ff36cb71abbbb6a5c73b0ff1d","sha256":"2236fdae731052603273de2fbfe7f02a0af0bf13efc23a2f49163f0387745f39","sha512":"316e63366e6d5a4ec6d0c15b524a1358f932c072631a513ae91507e668938f2b4feeb120e091ec22a0b6cf2f36517763fc166957dd6f9af1ef62d4af5e9ca85b","ssdeep":"","tlshash":"9cc08cdaf96afa35ed087db649a826029a2002200033620510ac88326e958f264e871e","first_seen":"2025-11-24T03:12:22.743481Z","last_seen":"2025-11-24T03:12:22.743481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/P1130464.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/P1130464.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34595\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34595,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 180x180, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, manufacturer=Panasonic, model=DMC-ZS3, xresolution=128, yresolution=136, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2012:03:27 14:04:05], baseline, precision 8, 294x275, components 3","md5":"ab285e578b29d7b271f5f339120cc7bb","sha1":"8d79b73893e4441ad16b8405f6ee50357557b986","sha256":"75e9b06d02e48931b79e0a5cc0fbe0785e836971bae3b57ff85e6c04efcc7e4d","sha512":"56377e7942d5dff4d1b5e56c1fd7bad20d2c8999c5a2a0f1320bce8a4fa2abb1f91fbeaee30d327b0a67574faaeaac635dfe9ba3fd0ee47d466b37129e0c9a69","ssdeep":"768:RYy1IP+0SyfieuJ/6Ghu2M7tjV29cWFcHBHLuldJbxPcngso:RRIr1ie6AKcWFchr2jyo","tlshash":"22f2e0671fa3e142dd34de7544e386b3f2f0b5ec9f67270455a06a207a426e26dca02e","first_seen":"2025-11-24T03:12:22.745961Z","last_seen":"2025-11-24T03:12:22.745961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/Welcome.css","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/Welcome.css HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13519\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ee89ac21679b10fadb6dbf236d5a3621","sha1":"8e9e2669f27f9807b4acd3e78dffd7d42edee27b","sha256":"8ebbb6f1fc01bcaa88dc27828084c3d11e1719a36fee37d725d3b5d46b145fff","sha512":"f769e73b4f4ec6faad430b37be9c1708544adcc6540eb8c72bd2a78e048c951e5ff9d524d80591a11e2c773a68858588fdac2df3baa8243320bf46b7601fce5f","ssdeep":"384:SLn6iHvC1IWMiIoI7IqRbRNiIJiUiIIgdhwhiN/QEC:SzVPS7bfE95yLn1ouwQEC","tlshash":"e05275d79b135400f8439ca86baa2794732a0a4b9e0fdc65bbd03b1dcf551e8a3d274d","first_seen":"2025-11-24T03:12:22.748568Z","last_seen":"2025-11-24T03:12:22.748568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/PhotoGray_nav_bg.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/PhotoGray_nav_bg.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 659\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 702 x 40, 8-bit/color RGBA, non-interlaced","md5":"80ce249aab6fdeb101ffaca384650d26","sha1":"836625df1a1862baa5b3c5d7c6b9fb1e3684104f","sha256":"ee3ce34b34ad75948b072f758369374e053b102afd058e2c7b847894f23ec739","sha512":"d475849dd9311cef7d01917b610f834d8a5dee8928bc075622aeb2823138b1153b8cc9325216d70adbc1d0f0873865ac98435d88f97e7865d7a3c6139b10dfe4","ssdeep":"","tlshash":"f301f049c761a2bf7926c130b46109ab44068c3bb1adce0011cf311fab57fbc2e35c62","first_seen":"2023-07-16T12:07:35Z","last_seen":"2025-11-24T03:12:22.750656Z","times_seen":5,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_5.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_5.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 79\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 4, 8-bit/color RGBA, non-interlaced","md5":"bc8b7cf2bf4cc468ef1c00a981e41cd3","sha1":"fc57b35426655581bb04f6d53b0e6cd8133116f0","sha256":"c355e3ac8e906b5a1fd5d0b0dcf9ba2cbce4b144fc6525cec843d7f00e7fca80","sha512":"77aca6734d78c733881fd01a1b69e4ccddebf263b40c89d5ec73cc0f5203c607ec7f6838631fc127943a122f733ce5b781310f09cebdeb9cc0647d184e2410aa","ssdeep":"","tlshash":"10a012c546504879c6044033891e9010e83a219400130408210158f4610290405a5352","first_seen":"2025-11-24T03:12:22.751608Z","last_seen":"2025-11-24T03:12:22.751608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/Darkroom_spotlight.