{"report_id":"120222ee-08bc-4fdd-89ec-ddd55b98790b","version":0,"status":"done","tags":[],"date":"2026-10-16T06:30:55Z","url":{"schema":"https","addr":"parik24.express/","fqdn":"parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"amp.parik24.express/","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"title":"Parik24 (Парік24) огляд 2026 - parik24.express: казино, букмекер, VIP бонуси","dom":{"size":113296,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6883)","md5":"0d2b5b615581add570411f43ed53d482","sha1":"2d56c91b3a20456a054de98332fa16783250743d","sha256":"3bef7147f04e234fe3ecd0ac048ef2b333079b3190e1d09468173c798d8b44fe","sha512":"eec06e6395dd9943ec0a3b870f3c99f9501438fb1f43f901f795f5d836bc1014289be07eea48ffb4947fabfdaf8355ecdc2a8e6a0d29a4fc0f5488c5bb3f89a3","ssdeep":"1536:eZ5F4g5A4WR2v+IUWRkSEuWpNjsRI5pOKsYj4K3pBOJfK4QjwZ+yAO86oZzzdaLS:PIbWWWo6jqRKNFcL1efIk","tlshash":"95b3a572914c60bf1107a583f454bf5f38a1c57dfa230715a6a12fee9ee2ca4ee34609","dom_hash":"domhasha9c2b1c1260610df6c0077de09e4365f","first_seen":"2026-10-16T06:31:12.126668Z","last_seen":"2026-10-16T06:31:12.126668Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"parik24.express/","fqdn":"parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":0,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T06:30:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":11,"received_data":271440,"sent_data":6137,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":9596,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-10-13T05:57:02.944305Z","alert_count":0,"request_count":5,"received_data":426207,"sent_data":2465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amp.parik24.express","ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":6,"received_data":4420220,"sent_data":3090,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"parik24.express","ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":1,"received_data":410,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a97c7f9bd1c9bc283d4fa7229eac9a5","sha1":"2f1e03cfa54ed1273f238d1dd29c789f38f31a85","sha256":"8829f20e39153e59529590c5bd33e322d0047402a975d79bca976595e220d0e5","sha512":"d1acb22d2735e373d0e4b9f0a123322f91c3410548e7d72220d9d895da804f94f0aaeacfa2c4bf069ce1bcf5cf42012646e5811e087bbde88af15d0311402171","ssdeep":"6144:1mUSltOu6O7eHkarAYXX3aerh5nbAHXv4:kPikaUArPnbAH/4","tlshash":"5654949db246b0724793b074803f150ae33ba955644a812cf56dead67cbcd8aa037f7c","size":284578,"data":"","first_seen":"2026-08-27T02:29:06.998096Z","last_seen":"2026-10-16T06:55:08.889312Z","times_seen":1152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-analytics-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03cf5adca36594d919134374bfc5bb4e","sha1":"34045094b1e1ec01dc31f6197a0e1fc56ac13db1","sha256":"c490bdaa6f78321ebefa451cbf2e0253ec5a9ce9545d6d7dd49b9ac0efd7c7bd","sha512":"b69e36668ae143e5e31791ca905b4eb8613abbe17c16a9abcc2b592e43e35fc43a00252f58d70ce8f3fbdf0fd30191ff9a3487544a84268f04de127060346801","ssdeep":"1536:xrlh05wY5pnoYNXlQ7qX0KtU9PIqSFYD4SpePVr1:1c5wY5jqqX0Ka9PIpYDJpe/","tlshash":"43b3949db292b07583d3a074852f500af33b7944340b812cf5aae9d6bd7998a6137f7c","size":112728,"data":"","first_seen":"2026-08-27T03:25:16.586269Z","last_seen":"2026-10-16T06:55:08.894897Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29a9ffc92cff2b8ce134c2b286a315d4","sha1":"30d88681d5bf4ac25195905670c04defb2537ff1","sha256":"3bf3d119bd059ea12070169cf17adbbf4f4a90091b0c175df836e71debe5f451","sha512":"0d279c9bd160ba7f9f22d2d2d3eaaaee56e4244b03cd79a3713f5aeb7fbcf0a8439e2fe5d4ce0ea5abc0fbc2f3065644d19d54dad3b0b6aba58ae5a36dd6dc7f","ssdeep":"192:5fQHMOgzKBbnnRrVG4oPPaorO2tHnBAHzMb5F4g5A4WR2vN:l0g2BbnnHOBMzMb5F4g5A4WR2vN","tlshash":"a142a424a54ba2ac130351b484fab906757ecd4fb8104035f0018edecf99e48bd7ba6e","size":12715,"data":"","first_seen":"2026-08-27T02:29:06.990958Z","last_seen":"2026-10-16T06:55:08.878719Z","times_seen":949