{"report_id":"523ddf6e-484d-4508-82bc-6b2dd397c496","version":0,"status":"done","tags":[],"date":"2026-10-08T16:08:55Z","url":{"schema":"https","addr":"evrokub.com.ua/","fqdn":"evrokub.com.ua","domain":"evrokub.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.194.36","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"title":"Pari24 - казино та БК","dom":{"size":1009824,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52162)","md5":"17dd8e45ab836a8f3f364354d55a857b","sha1":"3a72e956fb0c577185d5cbfd80b9e6e20f9d48ab","sha256":"54db70f46aa219b4e6820d06edbbccd9947467e73225f493f9c1350bb16d00da","sha512":"b1da2a843fdb694dd0a031635af34c834f6129e2681a419b6b10561e788e2b25b1330d7c6bf4463fd782b20591b2c1e7a16230e07ebdb5ece1d77374f5e14038","ssdeep":"3072:Gg8Lx08eGR0kYFaCGO7She/IB4VhlLPWTNlZk7iABCdJCz6FbwI1xAZs7HDAs1k6:h4iGR0kYFaCGO7She7ix2yAZs9L","tlshash":"0725816873f16631b33b46f8b9a73b192096f1d8cb0389d492f0f6e446cae67e6d0154","dom_hash":"domhash9f24ae9d31e4ead3f24904f1c57d15b2","first_seen":"2026-10-08T16:09:03.540649Z","last_seen":"2026-10-08T16:09:03.540649Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"evrokub.com.ua/","fqdn":"evrokub.com.ua","domain":"evrokub.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.194.36","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T16:08:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"parik24-kazino.com.ua","ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-09-18T20:28:58.659814Z","last_seen":"2026-09-18T20:28:58.659815Z","alert_count":606,"request_count":202,"received_data":3001805,"sent_data":114429,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"evrokub.com.ua","ip":{"addr":"104.21.92.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-10-08T16:08:58.82872Z","last_seen":"2026-10-08T16:08:58.82872Z","alert_count":3,"request_count":1,"received_data":1604,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-10-05T15:47:17.187021Z","alert_count":0,"request_count":1,"received_data":1540,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.usefathom.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-04-15","domain_rank":129518,"first_seen":"2018-08-31T10:04:23Z","last_seen":"2026-10-03T02:24:19.66483Z","alert_count":0,"request_count":2,"received_data":8220,"sent_data":1084,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","size":25719,"data":"","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-10-11T17:52:15.685476Z","times_seen":4067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-includes/js/wp-emoji-loader.min.js","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36051c6b06a79d2f225454f4f6ebddf9","sha1":"8c0a3bd7adbabb832785df11aa27217ce5246b25","sha256":"34ff1a7cc58a3e7e59d2c59e334d8dde83554cde2c933f4491109d772666604f","sha512":"ef6f7877b986979ce4075db6155e227a283e1972c0111d09001f49a1b7e198a2edb2de7d8e4cbf54f020a99acc122b3516b98bce8b0e679c7e4b59de0748812e","ssdeep":"","tlshash":"d381a759eb7938df33fa01f3653a4d4beb614436e784d038c9ae631424b1893c375a5a","size":3877,"data":"","first_seen":"2026-09-18T20:29:03.803095Z","last_seen":"2026-10-08T16:09:03.792412Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","size":6981,"data":"","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-10-11T22:12:19.353951Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T22:44:18.219395Z","times_seen":81983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d303ee84e211b1f6e39303f9c4b8b27","sha1":"6d413188672e67f2c108336f6adf723cbfa34773","sha256":"8740d4f07c4f7a0bc54aad726f0c9bf8d22bb43991af66303560566a74bbac94","sha512":"0f748deb7c343c42e89001b8ac9e94168058d10c25136ca469f629abe004116224d6fd4578f8ad150efc4649a4bd9c254a667c957034939067dee8cc8b2bbc6d","ssdeep":"","tlshash":"7fd02b342230493713f76753c67db3872c14541b1501528b5809840c28fce8114e0982","size":259,"data":"","first_seen":"2026-09-05T19:58:22.119959Z","last_seen":"2026-10-08T16:11:04.790179Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfae1e8e774dfef11731812874e3cfc8","sha1":"1cdbd9c79f76a5aece257d2807c0f4cb9e4d52b8","sha256":"67b82abae5252e7f4fe9d20924652482ece99df3ca91ed6aa1c98a53c1f98f1d","sha512":"601334ac697853d4abf3e1e5c5706fa01c9da513b0fd045e2eee0e8b50a75f5e5ab67fd170fb54703f5a79417d8703f8b0d186801e69249a6784d923a1401e5d","ssdeep":"","tlshash":"a8c08c3f1500677824e31ee8a8f7ab903f232fa3d29e0080d8bc86569390d8b9c21dd1","size":172,"data":"","first_seen":"2026-06-03T00:16:41.164862Z","last_seen":"2026-10-11T17:51:39.895069Z","times_seen":4138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-10-11T22:41:19.033099Z","times_seen":27560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1865563ddc7858ad8f5df54bf0d4f3a1","sha1":"8a1083151ffc79be34dfadffdf09ed386708adaa","sha256":"ed40e7c01da10e3ce3b9b6781f996cc5cbe8886a730390f8d973e361815eca8e","sha512":"e847c80bd60b06853be9b227fba7dc9aaecaf1bb86c30d7acfa880ac53a6147ba9edec4cc115fafdeb6008a33e7e4a4164e13d763f8e7509d33980aac7638837","ssdeep":"","tlshash":"60d0a91002d22e0176db8ca290218fa8b0fd92a0d1d4f08daa7c464862e6a1a1a68209","size":220,"data":"","first_seen":"2025-12-06T06:58:10.775603Z","last_seen":"2026-10-11T21:52:26.039857Z","times_seen":4231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"795703a7ea31487b605f23bfe2cb6c16","sha1":"b94c2e91191783d8b25d29727061003c2f10d19f","sha256":"109559e9801a58dddeaccac6fa42c466836f6358105cf3172f69a499390cc4a8","sha512":"7653c2fc1039029917a605596fff32195436ed952e566949266f3500cd3a7e0dd355e23cf0790a5d0308ae56eb78873137cad2872b318c9d1f3afc68d90eb0db","ssdeep":"","tlshash":"71c02ba770c4c13803dc4bc04022910e4413e107c122d481d6c711a8febc4c22c904eb","size":131,"data":"","first_seen":"2026-09-18T20:29:03.799848Z","last_seen":"2026-10-08T16:09:03.797401Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/astra-theme-js-js-extra","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41f5e5a08752ab1a82de1946f844afaa","sha1":"afe75175c375ce73e8c807739562c26b74b597ed","sha256":"b2b3ee371e4b5c29d942fc10d0dc75e5c7437c02e148456a45d05be1c66d8379","sha512":"a61fbe5376c0a3af1672015cd50399cf2dd347837e5536fe2bd89c8a6c0ca697465c18d1a4b8777a916e806ff00ae8f3f5a463cabbb4bca08212fdb225520537","ssdeep":"","tlshash":"2c11a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":1025,"data":"","first_seen":"2025-12-16T23:13:59.030071Z","last_seen":"2026-10-08T16:09:03.79804Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/prj4-effects-js-before","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc5f29f8bf6775a170c36a281801a37","sha1":"04137e10c65213504588c3f2309a0642b87f3f37","sha256":"6bb0c08bce8c43684d046548719ddf2d159cc13169873e7f75a787fd0e0eb1a5","sha512":"9180a788e1af837363ddc07ded00438335d820d51d336483e2075c8ab34b6e6604a2702dc25fedd79153db6742238a14b059b42a7547938bbc249b803cc4ab07","ssdeep":"","tlshash":"f9112bb7f0c4c13803dd4bf04022910e8413e10bc122d481d6c711a8febc4c26cd04eb","size":941,"data":"","first_seen":"2026-09-18T20:29:03.801816Z","last_seen":"2026-10-08T16:09:03.799574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1780659075","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc0ab4563ee0d92d8837cf8d12ddd725","sha1":"89482b62a0398687aa49cbe0a94ea0480a7c0e59","sha256":"ead19f0ceaff91c8437160ab44698647009dc865fad03610ef889de90840b381","sha512":"ec228782e91348254d814bb6edbd1294840d45d0139db4277fe32eaaba4b06e045330480f7f2d1f8a18681cd7b2fa3e718545f0fe65c7d28c444581b7fe6c56d","ssdeep":"384:UUw0IxBpHfBwxL7J3mcj4BZ6aQ7hiZ7rd8jKt3HOmvBmcdYGcf9wMvibtfc+MV6H:/wV/5wxp3mcjDkRBdMV6vy49T","tlshash":"c4132b7962bb003a4013916fc79fb74c36269077b206ca087dac5b6c2fc593897b5bd9","size":43498,"data":"","first_seen":"2026-09-18T10:10:37.965778Z","last_seen":"2026-10-08T16:09:03.762499Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/fra","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.616Z","timestamp":1791475691616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/fra HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsA%2BihsD84tBgMl%2B%2BwYnUwIPFrnotL0JyKlzKdtTyIUPcLwH%2FyqRQwjGs9rOxavqq0v%2B95NFcDZ%2Fx4xzeQcsSAxWDfXtOCYE%2FK2SUSNFiP2T9boRhPV7w3b4Adb2KLEyA%2BSa3vI5h88%3D\"}]}\r\ncf-ray: a4766720a887858f-ARN\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":2047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df7abc0495deaba1f82bcec7ab184190","sha1":"6c8a14592b8530f22a0bfd62016bb9618ec20574","sha256":"cb57b155d387d64e3edcce78f799549de27ffc57281bdec18e37e9bb33f2efd5","sha512":"7d9fbe7deb62f5fa6fcdab39a78e9d93ea6af1429dac890d576c67ee168ca3e0d8bded466e29be61b3a79f66f0e787220bdafe93b0daf74556d3b4e158fd5a6f","ssdeep":"","tlshash":"b2d0eb29a0b76c2401e24a1163420b8b1768ac9660a27a65226124b2c6ee9e23398b17","first_seen":"2025-03-10T19:15:00.507549Z","last_seen":"2026-10-11T09:34:43.234658Z","times_seen":97,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/nhl","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.656Z","timestamp":1791475691656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/nhl HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNzHLGY7pR0aNrmyCy9pg%2F%2By8g8XOMXay%2BzU1EEwnVJK5AgJm48rMdO4YrDjxVzu0TGqW%2Bp%2F6rMXyEL1gIr3KCaWnemy5hThZmxjvF77hxcDWbw5fmwvgb%2FsdoK5uLdtKq9%2FMUVUS%2BU%3D\"}]}\r\ncf-ray: a4766720f8b0858f-ARN\r\ncontent-length: 10837\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10837,"size_decoded":12616,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c6099c5e6fce652ade44eaec7954f4c2","sha1":"9f54fd6f4c5c610cd6f70504c85d3dbd315a7a50","sha256":"9623a5bc1c0134ba10f7e32b6b3f2a3a36bc3b806451fa7db62b62bf652341c6","sha512":"eb72b715c93dc9b124ee64986137dbee28895303c19e62889c75fe9b487c017d494e165bfda35e6aa0a99f2921b017e917f197819bff88c88091f6d5b494c169","ssdeep":"192:wSzNy+E44C3vdSehboFrdClgyt9b3GM+zwCQpLdkj2z644G5ti5+01ygMP:Xz3EXC3Fjh0B0lT3V+zwCQkrDWtBT","tlshash":"7d22cfad608c6e35a7c6dfa4d20a3fb073352dbed0741a2d6b4f148fb619576d12a080","first_seen":"2024-06-03T05:20:09Z","last_seen":"2026-10-11T09:34:43.172749Z","times_seen":90,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/97920ace-9a42-4d1f-ae19-4140852886c4","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.720Z","timestamp":1791475691720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/97920ace-9a42-4d1f-ae19-4140852886c4 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4fqd0siHhTqRnLsxDrtNXnnj1fGmKgSIIrb%2BSXAWyN%2FLxEQD9SPxZ85UR0ZDOnLdCu4NgUhYWfuQsJjg4EisVQV9fpu5yujXrv%2Bw2sUbjKOrPKoWmsRKrt6F6SCISgI%2B01gykx9pyI%3D\"}]}\r\ncf-ray: a476672148d0858f-ARN\r\ncontent-length: 1086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1086,"size_decoded":2894,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bbdee6e00f78bee3852c281d1504cc79","sha1":"561a7c349014eba4e5473b183b450f56ef2eb50c","sha256":"8edc1801b59c2334fc87d3cb81a6d5e3435a710625fd506d200a9228187077e7","sha512":"979c25dc4688411ef438c6bdc83af7e76aca77b68686ee63ba1303b0c09a1423df834e0bf2bb0bec801bce6805c19f743c731719ab772659c56b1405ec77d100","ssdeep":"","tlshash":"4811b61a20ede20fcc26f41c36f96de4780607d420479a2c910e6db06c19d58723203e","first_seen":"2026-09-18T10:10:37.871205Z","last_seen":"2026-10-08T16:09:03.550625Z","times_seen":8,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3455-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.847Z","timestamp":1791475691847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3455-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ePfRhj0fA8wIgGSQO7jdDKZLPfEsz3gqJksi8KcqTjykN33ss4uTAMMcrwk47iB76dzsB%2FlVMqxvEGe4OU6%2F4LltFvYWEH4cN8gxPiwBNAmJHta2c8aBNUyC1Fdhc7S%2Bk7jtiIQUnk%3D\"}]}\r\ncf-ray: a4766722191b858f-ARN\r\ncontent-length: 