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/Darkroom_spotlight.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 144281\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":144281,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 700x700, components 3","md5":"8eb9a62716555a8ce9ff4c689d5b8b2f","sha1":"55965fed7a1bab026dff77dd10c6664a97767e03","sha256":"e22f9de4f65276adf1d67c0822f654ab634652e5f52ee8506be46c7f34d34922","sha512":"79e84373f90d9212dfde5b7b508831f31a167f39fdf36a587cab45c48db035374b5f161cc50d652434af37c3b4d82a72c8457d8ebc37e68436c02628411a8f61","ssdeep":"3072:pjM9spcsETauGskyydmmLD/ir7k7hooH2BQvATMZOBT:dMsmlJm5Lms7HHqbMZOBT","tlshash":"67e3020b39e75e4922db7187ea3707e174c60bb860cc94a47e5899e1bab12fff436501","first_seen":"2023-07-16T12:07:35Z","last_seen":"2025-11-24T03:12:22.75358Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":929,"dns":0,"connect":0,"send":0,"wait":117,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/JB%20COVERS_001.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/JB%20COVERS_001.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 35817\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35817,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, PhotometricInterpretation=RGB, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Macintosh, datetime=2012:12:17 18:07:38], progressive, precision 8, 225x300, components 3","md5":"6d2271fab540bad51033a4b50149cc21","sha1":"5ee668f21598d6c71beba9dcc3cc84d556d07889","sha256":"d44105c07c99f9da548eab0a6f47b20d476780953e6d20e708929ccd8180a897","sha512":"736172869496632f1abe2acb6fe8ffaecf3bc21317f4093e9139bc55f8d503db63b066c580ed3288fd9da3623d3d1a6566dd56c22a2824fb4d857217ec7b678b","ssdeep":"768:RYyVZDb5PsxS3batisCFaNCZFSy951wBmU/jOfQ7QeMVwkOEv:RDv5PByCMCZ795WXOfQ7QeMVwc","tlshash":"87f2f0279ad2e407f0a0e73ea7b6e27897a8561c5711a64301e9ceb43f1d0d9e9c631c","first_seen":"2025-11-24T03:12:22.754563Z","last_seen":"2025-11-24T03:12:22.754563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":124,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/PhotoGray_bg_c-1.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/PhotoGray_bg_c-1.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 41532\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41532,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 700x189, components 3","md5":"47efd6742269efc52719092da1ec04d6","sha1":"9354b7b5955d14a8ce0f858c8e33410f6bc8a4c6","sha256":"d195af6b7bbcaf574a98da2a263a662d567e71868df03a969b274590b058f5d4","sha512":"366bfb838f64949559ce7728b46d12b61221d2356f87f51dc8badb614dbda9cfb7d28f87b33a1d74936302e6601a9e7f71362e6b7cbac2da643dadaec7d9f6a9","ssdeep":"768:NqL+xnkL+xnkL+B3Lddududpdeev36XxPklDx4kYZ8+ukYB3nv3Zuuuuu9xz9Pxl:NQC2C2s3LdAAHdeeCxgx4kE8zk4nfZu5","tlshash":"9613c03fa1d96ef0ccb92469fa7f6225ea4f4fb52b8d201b0e270965e5381b1c0d106d","first_seen":"2023-07-16T12:07:35Z","last_seen":"2025-11-24T03:12:22.756461Z","times_seen":5,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":131,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 139\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4 x 312, 8-bit/color RGBA, non-interlaced","md5":"4a2d42472db610debffcb6c1f179b907","sha1":"c1dba3fa1f04c51fbe6e0db54d236dbfb61a5afd","sha256":"87dc7cc251cb8b589ff2ce9f9330fbeea731f7c1390ff4ef9642466688894b73","sha512":"6f45b5af3f5c681c09ce414773da8947ad49b70265de88f5eeb38f54f8d3b81d1237a014b64818935caa0847cb2d76b390010ed208a80ed282bef6531b26c9fc","ssdeep":"","tlshash":"1fc02bdb0343c870c506f36510e78463c432e83c00d50246120414721ff219840c0505","first_seen":"2025-11-24T03:12:22.759903Z","last_seen":"2025-11-24T03:12:22.759903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_8.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_8.