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f6cecb06196fedf1dc5c1f2b62452f2","sha1":"40623362e2c944c779f6cb22bf0ed33614092f9c","sha256":"d9f2a23aed96b04e277640598b3cc20c88432b11ebbad1cb6830c4e18ec1728b","sha512":"8127cd80ca3794c81818700de641545e15e687aeab24057d412c4b66f3f9856beae9817204f3744a8a83b7004806e22fc3b621eb38ee74c74de770d01b2be36b","ssdeep":"96:/KoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:/KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"bff196dc7ac2b83a5753b4b780af414fa23bb94620ad9120d120f0d83cb995ed633e5c","size":7798,"data":"","first_seen":"2026-08-27T02:29:06.993751Z","last_seen":"2026-10-16T06:55:08.90389Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"Powered by AMP ⚡ HTML – Version 2608131752000https://amp.parik24.express/","filename":"https://cdn.ampproject.org/v0.js","line_number":2,"column_number":283307},{"level":"error","text":"[AmpAnalytics \u003cunknown id\u003e] Error loading vendor config: https://cdn.ampproject.org/rtv/012608131752000/v0/analytics-vendors/fathom.jsonHTTP error 404​​​","filename":"https://cdn.ampproject.org/v0.js","line_number":2,"column_number":15330},{"level":"warn","text":"[AmpAnalytics \u003cunknown id\u003e] No request strings defined. Analytics data will not be sent from this page.","filename":"https://cdn.ampproject.org/v0.js","line_number":2,"column_number":15330},{"level":"warn","text":"[AmpAnalytics \u003cunknown id\u003e] No triggers were found in the config. No analytics data will be sent.","filename":"https://cdn.ampproject.org/v0.js","line_number":2,"column_number":15330}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.595Z","timestamp":1792132222595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Oct 2026 23:47:51 GMT\r\nexpires: Fri, 15 Oct 2027 23:47:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 24151\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-16T08:22:27.728863Z","times_seen":62090,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":52,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;600;700;900\u0026family=Nunito:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.226Z","timestamp":1792132222226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;600;700;900\u0026family=Nunito:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 16 Oct 2026 06:30:22 GMT\r\ndate: Fri, 16 Oct 2026 06:30:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8912,"size_decoded":1386,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1dfafb29dee992b171e17591f7e7fb5e","sha1":"265343571cad26aaf26391db17b87708a0328f30","sha256":"06c1af61421da265dfee7bfbd21a06b6b2d3ad028d90b943c84531a62f3d7e9c","sha512":"51ce562cd2023ff90b46f4f00b6b43b5d6b7789eb805835b8ab5f5327a58666800508528ed972768523ee3d1baa9988f7f653cb10f7ada4b4bd50e5482dbba57","ssdeep":"192:OH+yptkItH9y6ukPkH0yXLkyLHbywkkhJgpg6gMgB:ilXQ5DDeq","tlshash":"79028691041ad500eb432cc267cf7e36ee4ea1103454c579abfd9898acabd272365b1e","first_seen":"2026-10-16T06:31:12.129464Z","last_seen":"2026-10-16T06:31:12.129464Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":37,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.231Z","timestamp":1792132222231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:42 GMT","end":"Mon, 21 Dec 2026 18:40:41 GMT"},"fingerprint":{"sha1":"A3:30:C7:50:21:CB:91:7F:41:4D:44:46:38:A1:4A:9E:8E:E2:2D:DB","sha256":"78:8F:17:49:89:3B:57:A2:20:4E:54:17:07:55:9D:8C:7F:8B:48:A6:7D:F2:B1:9B:03:02:17:B9:0C:77:20:DD"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73084\r\ndate: Fri, 16 Oct 2026 06:30:22 GMT\r\nexpires: Fri, 16 Oct 2026 06:30:22 