15472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15472,"size_decoded":17241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b160ad9dd350655e6d909cddd328644","sha1":"81bb94e3ed679306043def155d3b54b9d38796d9","sha256":"d2194948abbf7b13236a1f64e3eddb7017986de4c7c0e5c0c8fa35ea346a1972","sha512":"c3dbd9019d5c57cfce2ab89ddc98a7ed0b7c88b8497818a6c945297ae3ae33a4f2574131f21ac160ea8ff520fca3abc766b6399c55e3dd83a3eb87517e1686e0","ssdeep":"384:a8fwmy0IYfgkAR3BpViLuvsySXmBa8S7vBYBqG5wLu:JfhKbVBpViyvs52Mu","tlshash":"5a62d0eb08a35336ea97211e68a6d7ddb0182e4594f83edc312c240335bbd9c714cad5","first_seen":"2025-03-05T01:10:53.86151Z","last_seen":"2026-10-08T16:09:03.552841Z","times_seen":13,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/5043-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.893Z","timestamp":1791475691893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/5043-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26%2Behvmi%2FIxmx09Exj1dm0VqnwL%2Fs6p6vZKGfS%2BkoiQI30JRhDY%2BBzzxCwr0s6Ak4lSBJNmw6E6U3lu%2B4KybLGTLJ5A6HxYplm6hcUIQ2NbO%2FGft6uYSeLpv4CiUwEPMHn5w5wqiQP4%3D\"}]}\r\ncf-ray: a47667225939858f-ARN\r\ncontent-length: 8638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8638,"size_decoded":10414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3c4eeb077544a4b2cbbffaf52045b6d","sha1":"eeb2c9ec41649e832462ef12195dda8cc56e0a6b","sha256":"19ee6113bb3b172615fbf3790adb41d93d0f530963ac87bf6935c011f9738eb9","sha512":"ff6ad2ef655be11cedb66203411ed676d2778b2203d7094fa442773b82524c07ea282a9f56f269da21cc6f0fccd1706501e34a4a68bed5dc8423ba9c29983adb","ssdeep":"192:NyS3UABYL3ul9mpXrvbdlIWA+L+Hk57xp6pTNz:NrkAKbuWpXPW+CGxkNl","tlshash":"8402bfa550dabb93ee50e65fa11154a15411fc81ac595e3afe701c9e8fc0c9bde30c82","first_seen":"2025-03-13T18:40:41.935401Z","last_seen":"2026-10-08T16:09:03.553902Z","times_seen":9,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/tiktok_8525c5de4d_9504b2f594.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.010Z","timestamp":1791475692010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/tiktok_8525c5de4d_9504b2f594.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCpXqro6euAhlavsuqizM8beGxOqXH8%2FCT6Wdg%2F%2F40S1MLu7tQeLa6sOJPCLHwCf9yqGaWU1rnmJfOmOStyxek7Spz9iFq18XklFrCfvYliXbtu3M5HwM6g4Jmdw2AeurxaSolzlLJY%3D\"}]}\r\ncf-ray: a476672349b2858f-ARN\r\ncontent-length: 1047\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1047,"size_decoded":2916,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"b3d7faeb62c602a326108554d9adf0c6","sha1":"00d40973ae7bd47162236415b0cc5c617918520c","sha256":"481c958c9967e492fec360a4b08a57ce9033091eb5787815c5d3db595fc76750","sha512":"2e625b1fd9e148919ea6caf7b1e1f3128659afc3f411167b9ebd110f8cd1bce73793a4394ff8628042bebbb890e1f2f00c55c2094c284f2e1fc6c0e2b913d6d3","ssdeep":"","tlshash":"df11b96e4b809c89449905310462de969035905f83e2e508cdae0912a417776891efc3","first_seen":"2024-08-19T20:57:32.270777Z","last_seen":"2026-10-08T16:09:03.555111Z","times_seen":23,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/bel","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.625Z","timestamp":1791475691625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/bel HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvJ1CM%2BF8qmlTTSaMKc76DB2cf7dinVjdbBBCtfvOcmDqtRHIlVVgQXVaZ43aq0FdSEAxVbo%2BN9fyY%2B702ycKsN0jvk%2FnKn%2Bk2eTy522ryp0FqXA8z5ujN0bPZyiKFgeQo8Ccuslk2c%3D\"}]}\r\ncf-ray: a4766720b88f858f-ARN\r\ncontent-length: 234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":234,"size_decoded":2005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"641aaee304ff662b2fce82c9e2241f25","sha1":"e6085556ac8361c4b58cc9463d20431777372034","sha256":"bbd9ac1e8c76cc49012c3813b431f874735a5ced412b668e534508d21e95c234","sha512":"90fb076cb8b232f4b1bfee3998f357cbdf4eb9ba8f2f8465ba5a458fa7de91f2e446142778cd0e0c6e8a74bb42576c345164d93771519d2e40773cab8b856436","ssdeep":"","tlshash":"02d097208c96ee82b5c248f142b42cda003310e491d0aba7ed0884474960e108367f81","first_seen":"2026-05-01T06:40:25.239537Z","last_seen":"2026-10-08T16:09:03.561984Z","times_seen":9,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/t_atp_cha","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.644Z","timestamp":1791475691644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/t_atp_cha HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ddrf96f%2FDx%2FBJTY08nrNJmAMC8a24gsTpPddocBaSNzEM6PN4NEnI4JBDS9m5w3qyvO6cUbo8gh%2FQRAU1YpIyjGAb%2B0OHVofhU7%2FqAIR0WOhJVUBcjQu7qSUquMlDw1CBoTmxLEwccg%3D\"}]}\r\ncf-ray: a4766720c89e858f-ARN\r\ncontent-length: 2240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2240,"size_decoded":4012,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"73b65729e0bfa915ba0caa55a0465ac1","sha1":"ccf38f96a9ef6405a19187f6698274f12b4f0783","sha256":"c2a92282a9d304389ea8ecd7c77b3b1bcd2aa0a53b31d776fb60f83b44036ba6","sha512":"18263c0a77330351c1c720a72f9f59d950f9d2839fbbd1d83598756f10b644620b44d23c70ac363324cf92e2e1784b39390355ce4b0bc0e493f395d7b8c7e7f9","ssdeep":"","tlshash":"06412c1be6112345357bbd4d477511d1c981f2053b85dd19dc135b4c677d0c63f89256","first_seen":"2026-04-29T14:23:59.95033Z","last_seen":"2026-10-08T16:09:03.563972Z","times_seen":12,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/303f6605-d6ec-4b9b-9102-909000374cf4","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.749Z","timestamp":1791475691749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/303f6605-d6ec-4b9b-9102-909000374cf4 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XU2Pabkmg316fXN56ECvw7U7kpfnQ9%2FOI%2BF8rRd%2B8xS5u6aE%2BcTbb4%2FG4skB0X2j0o2tchtmyLT0dPYEGyc6UM3pVLjivoWz02bv%2BK1EseFjVjXcLp8xMVlWnEaAEW6otqDiNthmwZI%3D\"}]}\r\ncf-ray: a476672178e9858f-ARN\r\ncontent-length: 14028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14028,"size_decoded":15839,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37f99c1592b2a7201252f1d6bcc30a0e","sha1":"cf5fe6a40792cfe5a96b57ee53a67fa8ef8e8c08","sha256":"d655632aa4339d34988649fdf3d9fe58d7f1efc81d6521ffb5f981d92c23c259","sha512":"6b7c4bb8f172fca5ee6fecdc31b7d9d62df3567781487f66802c94154533b615a72b1887ba8ba68b60afad1eed7ee06c9bc9e2203d4c650da33e055a2a2543f3","ssdeep":"384:vsKBKe8+Etu4Hwk7t52vHohDm03H5o9QHoYwP+:EKBKe8ltxp7t52vohDrZo9QHoYwG","tlshash":"ae52e157953e9095028383d75c6a05e943b02924fa012ddb9f58cc3d98f2363d9af7d4","first_seen":"2026-09-18T10:10:37.769744Z","last_seen":"2026-10-08T16:09:03.566853Z","times_seen":8,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike-2-hold-and-win.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.915Z","timestamp":1791475691915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike-2-hold-and-win.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHnu0XL4qM0L05dKHJ984uteavElIsmgMMb6kQDR0TUWwzjAWm9J3s7rnsx%2BgoccLQjphqU3xFtzZVQewykOHv49ZrGvSlHRC9TpRUrOdYT54Dtos7FSoyVWFIW5FOauohKMmq1Tf%2B8%3D\"}]}\r\ncf-ray: a47667227952858f-ARN\r\ncontent-length: 5250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5250,"size_decoded":7117,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d46309f17ab1b34655adc72c58eba480","sha1":"854734f8f5dd059e23aa8753e7cf8e7954757333","sha256":"364aa07e05adfd93de3809b585da94db159bc084b8472fcd6cd6dc06b15f7228","sha512":"26f4db48ba88ee13deec1914b26310021d59b130eecea6bb42c754143bc4155d0bb5277eb1e49cd85832eb2560515124045bf7e7520866f18c48620c8868fa7e","ssdeep":"96:bgGyOs8hIenNbmGrvMGBj7Eywkg27OtfGC58AZwzEd444FWZHkFBxEAKjks/:pyOcebmGrvMkj7Eywk7ObV3t48HaE3kM","tlshash":"57b1904d230079ee28d7131fed7e05e34bdded86f67b052615ef6990671eb2609302a4","first_seen":"2026-09-18T10:10:37.731856Z","last_seen":"2026-10-08T16:09:03.568758Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1006,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/61114-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.930Z","timestamp":1791475691930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/61114-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwuA9KDDUT1MeSdyStsO%2F8TjZm4rk1LSdCAIKIfza1k4uLjBGoDOjRNKDmoIYcc2bPhW0Ii1FH6cSTYUqhydMseMxVDve4n6OD8gmYSlO6KMpBZLJT6EbmA81JmjAxQY8Jh0eLewQAU%3D\"}]}\r\ncf-ray: a47667229965858f-ARN\r\ncontent-length: 21464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21464,"size_decoded":23229,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a578a9f0085d0569533aade63975938","sha1":"a3070e3f336f25a0014f14116e249eb37e5af13a","sha256":"9bd5e45f2820121534061024f785903c0ce946025d9edd5fba75e6d0e0a458d3","sha512":"7c4d48bf468e96027d4d4a77605a85c717d254a2c91f559b97857ada2c6132441f4d4a95fbf70ca1e66294abff11167b579e9f92e24330196d33bca47a945e90","ssdeep":"384:R7BpC8JcP1yJaU7PiSoOTQC5DcDZ9lGtya+f1pCSU0pf1gInofFfjdMSHt:R7BuZUWgTQmwTlGtyagfrJLgIn8jdMSN","tlshash":"5fa2e11349d48917e034c26cbfc280ebaadcc6fbd6356c40953a9b6235dba57fe12e14","first_seen":"2026-09-18T10:10:37.723754Z","last_seen":"2026-10-08T16:09:03.571194Z","times_seen":8,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/1421329-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.972Z","timestamp":1791475691972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/1421329-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\npriority: u=5,i\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FVr6gSHBZX5WuKdLcr4yGZ77rMfZbDXMb5cbH4JNqcJfTE%2BJ2vqF8M5BAtKnWf6tx%2Fqt1WMoluzekC%2FpvN4t8GuVFISD3%2BsXL91oQjDugro4z%2BufFMmU9DDJlXDwmUzpGKrfSViVAw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4766722d989858f-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":285,"size_decoded":2060,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fee0cc2f258c97da0c1ba0fbc2aa63b9","sha1":"33a19abbf16364ae9d89d629de02d69d3b6e8045","sha256":"96ab528e80fab35cfe4747f07c03f0f4cfdf5ced2b611755596ac814931f88d0","sha512":"3d167634981a58f8905639df73244e0b7e429a4d449af3b8a7fd5c0bf3e732d52e86326ae03270be31760d0a5df5e85d94fe0106647a54c701e519557d8d7ba7","ssdeep":"","tlshash":"0ed02bb4321cec1a4640c206032ff40a21abf0e69b85c354f8d17d3566062f7bf5d7a8","first_seen":"2026-09-18T10:10:37.956889Z","last_seen":"2026-10-08T16:09:03.573069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evrokub.com.ua/","fqdn":"evrokub.com.ua","domain":"evrokub.com.ua","tld":"com.ua"},"ip":{"addr":"104.21.92.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T16:08:09.594Z","timestamp":1791475689594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evrokub.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 03:36:04 GMT","end":"Thu, 31 Dec 2026 04:36:02 GMT"},"fingerprint":{"sha1":"B6:AD:A4:2B:36:F5:B3:14:16:A5:8E:7C:6F:E0:87:D2:BE:15:7A:83","sha256":"EF:E0:0A:D2:AA:0A:18:28:B6:F2:81:DB:FE:65:89:4C:FB:D5:AE:A6:3B:CD:04:7C:8D:AB:AB:5A:A8:26:1F:27"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evrokub.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 08 Oct 2026 16:08:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO7UATE0%2Bl10ZmvIIPzL%2FgJBkifIHXW23WwuzMW%2BwnaBIIy9Z8le%2BZ6j3pVLhsyyRqpAw%2FwWPAbtqPwUoxHavdnT9OLMWsmRT0dCE3ZV1BDRkuzU6hnYRAIczq3JSXB0Wg%3D%3D\"}]}\r\nlocation: https://parik24-kazino.com.ua/\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-ua-compatible: IE=edge\r\nstrict-transport-security: max-age=63072000\r\ncontent-security-policy: upgrade-insecure-requests;\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-permitted-cross-domain-policies: none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4766714dab43c36-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":106,"connect":23,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"evrokub.