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 95\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 134, 8-bit/color RGBA, non-interlaced","md5":"026c8fcbc878414e6b11396d0de5d566","sha1":"c9c6e94eac37a306e20731cebd56feffda544744","sha256":"f379e8ecd6fce3509acad8fa135a3b3c11a67924361f32fd7599518c0da18b17","sha512":"6c8694082604414170b8c40eb7150b57b037a58b0e06ddec1cd5f66c8ed99b3e6099c0e2acea216dba3cfcf707c5dc163f129442e8688b442924df723b908498","ssdeep":"","tlshash":"edb012f5b6d00978d749017743e90001e43081420a12d30e084f953d734378454d42a6","first_seen":"2025-11-24T03:12:22.761866Z","last_seen":"2025-11-24T03:12:22.761866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_11.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_11.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 77\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"2ffa4051f2ceda46da5c7c635612dc62","sha1":"113e8cac675fb3dc741533f88496cd3ff56f0a4e","sha256":"5a2ec9c8fbea3b02540b6ce7d6e291eab7d01960bc2930e7c5fb0c131a93f21d","sha512":"beb28c8edaf9a1f630ce66264b64753f18f6501241014034e06cc2b05983f952b3f3e95de12d0af654cc9e2d5422c737ef79a30adcd37f95869799c0182afd3a","ssdeep":"","tlshash":"5fa024f1d3505c3fd51503370d7c0510f43001cc0303050c00c17f35351110440541cd","first_seen":"2025-11-24T03:12:22.763751Z","last_seen":"2025-11-24T03:12:22.763751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_12.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_12.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 95\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 134, 8-bit/color RGBA, non-interlaced","md5":"026c8fcbc878414e6b11396d0de5d566","sha1":"c9c6e94eac37a306e20731cebd56feffda544744","sha256":"f379e8ecd6fce3509acad8fa135a3b3c11a67924361f32fd7599518c0da18b17","sha512":"6c8694082604414170b8c40eb7150b57b037a58b0e06ddec1cd5f66c8ed99b3e6099c0e2acea216dba3cfcf707c5dc163f129442e8688b442924df723b908498","ssdeep":"","tlshash":"edb012f5b6d00978d749017743e90001e43081420a12d30e084f953d734378454d42a6","first_seen":"2025-11-24T03:12:22.761866Z","last_seen":"2025-11-24T03:12:22.761866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/iWebImage.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Scripts/iWebImage.js HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 06 Sep 2019 23:00:21 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 39662\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1724)","md5":"da776842867c45e0003be006700b9754","sha1":"4395f0fba309a8dc23f58576695ee44c181e89ed","sha256":"05e4ddd601709540f2b0dada74189eea92a149725f250fab10b365b23cad78ce","sha512":"7d13062a751505f46c6e78ce89cbe35d36f5f6db59dd1e7fd04b80f7aaf47077e6635790b095305c4717e069dad4c1a1d34fab13293a8a2bccf486aeb10682e6","ssdeep":"768:XGYIM4JDWywKKEKIAup19ZBKvtt+9wE8O6odJltximyDovVFc+/TmBNzf9LDcnSI:XGYIM4JDWKrKDuVKe9z8O6oblimnVFc4","tlshash":"5303e9e8323220abbac7d34e48af0a08393358434647d75db92d90c8d9fda85547eb7d","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.803227Z","times_seen":71,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":237,"dns":1,"connect":120,"send":0,"wait":122,"receive":120,"ssl":124},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/BOOKS_ACADEMY_002.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/BOOKS_ACADEMY_002.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34435\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, PhotometricInterpretation=RGB, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2012:04:03 17:26:48], progressive, precision 8, 216x316, components 3","md5":"da79df00707804f981aaa02a724a4d7c","sha1":"92b31a2a03ea0c7e22700aefdd3027ea6a89aaea","sha256":"6b1981f14abbcc1b204990fbc2d64cc56e1732c3e3b02b6b270c00c353da576c","sha512":"4dbd41053241b44a7d56838a62c400a69794ad0d0bb77c9fc422727da798e03d4818744c58e2d857aaba504d56bb80a650b4829bd118cf9ea63e35ef5b6a62e3","ssdeep":"768:RYygzxlho8D4+AcbB9PvD+UZiuq+YR8tm00qZAjn:Rklho8vxVD+UZNymtfxZAb","tlshash":"7df2e13bbf25e99bd630da787cf4733b12edc12ca722725b74f0249493056a20e6e495","first_seen":"2025-11-24T03:12:22.768201Z","last_seen":"2025-11-24T03:12:22.768201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":613,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/shapeimage_1.