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"75269fc1352e4d45\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284578,"size_decoded":74698,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"7a97c7f9bd1c9bc283d4fa7229eac9a5","sha1":"2f1e03cfa54ed1273f238d1dd29c789f38f31a85","sha256":"8829f20e39153e59529590c5bd33e322d0047402a975d79bca976595e220d0e5","sha512":"d1acb22d2735e373d0e4b9f0a123322f91c3410548e7d72220d9d895da804f94f0aaeacfa2c4bf069ce1bcf5cf42012646e5811e087bbde88af15d0311402171","ssdeep":"6144:1mUSltOu6O7eHkarAYXX3aerh5nbAHXv4:kPikaUArPnbAH/4","tlshash":"5654949db246b0724793b074803f150ae33ba955644a812cf56dead67cbcd8aa037f7c","first_seen":"2026-08-27T02:29:06.998096Z","last_seen":"2026-10-16T06:55:08.889312Z","times_seen":1152,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":28,"receive":29,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-analytics-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.234Z","timestamp":1792132222234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:42 GMT","end":"Mon, 21 Dec 2026 18:40:41 GMT"},"fingerprint":{"sha1":"A3:30:C7:50:21:CB:91:7F:41:4D:44:46:38:A1:4A:9E:8E:E2:2D:DB","sha256":"78:8F:17:49:89:3B:57:A2:20:4E:54:17:07:55:9D:8C:7F:8B:48:A6:7D:F2:B1:9B:03:02:17:B9:0C:77:20:DD"}}},"request":{"raw":"GET /v0/amp-analytics-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32267\r\ndate: Fri, 16 Oct 2026 06:30:22 GMT\r\nexpires: Fri, 16 Oct 2026 06:30:22 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"2c7cddccdfef0fb1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112728,"size_decoded":33862,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65534)","md5":"03cf5adca36594d919134374bfc5bb4e","sha1":"34045094b1e1ec01dc31f6197a0e1fc56ac13db1","sha256":"c490bdaa6f78321ebefa451cbf2e0253ec5a9ce9545d6d7dd49b9ac0efd7c7bd","sha512":"b69e36668ae143e5e31791ca905b4eb8613abbe17c16a9abcc2b592e43e35fc43a00252f58d70ce8f3fbdf0fd30191ff9a3487544a84268f04de127060346801","ssdeep":"1536:xrlh05wY5pnoYNXlQ7qX0KtU9PIqSFYD4SpePVr1:1c5wY5jqqX0Ka9PIpYDJpe/","tlshash":"43b3949db292b07583d3a074852f500af33b7944340b812cf5aae9d6bd7998a6137f7c","first_seen":"2026-08-27T03:25:16.586269Z","last_seen":"2026-10-16T06:55:08.894897Z","times_seen":388,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":32,"receive":2,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.589Z","timestamp":1792132222589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:04 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310818\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-10-16T06:31:12.133978Z","times_seen":9152,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.602Z","timestamp":1792132222602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:31:42 GMT\r\nexpires: Tue, 12 Oct 2027 16:31:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309520\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-10-16T06:31:12.135492Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIO-aBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.604Z","timestamp":1792132222604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIO-aBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:26 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310796\r\nlast-modified: Mon, 15 Sep 2025 17:04:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35588,"size_decoded":36401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35588, version 1.0","md5":"ffdc8b0c86fb7c4937165907dc90554c","sha1":"4fcdc09b703c9e26e1b75910a569997aba6ca127","sha256":"2c8d792869818ecb253a46bc3c63c7013df7aac2f69291c3c85e5cdc94160960","sha512":"1a2caa72936a38fe0e3d35a8e4bb1e055311c8d40bd1fb616422cf63518cdfaed1d88ec08282740ae5f68c5421b25cb7fcc12cbea66b58ea56f3eeb937f3dd4b","ssdeep":"768:qFmvrD21TSbU5k7yr2UMsSOtfrX6batmuApa+s655znH/SnVFsT:qy21TmrW2UMsSsrMzuOu2jfSn/sT","tlshash":"fcf2f1d4ecdc0de3f27b9588e4c0230a3741ab63092e399955ca1eadd356b368dd7e48","first_seen":"2025-09-17T03:06:41.999821Z","last_seen":"2026-10-16T08:56:20.778519Z","times_seen":2546,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":21,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/image/logo.svg","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:23.022Z","timestamp":1792132223022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET /image/logo.svg HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 06:30:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 12 Oct 2026 10:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3025\r\ndate: Fri, 16 Oct 2026 06:30:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7245,"size_decoded":3359,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3867284d2f7ea096be70b6da64b55ce","sha1":"d48cd9ca9f932fdd359be372855536f2e82fc5db","sha256":"c328e68f6b8325396424b88dcb06e6cb178373bbe78f1f9c3febee18e04a0dce","sha512":"20cd3bc634ba89af0d72d1256fb0f28aeb84550b43d0ad111f267e7dfb6b23d95aec3a34f93ddb820b9e777381df5e195b526925d4d29019f38ac1406a453299","ssdeep":"192:ihAey96a9FLgrBZiSqxuYwHsKE+PZ2xmV0Z:8ULgrfiS5YbKBB0Z","tlshash":"d8e1e7f0b3ed22f0e501f7e08b5ee435752724fe3a11ca4847956d61ea915ad4caccc1","first_seen":"2026-03-31T09:39:18.624683Z","last_seen":"2026-10-16T06:31:12.139352Z","times_seen":39,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24.express/","fqdn":"parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T06:30:20.830Z","timestamp":1792132220830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24.express","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:43:35 GMT","end":"Sun, 10 Jan 2027 08:43:34 GMT"},"fingerprint":{"sha1":"A4:FC:DF:E2:B1:B6:FE:A4:3B:5E:CE:64:93:C7:9E:D7:6E:26:EA:C2","sha256":"A9:61:32:9C:97:D2:6A:C8:8F:81:E2:F1:76:33:75:AE:30:5F:21:CE:42:B0:0E:9B:B5:C8:B6:AC:FB:86:B8:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/html\r\ncontent-length: 771\r\ndate: Fri, 16 Oct 2026 06:30:21 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nlocation: https://amp.parik24.express/\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T08:26:23.734763Z","times_seen":19140418,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":344,"connect":51,"send":0,"wait":51,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.581Z","timestamp":1792132222581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:04 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310818\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-10-16T06:31:12.133978Z","times_seen":9152,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.591Z","timestamp":1792132222591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Oct 2026 23:47:51 GMT\r\nexpires: Fri, 15 Oct 2027 23:47:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 24151\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-16T08:22:27.728863Z","times_seen":62090,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":35,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.598Z","timestamp":1792132222598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:31:42 GMT\r\nexpires: Tue, 12 Oct 2027 16:31:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309520\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-10-16T06:31:12.135492Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":44,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/image/banner1.png","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:23.023Z","timestamp":1792132223023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET /image/banner1.png HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 06:30:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 10:01:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3181286\r\ndate: Fri, 16 Oct 2026 06:30:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3181286,"size_decoded":3181574,"mime_type":"image/png","magic":"PNG image data, 2088 x 1643, 8-bit/color