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/modulor.341df8fe361c4ecc8549.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.441Z","timestamp":1791475691441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /modulor.341df8fe361c4ecc8549.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZlnsnWdeOiTaJJnROGaPShFZIiHQN1hsaGFjKNqOaSp6uCrhTyUWL9kuvSysjmhM1JORkQcE0Vg4BKKwaxk3RJJSouWYnLfQyMfCcBdV9OG51RV9p%2BrahRZGk9CT2FRlFf1qsmlAv8%3D\"}]}\r\ncf-ray: a476671f883b858f-ARN\r\ncontent-length: 22527\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":266712,"size_decoded":24440,"mime_type":"text/css","magic":"ASCII text, with very long lines (14480)","md5":"b99234eec4a8395efca4a4ff79334603","sha1":"fad656aa04cc393e345a6ca3e8f91a9c2a9a865d","sha256":"c3a0c90d9a095e6c511de7cdfe87335727fb1de5b5498eda3b8de6ef8ac99a52","sha512":"63e41804cb0b4b9474a2ef791c71b5a897480d0dfdfc8f1218af0e50ad8510db4693a05503c2bc7161127a60bfa1cfd753ee97d45fd74c613239fe0683cd514f","ssdeep":"1536:4ZHZSr+vBHpAptT7iusmtXmaKSr+vBHpOmSr+vBHp6GCBzzGEKk9xthPbbISr+vi:mkz97vvn3","tlshash":"df44ffacdae0bb29b51b55e5aacbd57d431c66e0ce012ba4e3f1dca603c3ed191e1530","first_seen":"2026-09-18T10:10:37.860714Z","last_seen":"2026-10-08T16:09:03.575505Z","times_seen":8,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/3.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.487Z","timestamp":1791475691487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/3.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BhhJvDT5iDYwifckahqS6tjhN%2F%2FmcmThpSYhtTUw1DKe7pTRZTcQInShLvlOJeCaNAfYUeuSuxQib%2Bl8lpYm1uvkB4crLQOp7NR9D76hsSQZxsAn%2FDYNbzaH%2FXvUs2zLK9qPdd2uIY%3D\"}]}\r\ncf-ray: a476671fd854858f-ARN\r\ncontent-length: 246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":649,"size_decoded":2167,"mime_type":"text/css","magic":"ASCII text, with very long lines (648)","md5":"3ee6f0636a35f6fbb984cff1bc3aa836","sha1":"e746ad69096e8238a8ad0afa1b66834a9b74826e","sha256":"5e53e4443f07fa47d95d1781d8a36ae6144a44dd342b7c9d5b189bbf3b77c9b6","sha512":"a27a41e3a2cb049ceb952110c2537631f28da08c1c2d0873e578f1cb2f0bc99c906c434f6b6aa3bc31b00cf2350fcfd59e8969a4c0ddb265a107722498773d3e","ssdeep":"","tlshash":"8ff07337f094171c74039c2863495a738170c56693e1bbfa3b76db2453d79450afa22f","first_seen":"2025-11-13T20:36:08.477901Z","last_seen":"2026-10-08T16:09:03.577055Z","times_seen":12,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/cze","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.680Z","timestamp":1791475691680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/cze HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFu4tJyG%2F42NOrIerKWnVxlFXhEJlYaDw1GwqjBzfkS1H%2FWE37FDegJ7%2BE%2Bi2v%2FG7pW1FOh02mdVgEcGXeAkSn5R31eYDyERPndrsE2ZQPmZTJ3Ghpbe5vlBhPsAut8UHiKr0c5C%2FVM%3D\"}]}\r\ncf-ray: a476672108b3858f-ARN\r\ncontent-length: 606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":606,"size_decoded":2379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83d22999e25c62a49d6eb2ff9d4d0769","sha1":"6a6a26ccb0b71a464ce65f0c88eb35b17af15033","sha256":"3b96ec172db1e497ff4bfcd8bea3a08b07943dd2c2185096dcf241081657a552","sha512":"547f6c60426f88224efd22cebabacd836134aff88bd01613cc806b16c143e87492fa8cfee06aeb492b5783b43fbce9a15134d4deaffa059f496eb432489dea2a","ssdeep":"","tlshash":"83f0025a889e2285742568a15178095581dacd88b3ad25442ce324b8b5527030a9ba3c","first_seen":"2026-09-18T10:10:37.741213Z","last_seen":"2026-10-08T16:09:03.578795Z","times_seen":8,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-sugar-rush-1000.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.905Z","timestamp":1791475691905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-sugar-rush-1000.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj3o%2Fz0jYNrTWqkyzz96qBa9vyMcM0yqHBvRJueOW%2B55s6xaNjskKTL7URPx5P962j2RDj0YnIk5W8zPDcROCbZiE8AKdIVb3PJEOvbnq3BfW%2Btyt25G3gmQU1vsfb%2BMnBdf0Slql68%3D\"}]}\r\ncf-ray: a47667226946858f-ARN\r\ncontent-length: 6126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6126,"size_decoded":7997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6b298db40685c727ad35af37228facc5","sha1":"f6de361205bb4de47af1dd243db52997f90ad7f0","sha256":"f9f5361c2240deb32423a7a50885f04019865b0834676caffc37223ef905586c","sha512":"75f455ce5a26c22d8a4bea0e7d385d2fc791224686ff8708943ab8a2e26f7feb21b2a32e70b85205aff48171d45e31946885a65407823db26a3ef1d25c3248d8","ssdeep":"96:EY5UrkGBHRsTJOe5+4yQeac5v6HyNChhJaMm+IIC9jXN6fBCc9vCtbdoel5BONoO:EPkGNRsTJOe5+aeaC6U6YMANjXNULvCY","tlshash":"43c19e0a91c47a5dfeaa336355b0591c1bd253b6f613b60f4e684b2ed091099bc8f28f","first_seen":"2026-09-18T10:10:37.785442Z","last_seen":"2026-10-08T16:09:03.58052Z","times_seen":8,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/54239-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.922Z","timestamp":1791475691922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/54239-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWhZ1fD2RgpTsmM%2Fmn%2F%2FbTcl33TDVtkzBmXBzR4DsdUwG7g5n8%2BIij7x5TciFQ5pykEh9EM%2BAh9KuCYtbcD3lnZ6Jg3dI0seG%2BUHwJDkCgwzK5belB8bZ0VvIHjsekE0WfKoDIRFNuM%3D\"}]}\r\ncf-ray: a47667228959858f-ARN\r\ncontent-length: 6042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6042,"size_decoded":7818,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"493b248471829630953d345a1a8ad5e8","sha1":"80409a73e8877b74d10237cfcc73f0e00493ab1b","sha256":"30eff514f3beeeebc00d5f19c4673b4fe9cbcbaf4519eba09bef6b9379260b1c","sha512":"7c54b5b367b5a1d7e973041f44b42a3b810aa441c034461091fe5cb83910d976c50f5d886f853438ba6d8f95e975c8d8f24f7f186514fb5e627b6ba819262fd3","ssdeep":"96:rbG82hubu79Q8RMSTO7Vsjs0f+W2v+gBtqQnM1AkIxxs97ym4H0MaY97uZypBgRO:rehM0+STO7VsjUWw5E1A/QyBDamuUpeI","tlshash":"4dc19e9f3a883e43b938a4aefa74b5e1c17dd19c04fb801f88e22a048d75169364cf81","first_seen":"2026-06-18T21:04:57.836645Z","last_seen":"2026-10-08T16:09:03.582436Z","times_seen":9,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/148657-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.960Z","timestamp":1791475691960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/148657-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=loooVnqv5Hkfp%2BYSgiOGWY9nBHcGWFjAVTthvI3rEOZSC%2FCRv09jCDNqIMwDaHRhuM5PpteFP1v3vNI6oK9%2FdgVbfOFbawhRLC4IV8zvueBpcojeCiLvBysXhZ%2FUlLq3ylYzQq1z4Y8%3D\"}]}\r\ncf-ray: a4766722c981858f-ARN\r\ncontent-length: 7618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7618,"size_decoded":9388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d79d891b45e822f099c68b66c0ded01","sha1":"e837b01063d77860cb4807f4f1170924aa350720","sha256":"8c78b67866acc926dc3996b22eca56b763aff1f2c6c0e361c8f494849d2642fe","sha512":"aae345826a24f7885493dfdf21c1032384cbc0c4a48d91b3f09fd7211027e72f57f988d04f88c162028d94b968afef8b5f270bcae061f5b00aaac895e0138373","ssdeep":"96:clIOe/UYq/jJFkcfR6ENC8KR5ScLdrWSoum7pWDLOD+AGM2UVedeNSCMAwN9/6H7:QIBnq9FkcRbM5vLd6npW4+nQXu660/1j","tlshash":"3bf18dd9830b985de822b66621f660619432d88f63cd1de3bd4b0271c387ed0e4063db","first_seen":"2025-03-17T21:32:27.14789Z","last_seen":"2026-10-08T16:09:03.583475Z","times_seen":9,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/319764-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.969Z","timestamp":1791475691969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/319764-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIdRtvRrRLyxWuJAZ9hiMCN0CK86jYuk48W0mcqFjOSdtAx2lyTO4LQTHBkdGOzMvCWqiTMkZFOS%2FcMMWGI95pn%2FDWxwQrWOLmLeZMIWtYV%2Fke0Bz93pBm%2BExjNDkZ21hjWLZZ0tqYk%3D\"}]}\r\ncf-ray: a4766722d987858f-ARN\r\ncontent-length: 9882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9882,"size_decoded":11652,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5893c5fe018ba48e3b57588e4288c74","sha1":"82525651ba41b9a2a0e6e298bb1451235f9e400b","sha256":"d8a50922fa4ee3cebc54fd316b07c12ba5717af4eef672e38ad6faff3866bc54","sha512":"6ee044db92ece3ce89e9e19f25ed9f24d0afb9e86b461a16f3318b1660064d301f727217b62418aa1231d511109bb9c3f780f4789e37965094f9bc4b3e4a500f","ssdeep":"192:iy3cHrQHC87m6xCvaeDtahse34kifFlo5f2ZDtUdivllx2boUOr3X:F3cQCniCva4e0k54tEClL2b+r3X","tlshash":"1e12cff14211ecd3202df4dc988c50d5b850f454af258abd42a6ee8d70fa8db20bf499","first_seen":"2026-05-02T01:58:44.673246Z","last_seen":"2026-10-08T16:09:03.584269Z","times_seen":9,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_t.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.600Z","timestamp":1791475691600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_t.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poXACCkRpXhwFtZ%2FH%2FpGnhpRiQQSoju0DgLscLk5FK97miLHJE5eB5e5y015036e4NI5uo65D1jOCAc7fyRWMLxJaGgq1EDZ5yKExIf6BVfoDxbNbEcoxjqKNNGIiIwaPOkvPscj0xA%3D\"}]}\r\ncf-ray: a4766720887d858f-ARN\r\ncontent-length: 2552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":4419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61aaa4c170002f142fdd0e4502849627","sha1":"38674ca315ddef444c3d4be4ebccd4474388ff2c","sha256":"90594b22825bd620d467f4a30dd117517e9857c74ebbb4f57d83afea00d45ddd","sha512":"857dbf0e7249d43453e9fe783feaef1b7a380ee1f92b1b4cb8a78a50edde52ce04a422e851ea51082cda17ee75e4040610c07544a34248d28846fad71c6933e5","ssdeep":"","tlshash":"de515d4baff61f978390350a13ff53fb51489ace29d30e24ae85d4ca52271b5405c2ce","first_seen":"2026-03-28T17:27:48.310363Z","last_seen":"2026-10-08T16:09:03.584917Z","times_seen":41,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/are","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.686Z","timestamp":1791475691686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/are HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXpAINywP2xV3h74WTVx6ojuxIEgtoRMwzV6bqErN2Mq4naTcaAYXl36BqdvxGp3pO2Jd04NqOcx6cG4xEzd979TgEtJ7%2FD0gUkSzc2YLZ4i9RKmanWj8vkcvUc77G2zzoim2Oj1ZAM%3D\"}]}\r\ncf-ray: a476672118b9858f-ARN\r\ncontent-length: 396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":396,"size_decoded":2159,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"811e54c6af215d8a4be2e1644ab1531c","sha1":"de9fbefa43d31bbfd5db254128e2571133e9c633","sha256":"5c083ccda4a276417097b65dc1f9a9a105a5717374db18db26dd2248525cc8c3","sha512":"9f7de0224db4a260f1154f1be4882e39ec2b9ff5da830a590d4229fa3523ecd5a8521a51e49541b49cacd83c79cd50daf144ec2aca371e473e630c1feb6e6e3d","ssdeep":"","tlshash":"52e0f1f12f957b6cd6744f5955ad02a62ed0006c31b1c180410be01a1d69a4c4f33713","first_seen":"2025-11-02T09:23:50.20841Z","last_seen":"2026-10-08T16:09:03.58785Z","times_seen":16,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/srb","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.702Z","timestamp":1791475691702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/srb HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JfA8OKBV5afxCsRRN2Nj30%2Fm0%2Fz8W9QV0lb3LY9agVflyCD%2BU%2F7a0gtkr8fViRw7c6yYnk1E2AFbUiUIM8jkRGMdcDnuW6FfVFI%2FphMS2d3ekkN783FovuGArQrwS4cLVsv5hieoWE%3D\"}]}\r\ncf-ray: a476672128c3858f-ARN\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":2607,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b0b27df35cac20673d97414dcd42703","sha1":"1dce6210cd5b2702cbd6c0dd58e1c6ba3e12f0c2","sha256":"e72bb92af82173356ba89a7be3382584072d0deaeac5e225323c20a1851d91da","sha512":"1708dbeb944355d6499195786b71b8fb27ac1ad58249163004bf4497c42d3e4a5cf25e029e1ab6d187678d206436f32bb4ff77e3d5ef7a017410892b75ecef7d","ssdeep":"","tlshash":"930156d32b4511468cc2f182c274cb1d2ea968ae2d5785d1e5e83f622f352528f85117","first_seen":"2026-05-01T14:15:57.839495Z","last_seen":"2026-10-08T16:09:03.589473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c3b06566-4909-4c0f-b990-b8d1a33084f1","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.725Z","timestamp":1791475691725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c3b06566-4909-4c0f-b990-b8d1a33084f1 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KPNLqezs4nAudbnVqIIbzATEGX0a6T3y3AVSP%2B%2BYnVq7UvuTFt0bVDOz%2BDKJnoOeKnUTCQYdRrVJi9MPJVUF5RkMtfAIjnifTZjMVMesL0P3wO1G25uScup5G2hgDUIyskdhSlC1I%2F8%3D\"}]}\r\ncf-ray: a476672158d3858f-ARN\r\ncontent-length: 6542\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6542,"size_decoded":8348,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1f27855a6494b1636df4598defc599c","sha1":"647e19a1267b99606fffb6569680a65e276e79d8","sha256":"e9c8584389203c39242e1ed62833ece7ab05b08bcfd90c76926c453068109651","sha512":"e24c1f5fbafa0d9a5a72e8bed146818232c41410e4953fb33f563aeff3f52c18a90eac33cb1dcd3350faa8cdd6927c303e1adf4de46f41b900376e017d8eb432","ssdeep":"96:o7l6LZlCSiXOfH2UX8RKldPAyx5QWBr8v0nPwZeqh/NUAmlUZC66UZrA:I4ZlCFXOfdrDAyx5dBrReqUFnA","tlshash":"05d1ae984ef32bf0822a3d72e94d87a0960640d950aa8f3c214fb4f2234171f35f9ad6","first_seen":"2026-09-18T10:10:37.946485Z","last_seen":"2026-10-08T16:09:03.591506Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1093,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-admin/admin-ajax.php","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.016Z","timestamp":1791475693016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 41\r\nOrigin: https://parik24-kazino.com.