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/shapeimage_1.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8843\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 702 x 94, 8-bit/color RGBA, non-interlaced","md5":"e4f0919107da532d76595628a6461d42","sha1":"b290975bbc225795025775e496cda791158519e8","sha256":"aff84694d30df2aae29f9ce50f066d164296e6fd80f3fe0f680ea108d2bf5ec6","sha512":"4fabaa3720426048694dc7164e4331a2ac9ef8c264fb55697cc14393aa0eedfced3a1a9cb82fb909173ee6c1fd7eea4eab78fe865ee56ef72abed06b180f0807","ssdeep":"192:DJMghXA3EfJ4lZyYxJ8v1ab53aPy55iMR8uLAH1X+exseXa8tkBb6QgRyQ:KUx4l1b8v1g3aKJR8uLyX+UsYa8wQRyQ","tlshash":"6a025a8315d5293b8e47ec7d8a915f083daa415115caafb1cf6cd69c309f0b40d9b98f","first_seen":"2025-11-24T03:12:22.770304Z","last_seen":"2025-11-24T03:12:22.770304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":607,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/favicon.ico","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 22 Sep 2008 07:59:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 894\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"e97a7b6af86927e9ee642d2490da1062","sha1":"4b16a81cf9ba97111fb297457f80d28640625d7d","sha256":"b8fc7b5b0931f0f0bdab693c310e21a503c4a25c9426e427f9de25cddd67e212","sha512":"426638f920c32d08febd21f6be91d553216d5bd7b03a83c70f25c21c184fafa08cb31c66278370f396f9097645943720a477b5ace7f7d2bdcd7c0caca89424d7","ssdeep":"","tlshash":"3911ff023503c50df1ee40b19e22d9c9481bbf8aebb0211235d1778fbbf51823928318","first_seen":"2025-11-24T03:12:22.772551Z","last_seen":"2025-11-24T03:12:22.772551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_2.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_2.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 111\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 211 x 4, 8-bit/color RGBA, non-interlaced","md5":"ccf088f1e029a2e3ab6ef12680a38a1f","sha1":"5dd900fe19d0a0d34af4c009c20d3f9cf116104f","sha256":"eddd0f7375daecb1f850ee3422ca22954a89bd64823494cfcaf00ce038920dec","sha512":"a43a18f33e18a15fd9306afb127531617b4b09c14a4d9f002ffa43295a1d422d5bcb5b724513d09db3fe3bf185d2d87134a15a00497cb20ffdf02ba23f35be7a","ssdeep":"","tlshash":"8db092e2b794ae68cac91637d6ab1159a821140c01612608b084a6652ab212881846a9","first_seen":"2025-11-24T03:12:22.740809Z","last_seen":"2025-11-24T03:12:22.740809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_15.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_15.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 77\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"2ffa4051f2ceda46da5c7c635612dc62","sha1":"113e8cac675fb3dc741533f88496cd3ff56f0a4e","sha256":"5a2ec9c8fbea3b02540b6ce7d6e291eab7d01960bc2930e7c5fb0c131a93f21d","sha512":"beb28c8edaf9a1f630ce66264b64753f18f6501241014034e06cc2b05983f952b3f3e95de12d0af654cc9e2d5422c737ef79a30adcd37f95869799c0182afd3a","ssdeep":"","tlshash":"5fa024f1d3505c3fd51503370d7c0510f43001cc0303050c00c17f35351110440541cd","first_seen":"2025-11-24T03:12:22.763751Z","last_seen":"2025-11-24T03:12:22.763751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_13.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_13.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 77\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"2ffa4051f2ceda46da5c7c635612dc62","sha1":"113e8cac675fb3dc741533f88496cd3ff56f0a4e","sha256":"5a2ec9c8fbea3b02540b6ce7d6e291eab7d01960bc2930e7c5fb0c131a93f21d","sha512":"beb28c8edaf9a1f630ce66264b64753f18f6501241014034e06cc2b05983f952b3f3e95de12d0af654cc9e2d5422c737ef79a30adcd37f95869799c0182afd3a","ssdeep":"","tlshash":"5fa024f1d3505c3fd51503370d7c0510f43001cc0303050c00c17f35351110440541cd","first_seen":"2025-11-24T03:12:22.763751Z","last_seen":"2025-11-24T03:12:22.763751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/057-Conn%20Covers-Annette%20Haven-.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/057-Conn%20Covers-Annette%20Haven-.