RGBA, non-interlaced","md5":"ccd0dcf3d20c394f59c996b8ec0d5a60","sha1":"5957dc74ad1108be17a1c7a06e3a08fc333e65a3","sha256":"a9ee6a4d5c70ce1493410142aa7b0b577d003ad1b68ce3a6c0f25d55f6d4d8fc","sha512":"e91c8b8e35a460820f097412505aae5b0b37d6e1ac65eac109840ab64306e5a6b22515ce639639d1803383d458bf8df155195ca8d66d02adfefd81dc2ea3a7da","ssdeep":"24576:j1DPN/CBnUEsr2K0rDvvoFvvvPUen6fWX:BDV6BnUMK0rDvvoFvvvPlDX","tlshash":"d025338d977ac882cd2fdcb627481f13506b92a822d67c3dfcfa482fd495d74236a491","first_seen":"2026-09-16T13:53:49.038247Z","last_seen":"2026-10-16T06:31:12.143607Z","times_seen":14,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/image/register.png","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:29.191Z","timestamp":1792132229191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET /image/register.png HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 06:30:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 10:01:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1056372\r\ndate: Fri, 16 Oct 2026 06:30:29 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1056372,"size_decoded":1056660,"mime_type":"image/png","magic":"PNG image data, 2093 x 1414, 8-bit/color RGBA, non-interlaced","md5":"8a395d9aff5be42219158485752b603a","sha1":"1826899acbdf189a25a61eb713710f8a5853cfe4","sha256":"df9605ed7b5d9891a2bee93786239b6861f6508b0814d8d8f5b68ae34d9e10dd","sha512":"83e0bfb4da72dd4f280dbe7f6d92e2a3b2e3950b85aabae4f287473850edf073c74911c7099418ae18d3cdd8674dad81d93cf57a2bc59ffc05c7b5206708d26c","ssdeep":"24576:DqZwporcsF78+AQje9+EL0AqZSUHBtjB9wncPRGZvyb56n:DqNt1AIe9d0X3b99OcPRGBEa","tlshash":"122533474dea1b80d2d2017b44a0e9013271bddf7a293219bdb77d5538839ae06fe68f","first_seen":"2026-09-16T13:53:49.03037Z","last_seen":"2026-10-16T06:31:12.14693Z","times_seen":15,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/image/login.png","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:29.193Z","timestamp":1792132229193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET /image/login.png HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 23 Oct 2026 06:30:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Oct 2026 10:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77076\r\ndate: Fri, 16 Oct 2026 06:30:29 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77076,"size_decoded":77362,"mime_type":"image/png","magic":"PNG image data, 2067 x 954, 8-bit/color RGBA, non-interlaced","md5":"a8469a6a827e53cd0c363a3921944a28","sha1":"add52e32c23aeaa243d1c7897e65f1b2641547a7","sha256":"3c719bf4eee47698dd5f4b9867a1b1ab7eb75a9bd0e510cb501df5875ec135f1","sha512":"882692c84ffdf179a6f6c2ad7b7c63f22513b6afc696438a8996253d988f2f8ff37f12a21a6abbf2c7d6a211ed4c8cc7bee7e6b0845f43e503f0ff88cee2e5f4","ssdeep":"1536:9CgXrEjQeclns1S2tYq9J/mWTB/PBfKaS1fqNT96G999996zMlpzA999igpdej9J:/IjDssk2uqz/LTB/EaStqNT9d999996g","tlshash":"9573ad39a965c691faee103ac2330f934f2a537bc9e93fc5d070644a5ca2e0e591de4c","first_seen":"2026-09-16T13:53:49.02358Z","last_seen":"2026-10-16T06:31:12.14958Z","times_seen":16,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":374,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T06:30:21.346Z","timestamp":1792132221346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Oct 2026 10:01:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20946\r\ndate: Fri, 16 Oct 2026 06:30:21 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":95256,"size_decoded":21256,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1619), with CRLF, LF line terminators","md5":"9b653ad6b04575045c0cae88053e72a9","sha1":"3abe0801cb45c02d44f6aa215af719c93b50b2f0","sha256":"c76f2eb3f36d29d3a42e972652cefe0f444e9686ff699168d038a1ccf9e02d11","sha512":"c2b2bacf801b6474fdcd7ac62481522e483620f55db60566b27de4c06744aab11df95892c12d7193e02fba2fd80e68dce5c3ac601adaab503d49f3404c3b4a33","ssdeep":"1536:9CdWhkelUhuNjsYI5pOKOl4K3bV8J/KvQjwZ+yAO86oZzzdaL2S/6D+oocL1H+QA:9CHhmWoRqRKgecL1+nIY","tlshash":"bc93c772914d20bb1217a8c3f4246f4e39d685bdfe57031166b52fee5fe2ca5ce28608","first_seen":"2026-10-16T06:31:12.152719Z","last_seen":"2026-10-16T06:31:12.152719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":29,"connect":53,"send":0,"wait":112,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.578Z","timestamp":1792132222578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:04 