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":41,"data":"action=prj4_track_visit\u0026ref=\u0026qs=\u0026path=%2F"}},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\nx-powered-by: PHP/8.3.35\r\naccess-control-allow-origin: https://parik24-kazino.com.ua\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6FX637KdIprPP5MEwP1cZ51cTczLNzbCp79xmzZ2omlbSjxk0tG6mU1MxUhy8JahZNPwoQVZ2eEn6JznaUkzZqg4ti3eU5Uv%2FQn8Qo8Wpuw9eDL48z4JDyUhf9pRtjKNPTv%2FKY%2FlZA%3D\"}]}\r\ncf-ray: a47667296b36858f-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":2550,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/t_atp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.635Z","timestamp":1791475691635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/t_atp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iH%2BQ0cLuBVdp%2BztuUi34FOxCKWBKRpASNLidko8Is9ZDLRFjnisbWwq38sNQyt7Gi906N60JDBwlPIC1MyocdAScIaISIs1Xxwss4M%2F6aTIb%2BHUEwpPE7As58b7DmriHkBrvaF4BN8o%3D\"}]}\r\ncf-ray: a4766720c899858f-ARN\r\ncontent-length: 3001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3001,"size_decoded":4771,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"cfde675325fb2a05abffc229b2b0dbb2","sha1":"db747cf1e725524d5bcd6d8e44e33915f3459bac","sha256":"e8f0492954309e96324f4e558e16c2ff7e492145a768c3de1ad98ab7f64c7226","sha512":"f13f96e2f25b0751991567bf5361f5c33b34fb1c0d45482c1f384bfe11879addd4076bf298e5719da346d031a88591055eb4cb51cc593b23a02717aadb0d133a","ssdeep":"","tlshash":"f2515c66a8f563d97f24ab57637b3c212897a06aa9711b5e2337b113af0034c4f1234c","first_seen":"2025-03-09T08:50:28.744325Z","last_seen":"2026-10-08T16:09:03.594488Z","times_seen":81,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e2f81dea-8863-46d3-87f8-2ddfcc8fe8e5","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.825Z","timestamp":1791475691825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e2f81dea-8863-46d3-87f8-2ddfcc8fe8e5 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtpDbkqBrl8zr8ucgVwNSfM9lHpiSl8e1jXFD82E4qA7AxtviHOFCbsOc%2BEIsr5NEdgHz8DR4M5CpWC5uo7Oba8ZjS6G6wHw3mjdmK07bOyaYN1WKqLye%2F206U6Z%2BK6yFMR69yJr54k%3D\"}]}\r\ncf-ray: a4766721f908858f-ARN\r\ncontent-length: 326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326,"size_decoded":2129,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da3b24c31bdd5b3e57cbf018fc13cec1","sha1":"8b60d79ae06d0edd676291d53171bf9455824060","sha256":"0b5feca29783faeb133f35cae8f156f88f8d69a3dc52db5e592c13f745f13f85","sha512":"4b81fda31f40d24aa37ceef7d5537aadb3889e8d9577493ab18d8ba12ade96f57e9a96ad57aa72d1f655b291f9e6026ed176e6527d3470fca356ce44cecae2ed","ssdeep":"","tlshash":"78e07d76164636e4ead4ba7be1aa438002b92402f044c411a8b246ab35ec0413177992","first_seen":"2026-09-18T10:10:37.854083Z","last_seen":"2026-10-08T16:09:03.59551Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1095,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-great-27.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.909Z","timestamp":1791475691909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-great-27.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rCP3O6dmE8olcMi0QQIewnUAaJu85cFIx8%2FvAbPltQxDCxBhhhjUDSVTXxctaTwJermP1s2eirHzt7%2Fgn9u2FpN1yfpRdfRgWYFtPSrfEFgsRz%2FG8kkisUirp40IG%2FRewSjAGuA9DK4%3D\"}]}\r\ncf-ray: a4766722794c858f-ARN\r\ncontent-length: 5012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5012,"size_decoded":6883,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15cd67282939144b3d3a8f0b401b2ec2","sha1":"9afa690bb3afdadbf1ff3d4b0ae84c9e138f9031","sha256":"4cfc83d2e05f9b2503f4414007372c52cb16e114885cf521e886bfeb1edfea9a","sha512":"3f7e54af544f37397c10dddd04f7de397cf418d70b8da1529ac706b76a0148612171780873efc61f3367894c95e0256f7302ec9fc0e442f28765f02268c2cb2b","ssdeep":"96:SSIMxiTRSM72hTF2LshzCqBhouayZK3IvV60A3Gg58FN3IT594eZTbWxt:HxcKhSsheqIu3ZV6nVU3I99fZTat","tlshash":"ada16c118fc28b48224a175f45c05fde33fb649d00bae98da49b998e23b0597ba22454","first_seen":"2026-09-18T10:10:37.891136Z","last_seen":"2026-10-08T16:09:03.596122Z","times_seen":8,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/53353-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.932Z","timestamp":1791475691932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/53353-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFtS%2BbWEbhvsWt5QNkmky92%2BlhwJDvvFeOA6SvEa%2FKLQD%2BIqIeG2NVlnwPTJQ2U47WLWsbrvGxeA9OQVK3oxtAnz5%2FzBbXTzyHh1ZTpNSAdXseNBJZXGUomlAkH017zgQ1Coi%2FRhXiM%3D\"}]}\r\ncf-ray: a47667229966858f-ARN\r\ncontent-length: 10196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10196,"size_decoded":11971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2d84bc864abf10088cb792235363994","sha1":"2c8caea47bedc4e580ec3a5c0d2caec94e98871b","sha256":"2adf981b4153aafacc393bd934e14c1f8a8b6f6f870fa9ade397c8edd3195e7a","sha512":"a6a3372a25a9f7bc80d35287e4cb075af9ce54b205f334bc09c5b1af73c3fbd0988ba4dc2e3202f5deec31e718fc590befcc68176f9e9957517184bc0dfeead5","ssdeep":"192:Z6rKLf0+3AZGWwzJOWzslagxoZ/wXeLcooqxapmaUYNRiyvgCWX0X3RvFRN:vfFAZDeJOMs0uodwXegIojRLvQy3RvFH","tlshash":"0f22afe4c326f54c01d8fa30ad5434b49098be7d8419efea15f5761d1d383264eb5b0b","first_seen":"2026-09-18T10:10:37.725107Z","last_seen":"2026-10-08T16:09:03.597019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/52923-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.947Z","timestamp":1791475691947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/52923-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zSv0tzYg4H28mui4bhRv7PTxjb2j2x6br%2Blvkhxxpsdaiodw6jVdI%2FtDwT5F8tDVcRVcKOSrIsfKyvA2m%2FclaoMemFU2mLzhW5Y%2F49J5VP9PV0rAVH4u8z87hVInHr0LJvAF0VRmPY%3D\"}]}\r\ncf-ray: a4766722b975858f-ARN\r\ncontent-length: 8398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8398,"size_decoded":10168,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"beac2c220ac192c9aedd824af1899d56","sha1":"b1a10d1b1761bba0065e5d0fa2bfb8cee809ed59","sha256":"556ef85b066cc023bf42bd8cc8aaa3025ab5ad9696b02ea045bbc265ac3d689f","sha512":"f5a7f03d7db2d68149d2de05eb68375e7c8664b7cbd33cb7a45fc143790e01a5daccb8b1b2bad5ddf483ab0001e1b03c3a5f460677707d4d2d445a13a3b7ae78","ssdeep":"192:IBA6AWBJGYf5PJ/sDDlCLIAn6NOjUIxSX1hqd+atYnG:x6AaJGY9huRFKMqdSX1s7tYG","tlshash":"5d02af4adde8d89655c1b94a74e37b09a458a1bcddc052e85cede0481e433f37c4cee2","first_seen":"2026-09-18T10:10:37.786908Z","last_seen":"2026-10-08T16:09:03.597551Z","times_seen":8,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/ind","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.685Z","timestamp":1791475691685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/ind HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIBX7HCT2ILS4g5sE0j56vUG%2FRjV21rugPmwgK3inwWrZde3Yrr%2BjBWZYoCtoW1XCW9iL1ZrvafGjC67Axi8kcE%2FxHMScTSmZBspL%2B%2F%2FxsmCxqtGYOZZS1BgeVg3vR09TfCm3e0Gu8g%3D\"}]}\r\ncf-ray: a476672118b8858f-ARN\r\ncontent-length: 498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":2271,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fcce2e15855ea49d9132a907a14bdee3","sha1":"9a36db16014305f622d7a08a0690e51ae28289ad","sha256":"ec6c5f8904bf7dbed0e14fa6ee1dc68acf4b7b3a426e05bcb30696d0beaaf110","sha512":"a2a55255662ab0a85768e56908140cbcc97a2e41f134b2356dc599584307951f735e28fcf439d49d40225cdcc9a1ff4f887d679a768d434577ebd85c15558f69","ssdeep":"","tlshash":"c1f054f830760d48f646302b4ef60d6b585c350d829c2be44b8fdff964404b1224181c","first_seen":"2026-04-05T09:24:15.074691Z","last_seen":"2026-10-08T16:09:03.598152Z","times_seen":15,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/3fb24fb9-265d-463d-8218-43aa9818eda9","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.716Z","timestamp":1791475691716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/3fb24fb9-265d-463d-8218-43aa9818eda9 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxgYF3Hzx%2BdCIMzdy0Wvod54yFZ4vAs7I7O9t5vWU%2B9Y7RqNNZROajtYl6dMbLm7WD7WNEEGFwfo%2F%2FlcZlnkip%2F7jXvHtCh7Y3yeH5U9sGW1HtNNN3k4gfZmaylQTyNCpXGnBe3OjSo%3D\"}]}\r\ncf-ray: a476672148cd858f-ARN\r\ncontent-length: 1606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1606,"size_decoded":3414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2f051c201dd3c667038918d9eb832b","sha1":"f7b7d67c6ca773f8221036259221902515e8a6b4","sha256":"3381148b4455c3640c97d291c4a9ff183691628a115385a83e9b85dd8ac9ac0f","sha512":"54f45b0c0a02fee56ffa70e3ec7eab1c53d9c8662f4459b9cae8f639fe85d7e3e7b680b7be18507a5a5a33722e7585f111cb3d4d850d13a347ab43882cfd2b5f","ssdeep":"","tlshash":"f731cadcf6e741ffc988171640bf1509933855bf9425eda9d210db98228751196026dc","first_seen":"2026-09-18T10:10:37.72865Z","last_seen":"2026-10-08T16:09:03.598737Z","times_seen":8,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_telegram.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.729Z","timestamp":1791475691729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_telegram.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzVq1Am3VGoUUroYncYNJ04CLjQ7af%2B7Y2G1ZcJMGw1nc0QlUReM0ppju1L%2F0FQ%2FIypyH2wO768%2BG%2BtdkYFrAKSorPzCCjtZzWKOg4krDkxRNe91NTwVnC%2B9A2gvlxPd79qmcLwTUvA%3D\"}]}\r\ncf-ray: a476672158d5858f-ARN\r\ncontent-length: 1792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1792,"size_decoded":3667,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45afc535508ae4dae3a043abb1387db6","sha1":"7f3d8dda59dcb79c517df2807e44c10032300c8f","sha256":"0ed68b212ed2e48acf8d93e3c2b0d1527cb8e799bb0a0e65494edfeb3d1b7481","sha512":"4e8333b576deded70e031f7eadee3aba49fd94838502bcce632ff37b567ec94a0fcff9b1358fd89235896f0f2c8fe00d43ece4078102b7c153b062eecdb9220b","ssdeep":"","tlshash":"02312b1e214fddc09a053a1d46f17c7f51e231778ae415e3840b3688d26cc8d70d23ad","first_seen":"2026-03-19T22:07:43.413912Z","last_seen":"2026-10-08T16:09:03.599245Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3538-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.884Z","timestamp":1791475691884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3538-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wXM0yZ49YJCfjSrYX9eyHp%2Bd0CKOpgvs4Yi0fzdPmRjZNP8YHma5HVvDCF8ohyn2tFkMK9p6z8xUrvgXDzlHbaHYBE2mH%2BUDFuE42SwEPVMzudZV%2FAkhQ01zaspngSKqntVuYkOTS8%3D\"}]}\r\ncf-ray: a47667224931858f-ARN\r\ncontent-length: 8194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8194,"size_decoded":9962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcc5e0656d629fe97939023dc6659985","sha1":"3b2d35a6e0a76e950e2237dac42b2516bcedf8f7","sha256":"53be9de3eee9595819309e49c197b8e31c45c4a48961467a075a52a56824cbf3","sha512":"584fc57d83c87a8db30c5977bba1eac80301c5e0f63bc71d2aa2341524f3ac861b1eb386336cc2043cdc81173711bded43225583f07c22231a1901402f85600a","ssdeep":"192:9YBw+A6AxSfXRluKU5h0MSvMISivrx55w1S6678sW/E1VWxl:j6AfKUc7EI38I8sLHU","tlshash":"2ef1b015a01322cd41e01a9dc44b0ab95846f549f9df781be53c2ea47cd84dfea41c7e","first_seen":"2026-09-18T10:10:37.730086Z","last_seen":"2026-10-08T16:09:03.599806Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike--hold-and-win.