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 28129\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":28129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, PhotometricInterpretation=RGB, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2011:12:20 08:43:38], progressive, precision 8, 230x300, components 3","md5":"e9def581a181ce9af791df6ee50e8caa","sha1":"25472f76ad239ca3b60369906e30f6145b4f42d3","sha256":"6235ba343369492635acef426038f72f2b78b99fb45845a5f22dc941578f8880","sha512":"19c3d6de4c71a051c9c35502b00e789bdf72dc107cdc4f9da4655eb50f4b295ec04af97d6e3306bf1ff5ba60a66e1a9cef31d3531647e59f1d68eb75e83bf2c8","ssdeep":"768:RYyEjawq9LtqJYZeTX6pOd/RgN5luROtm:RCvGtq3zeOdRgNjm","tlshash":"aac2e0f30f7ad823f61070b075a5677a96d8349c7123ca9a34c885ba9d839c3478f087","first_seen":"2025-11-24T03:12:22.774575Z","last_seen":"2025-11-24T03:12:22.774575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":117,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/PhotoGray_browser_bg-2.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/PhotoGray_browser_bg-2.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 37649\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 700x189, components 3","md5":"0426f0edbe56f9851e2e8f0f907614e3","sha1":"2b1cc805985b0ceb8cbeedf3345cc057034e56ee","sha256":"11147720896d6cfa2c710df2a8d2c3d44bb32e68432da698aa3b594f054f5e42","sha512":"e30a1c003d415f7fcb1920e14d99a61e7c3de412b4fa35ca668c38a7c33d4ca25285185a1dbef3dec8861d9dd129418bf26b578d42a0230c33731dd7bcbf6cd7","ssdeep":"768:Ni9h2S9pls/UuB5vmcmcmOjhfzlqagj8UfAGAGCFA:NiH2Sv2NNj2u7LFA","tlshash":"e1f2bfceef390033086858f9c9dee12312b49ad72c59d907a76911747e702f827cade5","first_seen":"2023-07-22T22:53:42Z","last_seen":"2025-11-24T03:12:22.77667Z","times_seen":4,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_10.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_10.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 107\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 429 x 2, 8-bit/color RGBA, non-interlaced","md5":"3524dc2122665a6c9d1aaea2fc2eb4f7","sha1":"266ebb657c8144092d8891fcd1a231ef87d852d3","sha256":"f14f1644d8999f984d076edabc0ffa9f6cb4cc734fd6c4baedba98b56ac445b6","sha512":"39eabdca945d357c2d14c224438e9bc4710f5eb4c71257ea6f198316a23c59d8613b832f066a602e3bc06f6533c6884bbcafef114a6539d4fe7273da673844df","ssdeep":"","tlshash":"ccb012d7bfe0d96ce2b77317da5809346e771210726016446409d33d3819b5a8dcd701","first_seen":"2025-11-24T03:12:22.779599Z","last_seen":"2025-11-24T03:12:22.779599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_14.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_14.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 107\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 429 x 2, 8-bit/color RGBA, non-interlaced","md5":"3524dc2122665a6c9d1aaea2fc2eb4f7","sha1":"266ebb657c8144092d8891fcd1a231ef87d852d3","sha256":"f14f1644d8999f984d076edabc0ffa9f6cb4cc734fd6c4baedba98b56ac445b6","sha512":"39eabdca945d357c2d14c224438e9bc4710f5eb4c71257ea6f198316a23c59d8613b832f066a602e3bc06f6533c6884bbcafef114a6539d4fe7273da673844df","ssdeep":"","tlshash":"ccb012d7bfe0d96ce2b77317da5809346e771210726016446409d33d3819b5a8dcd701","first_seen":"2025-11-24T03:12:22.779599Z","last_seen":"2025-11-24T03:12:22.779599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-24T03:11:54.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 21 Aug 2024 22:05:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 353\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":353,"size_decoded":0,"mime_type":"text/html","magic":"XML 1.0 document, ASCII text, with very long lines (353), with no line terminators","md5":"2b914cbed1082c33b1e8c1548cf9577b","sha1":"a954b568ce1079757db87ddd69f0dd2d6825b7dc","sha256":"8f74312351b115d9e9a17a7ded72ef89009c9d2772217bd325c1716675be6c28","sha512":"914b08a97677905982a965bedc4792d1ff7bba9362c9001ebf7bb413c1e0696f613e3d494828bad02f6c85e9f6feba4d58bd5da99a9bcfa7dfa30b40e6b99baf","ssdeep":"","tlshash":"06e020eda2649445e5a1eb9111fbf255bd96d1473cc0015dfcd024d3805376ad60739b","first_seen":"2025-11-24T03:12:22.781937Z","last_seen":"2025-11-24T03:12:22.781937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":386,"dns":136,"connect":120,"send":0,"wait":124,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/iWebSite.