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310818\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-10-16T06:31:12.133978Z","times_seen":9152,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.584Z","timestamp":1792132222584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:04 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310818\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-10-16T06:31:12.133978Z","times_seen":9152,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.594Z","timestamp":1792132222594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:31:42 GMT\r\nexpires: Tue, 12 Oct 2027 16:31:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309520\r\nlast-modified: Mon, 15 Sep 2025 17:03:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20776,"size_decoded":21589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20776, version 1.0","md5":"fd4986b86093b8a3a9741457f6a37303","sha1":"c15c26d255937c0b1a47b6d641ee6a2de4392f6b","sha256":"63b14e3ef0966785438b8947380dfbcad178cbd3c6a5ed2172672ca0d8b839ac","sha512":"e2cbf9114b042c7818674b88b33d50d9aee1d5916fea130c45b9b3aaabd633ba47d0fedd9ccfd1d59bd846e0b5bd2734753532dca3002e3ac474aa60bec66482","ssdeep":"384:Yzb9yuV1JBCAg2k1UY3dpP7nqoJOEIeFdcZUqWZlAUuTqZgb2wc5KW+:YzbwJ1BvjnqoJOIGU1UUu+Ith7","tlshash":"a992d08400843fb9b1e492ff0954f77c3c5b5f446672cbe58aaca194ed09713aa91b2e","first_seen":"2025-09-17T11:10:44.166702Z","last_seen":"2026-10-16T06:31:12.135492Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":27,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.600Z","timestamp":1792132222600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:06 GMT","end":"Mon, 21 Dec 2026 18:40:05 GMT"},"fingerprint":{"sha1":"65:43:E9:AF:64:05:D9:DA:EF:28:71:A5:BA:B4:9E:2D:A5:7D:2B:E5","sha256":"2F:8E:8A:52:06:00:F8:10:73:F1:8B:6A:06:05:6C:16:2F:1E:21:F9:7F:52:E9:84:25:75:0F:C0:31:34:9C:43"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Oct 2026 23:47:51 GMT\r\nexpires: Fri, 15 Oct 2027 23:47:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 24151\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-10-16T08:22:27.728863Z","times_seen":62090,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":56,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amp.parik24.express/favicon.ico","fqdn":"amp.parik24.express","domain":"parik24.express","tld":"express"},"ip":{"addr":"45.94.158.62","port":443,"asn":56851,"as":"PE Skurykhin Mukola Volodumurovuch","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.565Z","timestamp":1792132222565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amp.parik24.express","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 08:47:12 GMT","end":"Sun, 10 Jan 2027 08:47:11 GMT"},"fingerprint":{"sha1":"54:C3:15:35:B2:F6:CD:FF:10:03:A6:34:86:1B:3B:DF:30:08:5B:80","sha256":"DC:0D:1B:DA:03:62:07:E7:77:A4:42:92:03:55:4E:73:EE:FE:2C:27:D7:00:66:46:0A:5E:68:70:31:E5:17:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amp.parik24.express\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 16 Oct 2026 06:30:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-16T08:18:18.70417Z","times_seen":159377,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"amp.parik24.express","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-loader-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:22.728Z","timestamp":1792132222728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:42 GMT","end":"Mon, 21 Dec 2026 18:40:41 GMT"},"fingerprint":{"sha1":"A3:30:C7:50:21:CB:91:7F:41:4D:44:46:38:A1:4A:9E:8E:E2:2D:DB","sha256":"78:8F:17:49:89:3B:57:A2:20:4E:54:17:07:55:9D:8C:7F:8B:48:A6:7D:F2:B1:9B:03:02:17:B9:0C:77:20:DD"}}},"request":{"raw":"GET /rtv/012608131752000/v0/amp-loader-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3927\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:18:21 GMT\r\nexpires: Sat, 09 Oct 