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.898Z","timestamp":1791475691898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike--hold-and-win.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMdnbWF2%2F0cJ%2BsdBtA38Awy8uAsfgSiNrUN6ruzwftvYzZf6aJlrAeQUMXS%2FRmBvQ0UXA5m9Xq3FVQiTBV3in%2Fx8f6OpYaQPHnwElr6PJdYcmeTolbSbCCEtTOtfgfcTsMkLDjY0tB0%3D\"}]}\r\ncf-ray: a47667226940858f-ARN\r\ncontent-length: 5870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5870,"size_decoded":7741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1124891b9191a7910c107d91287c7472","sha1":"e014dc8ca03ad574c84df9694b9e13c7981978ae","sha256":"d1fc327fb56d418e00d7ed1d97077e736f39bba40b393085ee5efc77825fb9aa","sha512":"baa20d7b25a4c8ccafd69f0703c8c7abbdd78fdb6b86fe3cb0f94914d74f3717be4a4339818cf93740e27d1f20b3bfad7ab2fe8fd7ed6bdd9865b8a1682a80ab","ssdeep":"96:7NGAnKHNZUqfIov3ybpFhoRZTgJXzCMhianonFLvUITkeZoT8l+6sQIva/PT1Fxm:RBnKBw03cSR5aGRdFLvUkMYxqa/5j/f2","tlshash":"d5c19ea58159bac1746386f1888d631e447ef22d4fd80dd8e3ebd3191729198b5fac23","first_seen":"2026-09-18T10:10:37.75785Z","last_seen":"2026-10-08T16:09:03.600439Z","times_seen":8,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/59202-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.948Z","timestamp":1791475691948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/59202-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ypc9f409C9hUf4oJ9yvQkQTyaP8am%2BYc0FP3qfo%2BXD0aOp0lbM4OKqiw%2FaacaGi%2BsxfndgudeGxLicOIhMchcoV2MwGaXf2EpQ375Jfu0AU1JCVYBvBbS%2BlNzb3BdDKkPxntqX6Gzys%3D\"}]}\r\ncf-ray: a4766722b976858f-ARN\r\ncontent-length: 10048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10048,"size_decoded":11821,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3265e806d1e5f577708c3f515dded285","sha1":"3c178c1a79bdc9e41e2b1a56eae6d82da206fe6f","sha256":"a8c8236453118814bda1334db5aa6ef9fc92623c01f724730cbf2c5dc874dc71","sha512":"67d973b69ac76a616ed69e3157e6b70117aeb9f382c01d1fd0f122cebfada54ab845cb9f0c66c4340b0b1479b38d242f72d484841d397c21a9f8b07113e2bfcf","ssdeep":"192:ifIKIH1axNQnMPQk8itjkIV/209XxYOUa4P3iY+IvUuI5IpYQOgLEtxnBz9secRu:iAZkNQMYRitZPUa9YJiEYRtt7hc/0","tlshash":"ef22cf0b7bb97fe41e8288c6b582674224d738c93997940cb6d463993b7d34474f2d8a","first_seen":"2026-06-02T13:46:48.498858Z","last_seen":"2026-10-08T16:09:03.601025Z","times_seen":9,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/uploads/2026/05/cropped-fav-1-32x32.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.055Z","timestamp":1791475693055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/cropped-fav-1-32x32.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:13 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D68JUoBfUrZoHoCjRzAzYt3h%2FBnSNNThFc%2FSRXiKmhinr0%2B%2Bgu89CBvVazEvx0VWlYByhI%2FVMbgiu2g8CnEi%2FTA9mkzJ6yQicctmrFrVmkFLGiqokdW%2BIQSsZx2eSUH0ZlDyGWo5fhE%3D\"}]}\r\ncf-ray: a47667299b45858f-ARN\r\ncontent-length: 1253\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1253,"size_decoded":3133,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9dbf0c96387f8b2d14e23e727b540d26","sha1":"7668af9436247e18e530b69c0483a28167d8d5d9","sha256":"dd9b269c7f0d648807ebfbdcafe44f390f007a5d6582a5d0f0f2ba89bf1b6fb3","sha512":"7c26877c88df21527905353410d552842ea06e4569eaadd5df1bc7ea93d0b8c12a9f5e0dc9db968beab82e6a345c8659465683b22cd4082ebca996a3a0fc2438","ssdeep":"","tlshash":"4621e7e7a568ed48d57446b01a90b88dc7c79b1f009a634dc363accf4fa9b61195c31b","first_seen":"2026-10-08T15:31:13.540554Z","last_seen":"2026-10-08T16:09:03.602297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/479.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.492Z","timestamp":1791475691492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/479.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VdOi14gnK2Cn3AppgNcWzUIsyUmFixqsEnP4xk9msxdPROALGqF4kVjo2FPaPWH7PJG06Fpf4XphZnz993EgT8Mm1waBciihYbcl1P3eXBqW%2BbjWnN1ksKXYEve978JDBoJaco0e54%3D\"}]}\r\ncf-ray: a476671fd856858f-ARN\r\ncontent-length: 519\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":2430,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"aa2a2a5c468117a3a2241cc140856dcc","sha1":"11c741f50b624328f5fd201c80c9b34e29fbb355","sha256":"08f86c164eb60f803e5e0693943ed1bf5e537f90abf5e823f874c5db5a4e646e","sha512":"a807e8d97c53362150567357fdb9292f1018f9893e755e74af6edb946c55475747dbeb8d86823f91ea8a26bfb0ba8d19dbe3ca266bd5dd679f2b972235051715","ssdeep":"","tlshash":"1231d33320a1b60c5813ee502b4a13c99166c436ea6267f85873d62183cf1d60df26cf","first_seen":"2025-11-13T20:36:08.121782Z","last_seen":"2026-10-08T16:09:03.603477Z","times_seen":18,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_b.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.602Z","timestamp":1791475691602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_b.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46CbsuN2T85tFkpXgiRnl88mKZg2aVO4CWFo9vmo4ObkeVa%2Bn1sZEerYgBOyfL06j%2FHh0kzy7zgji0QHrRT7ya%2FgyeSD1TA%2BQm97EFFcYEkzv5R8GElDNXX9wwk6gburHSZphkwbIC8%3D\"}]}\r\ncf-ray: a4766720887e858f-ARN\r\ncontent-length: 3382\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3382,"size_decoded":5253,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"017f256f953f205b524d009f0568fc3f","sha1":"e0c7d0d5d2cb90eeb635be8e454437aeab8d72c7","sha256":"2e1b582051561b1a35a1fac089b8cd4195c2e04b85cbf531e8319586c5640684","sha512":"c197af6d113fc80c694baafb077d67d082018e96d1b75ea7eae69f9d203880963f7a1d6b8b805acff1e76939ed51e048bf284fedbc90cf3ebab0cc6756e4e104","ssdeep":"","tlshash":"17615b591971cd1a9406ec35aff216a5f40776c806426ffcd22463304862e246be43c9","first_seen":"2026-03-28T17:27:48.1684Z","last_seen":"2026-10-08T16:09:03.604196Z","times_seen":41,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/bra","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.655Z","timestamp":1791475691655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/bra HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrRRnaa%2ByOOM5kKCoiHdnHGf5D%2F4XOCIHQgFmwdeH%2BAigiWbqI6ZvHGRBh%2FpSc2n2QXOwIuxJOU6vszpYb5z0Qiw3c7QiZIKUMxP6gLMqSww0qm26HsZ7odQIq96N3T5hsIdmKBsSGg%3D\"}]}\r\ncf-ray: a4766720d8aa858f-ARN\r\ncontent-length: 1150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1150,"size_decoded":2920,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10dd1ac82280832bf7de2b10b7a5218a","sha1":"72e6daa79d561ce7c16bbf311e26ff868e142ae5","sha256":"b1e86a19aaab3e4c5b7cef088d133b6e5b927f026ee068d54b09fed8ba0a8cb1","sha512":"de4a51cff0c9149e59a996a1c727751a4e77ed2ccb395f35012e9a6b24e3d9516e436681365ee193d979d31ad84f04f56c94b9d63c07d63b7b9ecd6fa3e98b7d","ssdeep":"","tlshash":"53210ab78d0b5d8c04dbeb434fc8e255da4c489f3f8c59c94203332901309162fe4364","first_seen":"2026-04-12T22:30:48.758156Z","last_seen":"2026-10-08T16:09:03.604873Z","times_seen":14,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/aut","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.703Z","timestamp":1791475691703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/aut HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKr5kxcqD30pirnVNPZyZR3RMQYOi4%2FrnODCFhuDLq532JIpUCKP5eskOHkKfwA30jROVPOEDrDFAKppeT25v6uMucYasvAXV1BxVPY54KK2pbA0lvmW6qMU4kJlJZ6YpZW97fYICE8%3D\"}]}\r\ncf-ray: a476672138c5858f-ARN\r\ncontent-length: 222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222,"size_decoded":1985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52e2da4df98cd8b08de20a29abd8ff40","sha1":"fbf5fcee729144518f73050c871ab6900b5310d8","sha256":"d4ed90dedc8c9894b17842228f1d955024a80143cdb04a7c228d9aa405bbb7d7","sha512":"4b44cc1e87ec59dae4886c6dab054ea82d722e1f929c1c03fbd62ec8b38e7a593e8747f8c4272fac51c76dd23330b86b49cf65fac598d3e120e670e14c3500d9","ssdeep":"","tlshash":"e4d02370b74ed25a7228153630d4564b1119740f52c275d6d7767df0d9d0340a16cf5f","first_seen":"2026-09-18T10:10:37.815514Z","last_seen":"2026-10-08T16:09:03.605875Z","times_seen":8,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_tiktok.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.732Z","timestamp":1791475691732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_tiktok.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHXvXWtssOA4Wh1lEp9rpN4XCeVkJvoE%2Fn0o90JBps%2Brbq%2FH%2F83THZoiIeB3cbL8kpyDBy%2BcYiLA83i1FYWom1FwN3MWe8YeaU2Dcxxe49Lox%2B2MSoU8O%2BufqzZJqNusHpMcfgjTmRI%3D\"}]}\r\ncf-ray: a476672158d8858f-ARN\r\ncontent-length: 1670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1670,"size_decoded":3547,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81a0fb0b36e264e2cde0cbf84f9c7546","sha1":"33783bb7061bb173376236e9decfd28a04794938","sha256":"ee50189a822c46bcf89b67a971e7096073e3830036ee2741a1d06e11f0215404","sha512":"f69c61f3c92dc07182872e92baccc3fccf3f0c242094262cbc0b0b14ec5b67685130bb8a9bd6f2383abf4e47f0948c59adb9a69428a4e138cd866f4b3924f952","ssdeep":"","tlshash":"0f311a9cac4be558c223aca819fe89b712c611537eb41c11440e2803d23547c268d14a","first_seen":"2026-04-29T14:23:59.936266Z","last_seen":"2026-10-08T16:09:03.606519Z","times_seen":11,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/072454c2-32d6-4250-ae51-4bc2b8200f1c","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.839Z","timestamp":1791475691839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/072454c2-32d6-4250-ae51-4bc2b8200f1c HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUdw9QITvQaKNesjf%2Ffdg62cDBcGwWOKsR6jnsHZrxEV8TCzN%2FIoknBmxWG38cCOVohJfXmGTF%2F4QyIwTbjD3yvqK3jBkLnNeeORMlRarqoUlL1ODdLoFH0msJi%2F219MgKQaFNiV%2BCI%3D\"}]}\r\ncf-ray: a47667220916858f-ARN\r\ncontent-length: 762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":762,"size_decoded":2569,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"403f44dedc0b18404d1aca736ae202df","sha1":"a93fd4f8ac5e88722b4ea96107d0a853ff189762","sha256":"e45e51781a9734b8307dddd1ee9093f2efb714a9efeed788f6a217bda47c51cb","sha512":"ce02e72ce18eb98bc4247287b00b3aa9997aa3abde8c2aeb3417f156ae9e8cb9204a6df512e72fd80888d4b15f457d77d1a3968f1e92e45a1eb74d6d70593940","ssdeep":"","tlshash":"c9016a844f57d665db4ff02052b73bf6163f46425c98d995d49e049620012b91cf1c01","first_seen":"2026-09-18T10:10:37.922882Z","last_seen":"2026-10-08T16:09:03.607153Z","times_seen":8,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/uploads/2026/05/cropped-fav-1-192x192.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.053Z","timestamp":1791475693053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/cropped-fav-1-192x192.