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Scripts/iWebSite.js HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 06 Sep 2019 23:00:21 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 146115\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":146115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2247)","md5":"5533f353620aa11d791ffa24bc943823","sha1":"cb2eef7efb4b8a0f790ea9355ed01d23d38dfebe","sha256":"53955fb279918ea741b55c650608dd7e4c53d82f486f569ccccb967becb9cca4","sha512":"edf3e3b2f24190a1772aa2f0ea6d6a47216b590febbcfa93c1e4adc3663e9d8fa6670a17ec6df07da3e8bd386caff25c07b5c092b278cd36483d11eaaba9fc0c","ssdeep":"1536:DDCMlIFobplCW/xmjOz5fZcW15Zs438gaZAD+Fx7b+AagMqewexKK+hYEeWwOkMg:DDCkhplCWX1/s4ZaZA3ZwL6TGz/EljSq","tlshash":"8ce3f8d83682317a47cf627a146f124cf23b4445880a9094f578c8e5aeb9f59b13bfbd","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.800551Z","times_seen":80,"resource_available":true,"data":null}},"time_used":944,"timings":{"blocked":231,"dns":1,"connect":116,"send":0,"wait":121,"receive":351,"ssl":122},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/Widgets/SharedResources/WidgetCommon.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Scripts/Widgets/SharedResources/WidgetCommon.js HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 06 Sep 2019 22:58:59 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36124\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36124,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1710)","md5":"eea3a0a653317cac353c3ea52b25d18c","sha1":"717ecc5c1f206de53df96c29fe67480ebad4e893","sha256":"410ffb714e6dd0738fdaad21e5d385ee3f839f04885f4380d87e8796aa5da460","sha512":"2f0d148745ce92c60a86929471654afc910c1fd3528388e7c4920c932e62e5dce0652a5cebf0056a12a01252703f56840f0a60868c7db26adaeb17ae6cf7ac93","ssdeep":"768:FMDUiQo1H2LKvLx+7guycrRIP7IFPl0oT0hq//ShQpdXy:GrQo1H2LKvLx+7guycrRIDIFPl0oT0hd","tlshash":"75f28354b2a004a107cfa35d9877030f323b10da971d95ecb66c9ddd59a8f6912b3bb8","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.801308Z","times_seen":66,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":231,"dns":1,"connect":114,"send":0,"wait":119,"receive":115,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_3.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_3.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 79\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":79,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 4, 8-bit/color RGBA, non-interlaced","md5":"bc8b7cf2bf4cc468ef1c00a981e41cd3","sha1":"fc57b35426655581bb04f6d53b0e6cd8133116f0","sha256":"c355e3ac8e906b5a1fd5d0b0dcf9ba2cbce4b144fc6525cec843d7f00e7fca80","sha512":"77aca6734d78c733881fd01a1b69e4ccddebf263b40c89d5ec73cc0f5203c607ec7f6838631fc127943a122f733ce5b781310f09cebdeb9cc0647d184e2410aa","ssdeep":"","tlshash":"10a012c546504879c6044033891e9010e83a219400130408210158f4610290405a5352","first_seen":"2025-11-24T03:12:22.751608Z","last_seen":"2025-11-24T03:12:22.751608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome.html","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-24T03:11:55.