2027 17:18:21 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"95eaf7f7c94c8366\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 565921\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12715,"size_decoded":5504,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12600)","md5":"29a9ffc92cff2b8ce134c2b286a315d4","sha1":"30d88681d5bf4ac25195905670c04defb2537ff1","sha256":"3bf3d119bd059ea12070169cf17adbbf4f4a90091b0c175df836e71debe5f451","sha512":"0d279c9bd160ba7f9f22d2d2d3eaaaee56e4244b03cd79a3713f5aeb7fbcf0a8439e2fe5d4ce0ea5abc0fbc2f3065644d19d54dad3b0b6aba58ae5a36dd6dc7f","ssdeep":"192:5fQHMOgzKBbnnRrVG4oPPaorO2tHnBAHzMb5F4g5A4WR2vN:l0g2BbnnHOBMzMb5F4g5A4WR2vN","tlshash":"a142a424a54ba2ac130351b484fab906757ecd4fb8104035f0018edecf99e48bd7ba6e","first_seen":"2026-08-27T02:29:06.990958Z","last_seen":"2026-10-16T06:55:08.878719Z","times_seen":949,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:23.019Z","timestamp":1792132223019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:42 GMT","end":"Mon, 21 Dec 2026 18:40:41 GMT"},"fingerprint":{"sha1":"A3:30:C7:50:21:CB:91:7F:41:4D:44:46:38:A1:4A:9E:8E:E2:2D:DB","sha256":"78:8F:17:49:89:3B:57:A2:20:4E:54:17:07:55:9D:8C:7F:8B:48:A6:7D:F2:B1:9B:03:02:17:B9:0C:77:20:DD"}}},"request":{"raw":"GET /rtv/012608131752000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amp.parik24.express/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2965\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:05:11 GMT\r\nexpires: Sat, 09 Oct 2027 17:05:11 GMT\r\ncache-control: public, max-age=31536000\r\netag: \"4f47ed7f85abdf35\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 566712\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7798,"size_decoded":4542,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7676)","md5":"3f6cecb06196fedf1dc5c1f2b62452f2","sha1":"40623362e2c944c779f6cb22bf0ed33614092f9c","sha256":"d9f2a23aed96b04e277640598b3cc20c88432b11ebbad1cb6830c4e18ec1728b","sha512":"8127cd80ca3794c81818700de641545e15e687aeab24057d412c4b66f3f9856beae9817204f3744a8a83b7004806e22fc3b621eb38ee74c74de770d01b2be36b","ssdeep":"96:/KoAosPGpV3yMDc0jGAM+G0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:/KqswV3yv0jGAFCPX/tqKyWp4M0rDTI","tlshash":"bff196dc7ac2b83a5753b4b780af414fa23bb94620ad9120d120f0d83cb995ed633e5c","first_seen":"2026-08-27T02:29:06.993751Z","last_seen":"2026-10-16T06:55:08.90389Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012608131752000/v0/analytics-vendors/fathom.json","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amp.parik24.express/","date":"2026-10-16T06:30:24.048Z","timestamp":1792132224048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:42 GMT","end":"Mon, 21 Dec 2026 18:40:41 GMT"},"fingerprint":{"sha1":"A3:30:C7:50:21:CB:91:7F:41:4D:44:46:38:A1:4A:9E:8E:E2:2D:DB","sha256":"78:8F:17:49:89:3B:57:A2:20:4E:54:17:07:55:9D:8C:7F:8B:48:A6:7D:F2:B1:9B:03:02:17:B9:0C:77:20:DD"}}},"request":{"raw":"GET /rtv/012608131752000/v0/analytics-vendors/fathom.json HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amp.parik24.express/\r\nOrigin: https://amp.parik24.express\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ndate: Fri, 16 Oct 2026 06:30:24 GMT\r\nserver: sffe\r\ncontent-length: 1613\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1613,"size_decoded":2025,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1136)","md5":"79e3d7e717cb73295eb771e04aa0968a","sha1":"9fb5b6f2840742d50761f4537e0b9cda9d3742c4","sha256":"aa291b67c9fda91fa766f55ef158e12ae87e3dc360a479852640f728602cdd9b","sha512":"070600067e115182dadf9a21000d925d062b6342f3eed4b0557c90861e031e053b95861ab4b7cc9c3b8929a6170e24e399b457f481204f395ae1dc96601c4093","ssdeep":"","tlshash":"e331867baccd219fac2bc0a19483911461568d81f396cbde6749d679e4a9a4510335c8","first_seen":"2026-10-16T06:24:34.128912Z","last_seen":"2026-10-16T06:31:12.159722Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}