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:13 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90R3AHLEiFJGw6yGUe5HdrMLjG8t1hEG1SIUJ3cYbRbGhemLF2vCXCJ5w4fLAamFA0C9Z5qSjuqjL%2B5GH34PUkUoI%2F%2FP9qY3N93wohT%2BTpc4dF4eO%2Fon0OtswSMWPmT%2FcOjfX3Yijxc%3D\"}]}\r\ncf-ray: a47667299b43858f-ARN\r\ncontent-length: 18399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18399,"size_decoded":20278,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"14968534fabb1bd977ac992837acdc56","sha1":"eb637a9b868a3d861adada4ceef37fa65dfb94f7","sha256":"ef04a404de8e244e8968555aa5540e037a283140bcf80f08e7caa2eaa2ecf1ef","sha512":"bd2f420ad104b546d1803347dd40100a9982e3aa0dd7c37e0b2800a47ce77608e9a59d49976dc8a395a6bfb8dc080f2040460170bb050b718a2a32e7a951a058","ssdeep":"384:jim4dDxceNl+wBHEVMrhcBRMJJ6TDQAyTsZpTU4pRYzV3ZGBcvtLK3z+xJNm:jWQ+OVMrCBRMGTDQAyTsLWNQotLKj+tm","tlshash":"4f82e13b4c40ab2e00db448b603ec3f95f157766536bd338902591763968ad14ba1fb6","first_seen":"2026-10-08T15:31:13.51374Z","last_seen":"2026-10-08T16:09:03.607732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/icons/PRJ4/favicon-16x16.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.734Z","timestamp":1791475693734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/favicon-16x16.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:13 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZWwDc%2B2Q3xd7Is3x79lSWj2h6%2B2MqKRxOR4NMBO%2BV011EuYfAQa2ZURBk%2BvlCCHKPJF1ghEqq06AFQ4LyP2i9KMaCyeaT%2Bm9kG8igPt1XK3z04aQsGPzF7uYMS2Tywy9w9hzVCoy7w%3D\"}]}\r\ncf-ray: a476672dec79858f-ARN\r\ncontent-length: 1733\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1733,"size_decoded":3609,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"df3892ceee8728b774e0dde8523f1505","sha1":"796ba69ce8d2c1ca4d12d17be5e328a2d6b5efd6","sha256":"7bc13f893b31ed398b87dc47bdaf12c89ea9d2b0c01ca307c141d5509bf2b822","sha512":"6de3c39e2d449f5508262e3f1ce95399f0331b074e17d4fdf2f77694293ecabeb559ed25ea2f5f68f828750244814ce7f2fadd4dc7c91e1aa602467a406dd8b2","ssdeep":"","tlshash":"1f31d8905d5094c5c28e877064c51d02d4574b43b984f542f9edc8b70f20a4a7e9f7c3","first_seen":"2026-04-29T14:23:59.646267Z","last_seen":"2026-10-08T16:09:03.608449Z","times_seen":18,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/LeftNavigationMenu.75cb2c4fc7fdbbbd7ef8.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.452Z","timestamp":1791475691452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /LeftNavigationMenu.75cb2c4fc7fdbbbd7ef8.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4MTC0J%2BfxXbuEH2Gq1tx5o2fEAtowTPtzo%2FGb%2F8PnEr2AhqQmLsAfYHfUvDqQr7ry4NUa%2FG2geN4gsPoLDHyuqv4xVkHRXEklySFBIqtD%2B4Jk7KW20pYHkFvlNecWMsVden2iO2dv8%3D\"}]}\r\ncf-ray: a476671f9840858f-ARN\r\ncontent-length: 421\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1090,"size_decoded":2340,"mime_type":"text/css","magic":"ASCII text, with very long lines (1089)","md5":"28d7452811c6c865e5ef659a434121b9","sha1":"09cba04c27fbbf002ec84dbff31621fe6a78741d","sha256":"6d03036e73024087bf02a45ee75ecb61ccfd27a3b076bc984bb5f0019369d3d2","sha512":"45340c692e311ea77074ede94542aebc8c850f4905cf6804f7d0c5dd33ed3b70ad37f8158cde6fb66003ff3d394a17137d93c975078e516391ba69ca2efa3db0","ssdeep":"","tlshash":"c411d3b122e1325cf91fc85117904edf61c48027b27fe6bd98a53fa1c1e7b803a6a14c","first_seen":"2025-10-25T03:52:20.323741Z","last_seen":"2026-10-11T09:20:02.352984Z","times_seen":87,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/amatic-hot-fruits-20.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.910Z","timestamp":1791475691910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/amatic-hot-fruits-20.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyZBiolJRDV4fsb6bQKA08r9mIX4ddyvFcaX5URTC40NPDG0pX45WlEP3nqScs1LK%2FdmmmOGIUDa0RoNYE3zhIBXzOGqrC%2FajOTft1l4KUmOeCBQ74O%2FV%2FlfZBDJCxwlRDzx4aye5MI%3D\"}]}\r\ncf-ray: a4766722794d858f-ARN\r\ncontent-length: 6014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6014,"size_decoded":7885,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8a230f60f117cf71629caed15182148","sha1":"f662f756c2dd340861c00a8c8cb56b8c5c8ca241","sha256":"bd347fa454f422b91422a20cc67ad9b0f8a0e8c2f0bb794f06c76be97e0ac49c","sha512":"9b2caea979e1ea0c44d2055da5b126c79934ad4723846e490090e4d19f2cd3a529c7353cd46324b534c736b5a540f15e2376826925c7849e6a811906e1deb3c9","ssdeep":"96:/aNwMf0vWctHMRUWrZhS5HiF47KneB7nzkMPsfjZORWobnrXNKLwor4YFWfpN8Ov:qdatsuWrZhS4exS7mVCwPpN8GQYr","tlshash":"cfc1b0a0928129a8ef45be4617e5571bd8185af4a50f6bb105f6b7d7347f90a73c4c00","first_seen":"2026-09-18T10:10:37.821303Z","last_seen":"2026-10-08T16:09:03.610371Z","times_seen":8,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/Sidebar.fa37b0ac52fcf18be071.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.458Z","timestamp":1791475691458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /Sidebar.fa37b0ac52fcf18be071.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9g95tSBg9mH3%2Bkk2M4bwjsuYK9nPcVDt9XUE7S05wfaRNHYx0pM8TQX%2Bgj3zmzKccgxXumK4Ya6vJkG44UsTLhNOjY9nQInbvc5XDGfiBZTCa81c4MPXaQSjfJyfhq4PF0%2BJIqW2xYk%3D\"}]}\r\ncf-ray: a476671fa845858f-ARN\r\ncontent-length: 873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2893,"size_decoded":2788,"mime_type":"text/css","magic":"ASCII text, with very long lines (2106)","md5":"be759b55b07b648bf727b0678abd433f","sha1":"002ba2fa55b48299133b9fa9669f1f178435a72c","sha256":"b595ad5d5c798b41e18b71b946693843da504222a82939ab5c8771aa357986e1","sha512":"8581345fd38b47ec3c2c15b78c32bd80bac19a842ef8926935954cb507a6cb4111a7003115e1033978426cf8f89102829b4111ee117941577f3cfa594f06f36a","ssdeep":"","tlshash":"135113a63461723cbc27c42053b85acec185d06bd52b93fe5cb67a71cad7adc297204d","first_seen":"2026-03-28T17:27:48.282331Z","last_seen":"2026-10-11T09:20:02.497677Z","times_seen":74,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_f.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.593Z","timestamp":1791475691593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_f.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mP%2BopOyyJzEqycd7olEnyLbSokDMFmpd2b3C%2B4niSzOoxHVyBlM6GHq7UICff%2FC3Z8jiOYOZvapnCsNAGIZPvguff05SOaP5y%2FuXkrBp6DUNMz5WZxZ%2FPJC9DTCQIQZZ0T9O3PaAY0M%3D\"}]}\r\ncf-ray: a4766720787b858f-ARN\r\ncontent-length: 2548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2548,"size_decoded":4421,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d648cf7b93f7928895548f2114c6cee9","sha1":"9dd60766e23033a1192a8c34f250dfc30b48e760","sha256":"b7e3b52518a4d99c7f504dc10e2d5bfa0b2011aa69f8c9a3d9cf5dcc56142c6d","sha512":"25037e9046559bcdf13f62b3315593174525cc4149176274009cc155bcd295906d4d5196b0a8a4be95f8f8901ccc9cf3a770a6a2547d8567f2678ea3a8c9516d","ssdeep":"","tlshash":"b2516cf0d932e1623c300baa1549f1167833fda20561490ad3e92bffc82215f2a00e7c","first_seen":"2026-03-28T17:27:48.408465Z","last_seen":"2026-10-08T16:09:03.611916Z","times_seen":44,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c49d12a9-55c3-4840-a89c-fef2d2c93125","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.737Z","timestamp":1791475691737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c49d12a9-55c3-4840-a89c-fef2d2c93125 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pU32suF95Cmkcg1xK1ySGgIHRZ2kz2W1lyRIHUyPwKIrjuGDLroW%2BiR2G%2Bh%2FMBmjAzHJB3728E0d8CBUCDLM1%2BVOZWJGtNpL06%2FvCn94BKeq6LM2xnE4T6JrWNKo88%2B9FGNInxhp1Hk%3D\"}]}\r\ncf-ray: a476672168dc858f-ARN\r\ncontent-length: 5060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5060,"size_decoded":6870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ec8323dbc956132ad97db380d498b91","sha1":"52da51f5a1ffc84b4254fb66d96fefc1ec13e9c8","sha256":"d4cc348114848bf55a5dc4f1e9c5ae85c4ddc39bd73733501b3f74f7f29c7cd0","sha512":"cc8405b62b0b121c63003c7d9eea274075bf4e51c2569e31fbf5f4ea94ad017d873fab57bef744956721521ddd125633135f0e4b26120b1f1ad40459ed190984","ssdeep":"96:WoT/jCUClJH8XQ7c/B//Ce0OJ8hRxNdRFB7dE/4Ql+dMOL/JJgydrRcu:1TedH1c5/qeDMxNfFB7dE/4QMBBX","tlshash":"a8a16c9884b6458db873f71c68b16969b6ed08162f570ecc1b30218d08f7ef25766016","first_seen":"2026-09-18T10:10:37.932669Z","last_seen":"2026-10-08T16:09:03.612558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/47aa6c10-e77f-41ab-b791-a37e8912a34e","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.833Z","timestamp":1791475691833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/47aa6c10-e77f-41ab-b791-a37e8912a34e HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T86PTtTuyHimPEPqxqsSIjqTZbrxjkUtvwdKamHf83MWxFy%2BSYT4YuLdCgLYA5N%2FV0kwZxHeXF0rZE3k44LsOJQdobIfdoJ9%2BAWvdpO99ANs6MGVr10FlmdljiOZWbxCAdGyYUEVHAU%3D\"}]}\r\ncf-ray: a4766721f90e858f-ARN\r\ncontent-length: 770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":770,"size_decoded":2573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5811a6f890a9f3b2fac8b41137dea32","sha1":"e6a9616ebe269e5535dcbf597a278cf1f2b851c7","sha256":"46d5a541142ffa8530e7eadc35f24bb6750a94209cabc2e7f52bf669b303064c","sha512":"0b2221fc097b93374ce91aaffc3d8feaa0c9daf9e3fb09d4d2a3e659f5dd6b55502b4cc804e041aed572ffc01c9ff997cef24a507feb706d01c1d5c48c13515d","ssdeep":"","tlshash":"8f01ba9443f442c04fe8d431f7da31d472190bc458920a065524c8a594b940337fbf9b","first_seen":"2026-09-18T10:10:37.937868Z","last_seen":"2026-10-08T16:09:03.613237Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/1435575-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.933Z","timestamp":1791475691933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/1435575-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDWLiQXNPFgze1icRArM2osG5fbambZbc4ZVRMxB9SqLw%2F5huCQisO00cDXg5tRRll5pevZxolz768CWgJdo6fHHh7HEl37mxQjJB7ioFDKY3zw4e9g4Uzqpm2o2oACFYRcCXXhlLro%3D\"}]}\r\ncf-ray: a47667229967858f-ARN\r\ncontent-length: 6078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6078,"size_decoded":7842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b21aca6fc212af379d937ac299536985","sha1":"50d0f913ce414221299ca57f3a7178f1c64982ff","sha256":"e2c5cd9931d2c0c3fc8e599b9c46c5e620019f9e34b2515fbeb5372df08e8fde","sha512":"c00e4d0f1fea1c5295242ae0038ec900a1a35e8a4fdcda20c200cadcbe689a2b98b0b0f5d98776fcf0e94da419a59342a99ace84132063846b9a961c2b3b8f9d","ssdeep":"96:WsDqY9bNqGIJ7d5EsACAbuFY+Vt61OgAiDmMpKc7KbHhQDGrHFF6xAyha8mB:0Y9pqlrEsD561OgAiVKcmBQDGrF+28y","tlshash":"48c19e9abed3f2c99d05180e24005e6b1875fce7202ddfd86b99722b75f6894843738d","first_seen":"2026-09-18T10:10:37.892771Z","last_seen":"2026-10-08T16:09:03.613896Z","times_seen":8,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/uploads/2026/05/pari24.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.465Z","timestamp":1791475693465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pari24.