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome.html HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 19812\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"iWeb:3.0.4","description":"iWeb is a web site creation tool.","website":"https://apple.com/ilife/iweb","common_platform_enumeration":"","icon":"iWeb.png","categories":["Editors"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19812,"size_decoded":0,"mime_type":"text/html","magic":"XML 1.0 document, Unicode text, UTF-8 text, with very long lines (1448)","md5":"95ae511bd1d731f3187ea03aa948dad2","sha1":"f3fc9537716fa155a3aaa94f8b8706e0ea64edd0","sha256":"99c1b899ed315e36c624fe2c2b014521269f8f3762af3b57e750ec1f9b3f159c","sha512":"424fca962b1876ac5c67ef642427654b49d36b8b149e9680e5f5f1e33920f27db161663b1d1fb4c24e384f473746648788071c4bce3a489fdda1a5a5f5add5e1","ssdeep":"192:OJce2QsCN0BG2y2pSLS/bUM61zcOc/acKTRXbQsD+E4BizFGmxWUQc3+SlwxLM31:42QLqGv2wu/bUM61fRiE40B28++b","tlshash":"2392512285b5a4378047e0e0eaa5bb1f7b11ca0bd747180cb6fc26e5df8ac64cc575ac","first_seen":"2025-11-24T03:12:22.785511Z","last_seen":"2025-11-24T03:12:22.785511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Scripts/Widgets/Navbar/navbar.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Scripts/Widgets/Navbar/navbar.js HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 06 Sep 2019 22:58:59 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5986\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5986,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (376)","md5":"bf8daf080e98e7a2b961122f039ab210","sha1":"267026c091fef34cfa489e1655d3413788c379a7","sha256":"02d67fa8778e6e35e14548d723df28ab60ecaee42eda83796621531921181eab","sha512":"4e32a675b3222d6007e37cf0eabde4d8d9e835dd0d6c405aff6399270603388a1b7e2bcc1c08e2ac7baf0088080955e00cac3dbac74ae571a1f605790bd5cd74","ssdeep":"96:IjsNQlSL72uewkH2S5Os6IIYDH0wK+5agQAvd6NmYc+26xT+qxBLwu:I9SL7Pf+IYDH0NNmY1BLwu","tlshash":"b2c1b44533e982b6cdcd3224386ba2a8b2bb346cd06dd015544dd8d624b8ed1716feba","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-03T22:17:15.792402Z","times_seen":60,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":239,"dns":1,"connect":122,"send":0,"wait":124,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/Welcome.js","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/Welcome.js HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:55 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2552\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1314)","md5":"f81e867dec8203d70ec3cd64cc020a14","sha1":"710d15aa493525c1a455c32f2a3b4bd94b5f811a","sha256":"ec7990ef9629bb1e153e58bc45e9f8a9e80b4e419ca47498dbba2f28703daa71","sha512":"ced8fea10a33ef47812250572328179faff1faaae124b04674a2c0ebe17039f13fd2d56397c4727efc0665458a2563f9aa0e652b0e625313f8f28e1094975495","ssdeep":"","tlshash":"1a512a35d708bd2260b3737a72e727455ca2e10ef1a57b662a94cf3c9180643e172e75","first_seen":"2025-11-24T03:12:22.787964Z","last_seen":"2025-11-24T03:12:22.787964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":253,"dns":0,"connect":128,"send":0,"wait":131,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/WelcomeMoz.css","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:56.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/WelcomeMoz.css HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 128\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"02858a03b3acf9d4f46ba99d1773814f","sha1":"87c633d6df8ba6ee9d9d73ea391b9c83b95c15a0","sha256":"883031cc49e26dd4e3d61bf8322feb0b4f2bff5a9e56782a8f12a4b91a1d9400","sha512":"fff5026771b753e9dcc819402f657ff4d3a3ae06f294b957416dcddc1bb82ff44157a5e65d5c96d96969b0f2b00a65e262863ae6ddefd2ade7e6c522581cb8d7","ssdeep":"","tlshash":"7cb09b459b7747944d5542440fc173a12091407341d5fdb4fc069e549f1e5c8e5c166b","first_seen":"2023-05-01T15:42:51Z","last_seen":"2026-04-03T22:17:15.780397Z","times_seen":65,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_7.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_7.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 78\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced","md5":"1cd8e17957d4cd692850f590128ebabe","sha1":"2e7d976286463e6c414bcaa73e48737d6787b63f","sha256":"82e8394a3122deb48992b7c6df384cba4b04bc389b776f3d26100c390815e091","sha512":"ab6c66c912814eb32b0605ec6d6c0e709caa58162852cec3d43b181c60d4b89e19c3477f1706f165b9c112ee43e18a5d3c7bebadb2374a44bf91d0009cd798e3","ssdeep":"","tlshash":"19a022c332e2ac38cb8a02338a2bc020c83a2f0808020c0c00cee3fc2c220bc00803a2","first_seen":"2023-07-16T12:07:35Z","last_seen":"2025-11-24T03:12:22.790493Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_9.