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:13 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAJufjbU0EMptkv1nvl3zvwU5gPXBue2iZtoXpQZEkGQwhsX6gXO8pFndZPLZ%2FrXX3xyf0iPnMZX3nSAxc4Y0Q1N5DuZjI7SiN%2F7p62BTaNwmE7P0Z94AkYfHe%2FzN9LFgRfQ6qlYdBw%3D\"}]}\r\ncf-ray: a476672c3c07858f-ARN\r\ncontent-length: 8287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8287,"size_decoded":10156,"mime_type":"image/png","magic":"PNG image data, 159 x 27, 8-bit/color RGBA, non-interlaced","md5":"8a54ed3356b183e827b94d80545b03f5","sha1":"dad72c571bed05ca7fb628f00fcb0ad02bbf754a","sha256":"1cc5ec78c7602e000653ef7774f0ee8125dde8c9744de48803da4f3f9f220fba","sha512":"c1eabb2e1e517e0f6914e37ab824f0a2952e15a1cc782b2f0c4223e3f6cd7cdab08f0d03190c741a158e160d7140bd8ec3c6020a90e77d87f30c5a042aa547d3","ssdeep":"192:FNtmAp8HQ4NLY6ahfl8XEbz55drZ5/e7HFenDZgTvuHKdzO6DE:Fmi4dn+fl8XK55RZ5sFew7dK8E","tlshash":"b002c0eb0fb402d20151463b30618a140cbfe6c1f7ef76857833e56e9c26e9818886a7","first_seen":"2026-09-18T10:10:38.014504Z","last_seen":"2026-10-08T16:09:03.614521Z","times_seen":8,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/isr","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.649Z","timestamp":1791475691649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/isr HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sVmnSA4QK%2BxhO45H0rjdDsBumSMp2%2B5JGjzc9hMdFTAyADJOJBqSdHz8HWg7r1K85Eavj%2FpEgc%2F7JLb1dM%2BGyhvJv3UhqsINs99GvoDKw6aYlHl9aQCqSOo%2BPd8QYJ%2FJQo4rTD%2BxAo%3D\"}]}\r\ncf-ray: a4766720d8a3858f-ARN\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":749,"size_decoded":2526,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"1a6db5fd0de3bbd60b7fd65d326f6e62","sha1":"dfb54aa529d8a2590ce6b95e1f92c6e8f1518cae","sha256":"55037674611492223ed5b67d00fcba505fa99b100fdeaa04088a2d0686fa7b50","sha512":"d8773fdc3d050cb48753dd2599ff887a2a483c8999bd24e010611203d3c66650ee1b251a4fe9d3e2497c3f746a45515438b695948840b9227bf25fd691ca427c","ssdeep":"","tlshash":"be01baf743387664782f2cd6247ac8b6c821cc191d8158452153c414d28bac6dd7d5e1","first_seen":"2026-04-29T14:23:59.594114Z","last_seen":"2026-10-08T16:09:03.623632Z","times_seen":12,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.437Z","timestamp":1791475691437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Sat, 18 Jul 2026 11:03:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRg5sLxIO0CT%2BVDoZ%2FPHKppQtMwInEWBuixn1CafMt3jfi59wtWAFve3mJpPbdI2yv6uCyR7FoIR6xDBG6E%2FpPAloMXabnl4VP6ud8D2OvVBFRtd42L%2FoFtHZpWRYk2P6aEKXEihbwo%3D\"}]}\r\ncf-ray: a476671f8839858f-ARN\r\ncontent-length: 8389\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44905,"size_decoded":10307,"mime_type":"text/css","magic":"ASCII text, with very long lines (42831)","md5":"59ba42eb79745cd0a1a444e6276814bc","sha1":"2cf148963a92c716b6d659fa32eb1dbeedc6180c","sha256":"84aad614f8b95ebd3a4ac6f7633e77323066d31da87afe3dafc8c14cd3d0f8fc","sha512":"688100a439b43e47261f064cf5c57963fba518c4cdd6e8b86aaf4333c368992ac59b03133c26d8e364e59804f7072ff58006c2313a90b71ae2cb16b2d1446684","ssdeep":"768:NPQOnk1rhbYollnk+FHkFYCzxdvN3bR2/WLmiyCFS7QHQtBU5WOT1enhm2a7ZAR3:x6UY+LHQtBU59TwDuaP","tlshash":"9f13f86047d035395233473efad6ba082b694313d74f66e2f8ab8768c9c57c71a72a4c","first_seen":"2026-07-01T18:27:28.299627Z","last_seen":"2026-10-11T22:31:53.211229Z","times_seen":6189,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1a26f1e0-32d1-4655-bc57-756e1a043f92","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.583Z","timestamp":1791475691583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1a26f1e0-32d1-4655-bc57-756e1a043f92 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept,Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H91EvcpAiNnuVgykE%2BY046vpZLvF1E9F5k3j%2FxzwKPxN6fAqNjvOLc7HbufHsNj%2BAIBL5sC6yRIPgdquzzBdlIZTsYgu5FqWhBOS42hIvkEJ%2BAnqiVTLVo6fHimNyOB%2BL4ELjvY3mKU%3D\"}]}\r\ncf-ray: a4766720686f858f-ARN\r\ncontent-length: 777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1595,"size_decoded":2625,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2eb355fdf59bbebeaa8e8c6695a1566a","sha1":"5587368ff464732a648322493e2635fbd85fd392","sha256":"9cf9af95dc9bb2ba530918ff6f5db7082acef8ad3344f05e628c4e24873fd0ab","sha512":"0806673feedd81769f73c672947fcf08d17e915be40277b2c7ac38c7019d2e6566a173ed649c82740d5b0a6360e3568bbf96646f27b6d51cfeb0a7762fc76e77","ssdeep":"","tlshash":"453165fa7b58dbfa4b424b321920007176a6207dcf8da2e1d557fc56383d0978aadc50","first_seen":"2026-04-29T14:23:59.724724Z","last_seen":"2026-10-08T16:09:03.625371Z","times_seen":18,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/dnk","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.690Z","timestamp":1791475691690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/dnk HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sj5AKg4r4kMrKmJ40lAwzU4mbV3gW0bwt2UwCG%2FFjHOS3BuGUPT9tDSSiCFri6PRu4MLztPkQM%2FBZ8zdj58r7rBD6B%2BQMOcnqB7bO138GRjf6pSG18ofnBAT%2BPz4xecl2rM%2Bo5pJgh0%3D\"}]}\r\ncf-ray: a476672118bb858f-ARN\r\ncontent-length: 224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224,"size_decoded":1995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3ebbb6beb2fa8da98b12611369c80f9","sha1":"619e8e54418313606294400a56c3ccd440b4f6b2","sha256":"98fa23616dec7a5b0e0d0281424ad1d08fca78ee05a0816474840c06cad6215e","sha512":"465cc7822d8a293b1253b3e6bad342e046e7eb572ffc3a70e51aa6c7d2d531d5efa576508c5e75c3997fdbee76942478efb0eba4184ae991af9e0fc27e18702c","ssdeep":"","tlshash":"8dd023c57776952e74f4387701690e02e01415dd70c55d55304f0fa41a584105789d04","first_seen":"2026-04-29T14:23:59.755153Z","last_seen":"2026-10-08T16:09:03.62617Z","times_seen":10,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3536-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.853Z","timestamp":1791475691853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3536-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofi8NQF5zg9c3uazEf1V7PiMnKEc73QysCDSZdqVs6aYruZcSFmjgDTyNSWFCfSXUx3O9sF2C9P6U7O5v4S3Qy9UMjAjohCeDka%2Be4qZ0GrDrHWkI0hkmopBKyHglYIWsRuQnlaMD3E%3D\"}]}\r\ncf-ray: a47667221921858f-ARN\r\ncontent-length: 13464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13464,"size_decoded":15229,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd9dadf0d69006a11d72a595cd450854","sha1":"223d068c3017fd8b63dd78ff94caa9085652508f","sha256":"a066f7059989b64d42f8a944fc8ee1e89b35ccf57d2465b479770cb25258b1ec","sha512":"c2147f16af943f98d49fc2a6ac316b59a768afed3e54ed0fd9dd88bffecf93c3dc38f998e85c4fe804ba6650a2d31d1da52934cee47ab21cb1b187e9e3756be6","ssdeep":"384:xh9WcmlY97Ifjbcxq7Dh04jSS+hxR5nrBV:xh9LmlTcODAPlZL","tlshash":"3852d1abd4f639a93a0e4fb1d3afc2cc3b065355f111b8d237150b9bbab10d92318915","first_seen":"2026-05-16T22:48:47.053962Z","last_seen":"2026-10-08T16:09:03.626965Z","times_seen":10,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.947Z","timestamp":1791475693947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:14 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 10 Jul 2026 03:33:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bCisTrYHbgzPzY0EQEBcyRVLerdjnzdVzYMjNlr%2FddjH0pbMprG7OJL6VQBj7LxeS9J29ldtj1K2vT2AXDOoQDZE8Bt9pbAUnTnXk%2FuUo9%2FtgmaftmjxLj%2BmSEdZZK2NyqoNpbIHmo%3D\"}]}\r\ncf-ray: a476672f3ce6858f-ARN\r\ncontent-length: 4974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22752,"size_decoded":6850,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T22:44:18.219395Z","times_seen":81983,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_cs.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.597Z","timestamp":1791475691597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_cs.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GeZtcpy2ZW8ofUOuSMm3Yv6qd4hIjz1cctWyvtUqm%2Fdek2I7jNNZ3FOFdtoHFLI7YuwdhbCnQdIMfolZppf9o2eEBjoOEn9pL0jJbhXDcaS1N2jHG1EZJ4qw8zr2eXFAwkER56M%2BRo%3D\"}]}\r\ncf-ray: a4766720887c858f-ARN\r\ncontent-length: 2762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2762,"size_decoded":4629,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b69168d6151345190c3a4fbaf7107061","sha1":"0178caf8165976cbf14696adbdfe018ad739f8a8","sha256":"35a4593d97d617fefe3789b66f14616c10a2d2d1659e9ca04dd5a58f3809b6e9","sha512":"c98339adb3335b08bdca575d19443e1bdd0401bba70fb91b13ad1317710a77a38aa50336503314e6a99b87807cf7a2a3deef22f4ac2af8499da59832c5456540","ssdeep":"","tlshash":"e7513b6c51984928bc56f494a390b82d8786ee991069cef05bd7e365d2c23c7fd50828","first_seen":"2026-04-12T22:30:48.676548Z","last_seen":"2026-10-08T16:09:03.628471Z","times_seen":28,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5f0e6c6d-3e2d-44e0-bbfe-e9b1725eeb28","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.756Z","timestamp":1791475691756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5f0e6c6d-3e2d-44e0-bbfe-e9b1725eeb28 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFzOtohjx4EzOs6ugSh8MtMwqx2HjQtG2yq27V2PhN%2BRs03otuYE0htcYw2vcz5Cx%2Bktl9K8IDg90%2Bzd54rJ0V6Sl3wkkkiPND0OZPGkjeHi3ZzYF1ZFEGTtkDDI8550dAt8feNsfj8%3D\"}]}\r\ncf-ray: a476672188ee858f-ARN\r\ncontent-length: 10710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10710,"size_decoded":12515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48b6aa331bb1ccc65df3e61f30f929b0","sha1":"cbfd05a9a09af57c867233a1c8d8aada9a8cf3ae","sha256":"5565ba8a5c65c73cd316bfd686fdcbbbf2212690ccd3ea096bf4bc72a3c6df55","sha512":"49da873f682c08b46a40dfe4cd006e94b0b10ca6af7de199e05b3b15b2beafd78a94a4c9469323b13fe3339944a8dd94ba831eb4c132669e1da15bdbe80d7c05","ssdeep":"192:y5eYZq80JATkKg0N+Vjl0gl5aj3qknzCQu7oF4SsSnfEFgFDtgf8id:e50llKg0NojOR3FzCQuq4SPnfcgFDmks","tlshash":"9722c07f0919ff10638070158fd7f2bd82b141e9da3460b0af916842b4368eb64fa837","first_seen":"2026-09-18T10:10:37.852523Z","last_seen":"2026-10-08T16:09:03.629222Z","times_seen":8,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/19303-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.864Z","timestamp":1791475691864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/19303-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzWfjyl11mNSXafM%2Bo%2BRgwlf0N74NICRrC6PWg4CmHn3zAGsyd0D8qH0wDOxYR6t07%2F7e6ka5CzmhLAFJZWjEgkFmjV3IEdtdMN10wT%2B22NhjsEok30m%2Fl5L7Kz7fyrGPIwCrSefDQc%3D\"}]}\r\ncf-ray: a47667223927858f-ARN\r\ncontent-length: 8050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8050,"size_decoded":9822,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c009d7feb4a6c7e712f2543c4f03441c","sha1":"607894c79ceee024047c9431a30b42dd0d816548","sha256":"95db0821a9df14e0ca8089f6115da5f0b8ce3a5c9081087ab37bf892e1c191b6","sha512":"0f2556ba721e9ade237a5638297f91dbce132fb93a3fce87bcdc00712d42cef2b05220f71d363d0ece9864806c04ae93b8941207b3c437a5853494316bc182b2","ssdeep":"192:Mb4WIXe0tBgsKoY+Ro1VbuFHs1e1VZAxwLtEzy:MUWUHc6iQFMyaOd","tlshash":"aef19ef581cb504207685cb089ec5836bfe120751ce09ec672abdba98cb4ec72886a71","first_seen":"2025-11-09T09:00:07.566297Z","last_seen":"2026-10-08T16:09:03.629968Z","times_seen":13,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-gates-of-olympus-super-scatter.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.899Z","timestamp":1791475691899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-gates-of-olympus-super-scatter.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uk%2BvAJI2h7ije%2Fz%2BzbSSxukbi%2BkJp6IveSNuR12DIQmC1zOM76UEUzxTi4Y9%2BDxJPa%2BdRZsRRE5Sh21fHUu8%2FJ2u%2FFngKKH4luxkMtL7cwSRLAjV8g8AdfZO65xcrBFUFclOXoMUfuU%3D\"}]}\r\ncf-ray: a47667226942858f-ARN\r\ncontent-length: 6120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6120,"size_decoded":7999,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8aba3412bc0a163634a5cd582f03561e","sha1":"70f5ea36b867111d6bb59783ff19d511e11a359d","sha256":"119313877312b87fcea8dcef9936231a2ab035afc234fec9b48e0f01006d50f9","sha512":"f271f316d452a4b39651ba53c01f43771de4e866b77f5266964075a595c2494ea515c07fe3ec2bc1d00dbf6bf9c9f5a26041f7be8f33725988eef66499741e45","ssdeep":"96:7Xy96vccwYkhPqAaVj6SOEfKvhHM+QRTAdxXy0WU+TY4MbYbWikjwOko62gUSZH7:+9ZLYIo6SffohHMHcW5U+TY4MEbWiukT","tlshash":"6dc19e3262482b046f79523b9806d528b44d1e4b917f4bdbeb9529576c01bc2b5b72c2","first_seen":"2026-09-18T10:10:37.93913Z","last_seen":"2026-10-08T16:09:03.630689Z","times_seen":8,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20midas.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.916Z","timestamp":1791475691916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20midas.