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_9.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 77\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"2ffa4051f2ceda46da5c7c635612dc62","sha1":"113e8cac675fb3dc741533f88496cd3ff56f0a4e","sha256":"5a2ec9c8fbea3b02540b6ce7d6e291eab7d01960bc2930e7c5fb0c131a93f21d","sha512":"beb28c8edaf9a1f630ce66264b64753f18f6501241014034e06cc2b05983f952b3f3e95de12d0af654cc9e2d5422c737ef79a30adcd37f95869799c0182afd3a","ssdeep":"","tlshash":"5fa024f1d3505c3fd51503370d7c0510f43001cc0303050c00c17f35351110440541cd","first_seen":"2025-11-24T03:12:22.763751Z","last_seen":"2025-11-24T03:12:22.763751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/JB%20COVERS_047.jpg","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:55.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/JB%20COVERS_047.jpg HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:56 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 35131\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, PhotometricInterpretation=RGB, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Macintosh, datetime=2012:12:17 18:08:13], progressive, precision 8, 232x300, components 3","md5":"ae258d9721cda5512ceb3acdda56c85c","sha1":"291a42e4e4dacefbf6d32f6f6b496d4d1de1cacf","sha256":"fb02a0057ad461a9372d3ecfcf1b32887e76cf852c92abe629469be2ec9ef70e","sha512":"9c8417e5160c660b537c2313dc05b1a190a7d1d2eb7e3f7c1a501d81eeee6990e3ba6357a0b1e8ef7706a110c1cdb01103bbc7b4fce84a221427a3236440c4fb","ssdeep":"768:RYyBPu0Uv4UKhxi1c4cTe1SFUUEacq3hOl+Z/7:RQHKhsciCzcUOQd7","tlshash":"ecf2d0ffee2b920bc809dab564f933b475a0b79d8664f3624be405b441d1584dc8e1f8","first_seen":"2025-11-24T03:12:22.792918Z","last_seen":"2025-11-24T03:12:22.792918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":124,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paulsfantasy.com/Pauls_fantasy_site/Welcome_files/stroke_1.png","fqdn":"paulsfantasy.com","domain":"paulsfantasy.com","tld":"com"},"ip":{"addr":"66.115.166.239","port":443,"asn":46562,"as":"PERFORMIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html","date":"2025-11-24T03:11:57.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paulsfantasy.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 06:24:36 GMT","end":"Mon, 29 Dec 2025 06:24:35 GMT"},"fingerprint":{"sha1":"1A:2E:C7:95:6A:96:06:30:97:F5:76:BD:E7:47:76:A7:A1:9A:79:D0","sha256":"C8:DB:A5:49:5B:43:B4:0F:62:06:5D:26:1B:36:9F:FA:EF:F6:E8:57:C0:EC:82:CD:1D:7C:D8:FB:3C:51:E1:2B"}}},"request":{"raw":"GET /Pauls_fantasy_site/Welcome_files/stroke_1.png HTTP/1.1\r\nHost: paulsfantasy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paulsfantasy.com/Pauls_fantasy_site/Welcome.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 24 Nov 2025 03:11:57 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 27 Jul 2019 00:30:47 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 78\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":78,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4 x 4, 8-bit/color RGBA, non-interlaced","md5":"1cd8e17957d4cd692850f590128ebabe","sha1":"2e7d976286463e6c414bcaa73e48737d6787b63f","sha256":"82e8394a3122deb48992b7c6df384cba4b04bc389b776f3d26100c390815e091","sha512":"ab6c66c912814eb32b0605ec6d6c0e709caa58162852cec3d43b181c60d4b89e19c3477f1706f165b9c112ee43e18a5d3c7bebadb2374a44bf91d0009cd798e3","ssdeep":"","tlshash":"19a022c332e2ac38cb8a02338a2bc020c83a2f0808020c0c00cee3fc2c220bc00803a2","first_seen":"2023-07-16T12:07:35Z","last_seen":"2025-11-24T03:12:22.790493Z","times_seen":3,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-24","alert":"Sinkholed","trigger":"paulsfantasy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}