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bw23ZtuLkf%2BL4J9hWuW%2FCzeeCMy3aN64oX%2BtcK3xNROspfNQdp1e1hemyoVml2L7f26E6ZyR38928GC%2Fq%2FouLbuOiHf0KywBCH6PcCPquZr73ySNiJyd2htSIN4L15TQQ786BdM3M9M%3D\"}]}\r\ncf-ray: a47667228953858f-ARN\r\ncontent-length: 5532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5532,"size_decoded":7407,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0be44638cbf50ae4d124b3d26d2ca405","sha1":"337cc970aa2da7e9b7f0b26dfa226f36b6fc2bf0","sha256":"5855d05bc4fe1f4e4407854bc8d8bc591f8fd6685f9bf4a3dd2af158e25d6290","sha512":"b49665d7bf9a95d228218abf793129e3befd511cecb2e81deab54c264fca2e0e058d0c0117c4d9ebfdae2e947fb2b739856cb565ba205a8ff73cc93efaf61eb1","ssdeep":"96:07WL4uo9+5SOj6biuV2FUqUv13HjySi7eoyLqte/FcuiwwmSBeB0KG71F:07+4jk0TBIY1Xjylab9cucmLSBF","tlshash":"b1b17dc1d0c1d45ed8df2c6ace99bc93bcb267bd1af6089b1406c8bde173a079524a4d","first_seen":"2026-09-18T10:10:37.772387Z","last_seen":"2026-10-08T16:09:03.631446Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/61430-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.950Z","timestamp":1791475691950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/61430-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdYIImSOqV88vAyJOH19hHCNfKQb7y1Z764yy8YZlP%2FjBRrCqCTrFmOsincD%2FnI9G%2BzhHpoqbqRGvyPZfASOsjqDFCTDjSdaeLwFWbErrOITP0n%2B6oZExnx5r2PBWBY053zZTQulYBM%3D\"}]}\r\ncf-ray: a4766722b977858f-ARN\r\ncontent-length: 8608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8608,"size_decoded":10378,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b10dd685cb373f4463e8b82418836346","sha1":"a7b4a15ebd083fb2287b72bc1a49e340ef8260d1","sha256":"bb2f2dcb83ca604bbca90cae13e72fbc5fbe47722f3fbe80decf699c74c41802","sha512":"ee7d2442e87a79e43e1717b530ed969c1b193927dbe8539eb71badd3fce828873e723f1a16af259a0f1b2009ba021e1e5b40f96b447ca7ce1630585e51e55bb8","ssdeep":"192:mE/uKFNNh+7EH1ILS255SyjWfO7YxD8HnhxE64jt/F4PC:v/FNgpSqhWN06h/iPC","tlshash":"da02bf35b2732fd0d669333a249c6c45e32983b9776d9414acf42362484e6de815f6cb","first_seen":"2026-09-18T10:10:37.727048Z","last_seen":"2026-10-08T16:09:03.632315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_ci_topparlays.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.589Z","timestamp":1791475691589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ci_topparlays.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvYq%2Bc4zutZlDDRbtzHYEFFUrYU%2FZSQ76oVf22mXe%2BZTfcDxxKiLr%2FPOyZxXfLqcbvVNvt%2B92cfjI75%2F4mkP5ggXq1aPlWB90szUJzSDMLTSPgJ1%2Bo%2FplOYhQ282tK5EjYahwZkwekI%3D\"}]}\r\ncf-ray: a47667207876858f-ARN\r\ncontent-length: 2878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2878,"size_decoded":4757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"952ccac51b057e7e22e586db920e9d8d","sha1":"5676925a1f63b2404e104d20832b9db73d773d56","sha256":"0cd395e7958b2fd3391abbf2b509b41e1fa772d5a73956e7f011903ac8d2b5d1","sha512":"89af077b832a3252952a26ae853622aee4b367ca30d37813342139252f6f3abc04a96f6e901a48348da5328bf2be01a6f96e1f02292d63bf6bb85ef5b193e440","ssdeep":"","tlshash":"30516daf939b70738c8420e0596a4852d0060a5812d3db8ee0e6d716c6b1433e6d4522","first_seen":"2026-03-28T17:27:48.382366Z","last_seen":"2026-10-08T16:09:03.633239Z","times_seen":44,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/grc","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.651Z","timestamp":1791475691651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/grc HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsbCndtikgtXYp3FU7ax7TNJyfg%2BGBxclbFhsTrH1awFQi%2Bje5YCt%2Fa8VkSOXglZUwHdXFOr5xdtUdUkW6%2BQiRcqdDEJGh6vTRFvEjSxxs43u6eE%2FwCwLJpcfF6c9kox5tibt5OmMxg%3D\"}]}\r\ncf-ray: a4766720d8a7858f-ARN\r\ncontent-length: 447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":2218,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"a430f2568122eb31b07d54600e61b9f7","sha1":"6953bb26728af2624712b5f29949d9b1e9b3a639","sha256":"995edb326257a84c925e23cd1bf597c7a26d7f0dcfebc6622df5ca66f18e45e2","sha512":"ca120d17ea3b8c7f20ce15d6b915db4ea134ea3ee7784b91a24a9119353b8096bf332e2d133999203ddfe9085d9573421258966f73e76ee006ba0b729d1e10a0","ssdeep":"","tlshash":"89f023653a3e3cb744388a2780152b19c23db030311e85f772d2e878043175fe1014eb","first_seen":"2026-06-13T01:50:07.874091Z","last_seen":"2026-10-08T16:09:03.63672Z","times_seen":9,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/kor","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.692Z","timestamp":1791475691692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/kor HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YolldVxQSJyLqbcVlA8hBpvqj88Nx5zN38Z8a7iglYdZDqonf2TucYkBcn%2BSLMR4jDfwMLCulsAVTXPRg2SurT9aIjfHAJHJpvCPszfDYjAZs5%2F0P5iKU6sdSxcKS026Mp1rudm5J48%3D\"}]}\r\ncf-ray: a476672118bc858f-ARN\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1380,"size_decoded":3146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be4c498f72ba6b8ffed1338fde2ef120","sha1":"afc4992fb630b36993544cd70a8c04985cb7cd74","sha256":"7858f8e4046033efc9ce09d10d32b3a3e9f0a181a8438cac05762ad42570c33a","sha512":"88ba67ae4336040085f1e2ea122487c62bfea609bcab52a153f2ceb5620a6a35a78b3fdacc71528d444433adaaaa12847af8f827168cab2f32f0284ca14fe63b","ssdeep":"","tlshash":"882108211bf050b080eeec54f1c062848b7c78e5c6423bdf8934ac58ce6ef7124a5ead","first_seen":"2025-03-10T19:15:00.544691Z","last_seen":"2026-10-08T16:09:03.639311Z","times_seen":14,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/52180-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.940Z","timestamp":1791475691940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/52180-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhkDLy8wVn2hrGlciGgM8Nzrqq6UxFZhmHZWaBn47GIXj0Zw19hxGHttJDJqn1Rx84Yszw1b6DatG%2Fc4ZjvHQgIG6DOaKS4WQq1gjWSqqpCTQn%2Fbmb63LifZvloUqi7OucbXm2D5Ltk%3D\"}]}\r\ncf-ray: a4766722a971858f-ARN\r\ncontent-length: 10710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10710,"size_decoded":12477,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8d964a209699d4470b1183016a5de83","sha1":"fea3973f415f01c01932057d297a273469dc314e","sha256":"ac98965a059c00075c46f38b8a3b54e58c909827fe484c35a3ce34b642098e17","sha512":"5e8604c41d0ce01e16a3d5e36f150ae44f9e6d1c7787394f746d5e332013295ec63faf049d2ade013da66167d39f3606d5f9300be43050225a5d8e998c7309e5","ssdeep":"192:BPvFIy5j45rFbyvdfp8PF/fZQMW8EPZGvcvJpf2yKGcVYF:xvey5j45rFkdRIfQ5vPZGED2yZV","tlshash":"6122d012ccec6755b080f96c67a9bfcfb5cb703fdad5848092025144a4325f59638d6f","first_seen":"2026-09-18T10:10:37.986933Z","last_seen":"2026-10-08T16:09:03.640917Z","times_seen":8,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/59902-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.962Z","timestamp":1791475691962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/59902-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jh7wanphYWgEOlkXqVUZ%2BHEI9IrM%2Fn5l9QBlCLkWVZA31y5SyOCKnvlUBNl7LL%2FahG8ZiDowaiV95JC9Omqh7Mc6jwJpiAXJl6voFubXYPGSUujwkloH0MioKsArXwCUN6YcoCiN1sc%3D\"}]}\r\ncf-ray: a4766722c982858f-ARN\r\ncontent-length: 11058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11058,"size_decoded":12827,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d4a5ac28386b406c3604cbaf26ce005","sha1":"4509d16c02cb77ad73ed98ad63d3e9c20bf1a06b","sha256":"aceff1744e26a118e53eda8bac45db46b538289b011a26cb21a0b53083fb883e","sha512":"4ca8075da019c919a0d818970e15acb33b165de5952dbe7c9a7c8f4d73b4b99182f33ee5a205d8fd0ef7c25aeb4821c6448fb3dc35d8a9c843faa6b86c78dd32","ssdeep":"192:DZaE0C0I7zAT0YZZXPz1XXT9qnIH780fn4YzdwoeuOxtl7lrp:DtYZZXLXqIH75Teuat5L","tlshash":"3d32bf87934fd00cae618e783a8d773a786f907a91b7c8b4185c381b54d15932ee64be","first_seen":"2026-09-18T10:10:37.781527Z","last_seen":"2026-10-08T16:09:03.643669Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/icons/PRJ4/yt_logo_foot.svg","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.016Z","timestamp":1791475692016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/yt_logo_foot.svg HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPdhrLaLQLwTQuPTfOomzZM1ofRndsAYdxILh9GlHasFESTGCMVQGG3EyQYfUFtVfSi6o44EmFOiXH7IQL3P6oD0ygw%2Fjw4Vfrli5NTkyLNuYnLS2I6RPdTSoBGlWtTgigpGY5FVf1A%3D\"}]}\r\ncf-ray: a476672369c0858f-ARN\r\ncontent-length: 5613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7970,"size_decoded":7527,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd28fcb9c93329a4fa153c1e333bd02","sha1":"cf961f477dedb714f6e3274a8ce0d9fcf02887fc","sha256":"80b418d89b02e19c0a952d86d467a5e7bb135d9ea16296b0b07c097612b3bb17","sha512":"0a47f973c1aeb915662304d1692128f92172029adc0fef20aef2be098fe8895f2d851db2931d5194d445b4d45957d4dc6c5e1538ef497e7c86c869ad27bdf36b","ssdeep":"192:F9wxrgzL9QClaInCeR6HM/H6y9gNiw6Qw2DsWzro1Bqj:4xrsL9paHeRlHOR6PMswsQ","tlshash":"e7f18e3fd73fe02d68987231c4a79cbf8c5565862a24ca03491cb3dd78099623c513e9","first_seen":"2026-09-18T10:10:37.879642Z","last_seen":"2026-10-08T16:09:03.644557Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3af.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:14.177Z","timestamp":1791475694177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3af.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 08 Oct 2026 16:08:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1029,"size_decoded":1006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90eb8387713284f854d84ae86a5ff811","sha1":"61b30d8748b949a6feeb744f34b454c21e972f43","sha256":"e6c11ef16f86c3c06a36ce4e3af7bd3ec27b7a8f1791f510b0e7a1638edbfca2","sha512":"c83efe74ecfd341c188248756fc31c417aff228cc93ae66ca4316c996ad136b341b2caac893c3f86487e6ed48d86179d663b516584e2f708bdbf0635b4cca269","ssdeep":"","tlshash":"6711a2d6123ce0ca4d8bceac9d5bbc51208950ef472e5bc431d459049c6a6df7662e34","first_seen":"2023-05-23T23:57:14Z","last_seen":"2026-10-11T22:54:53.525728Z","times_seen":2345,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":4,"connect":8,"send":0,"wait":8,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6d6e0ca4-0251-4310-82f9-cfd03718e53c","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.831Z","timestamp":1791475691831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6d6e0ca4-0251-4310-82f9-cfd03718e53c HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hkEhcwk2LkDj5KucUP54zsaALsFjKxcRF6lzvrn26LmLPHsFMN2AnrC7%2FwyjE%2BIdp0Hro2nal%2F3uU0EKAuSDJwELmOmkESr7s%2FDkhCP6uEOPjFBga0MYd%2BMiEpk64U%2FTc9%2FlAHYLsc%3D\"}]}\r\ncf-ray: a4766721f90d858f-ARN\r\ncontent-length: 868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":868,"size_decoded":2679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3e0e6ad83592a4583bc4bed66bff593","sha1":"ee617369be9c4498c2e61c5ceca1cb9c52696f3e","sha256":"73fa0b3f51ec367dc495e7ade62cb12ae946ed61b0bb5894841fc2fd440af2f1","sha512":"2edd1b1ed9190346896db30f61cf03da7f88fbc64bcb751c69373df7cf427bc4f204d87b2431504d55fc6cb51ce6306b4ae924600aff43435f9e1ff7d0258dd9","ssdeep":"","tlshash":"9611638ccf975190ac09cc74a2292693b0ac5f5e6bd484500282da7cc11c4676878604","first_seen":"2026-09-18T10:10:37.935813Z","last_seen":"2026-10-08T16:09:03.646601Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/cs_cs","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.634Z","timestamp":1791475691634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/cs_cs HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAPjWqdHiCLBO3jlOStnldyue5A5Hx5c1TvtJG%2BT2X3iuif8Ob%2FWgPyTiAe1Lg%2BERYc2OWajfrb%2BmMcWOkn4AsKDEcK7YeQ8qNYmPzzAGLpXZyPv%2Bk97cVAMacoMQRUKxuqKBpxu%2FQ4%3D\"}]}\r\ncf-ray: a4766720b898858f-ARN\r\ncontent-length: 2515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2515,"size_decoded":4289,"mime_type":"image/png","magic":"PNG image data, 128 x 96, 8-bit/color RGBA, non-interlaced","md5":"e78c42f934d201cca99a4c3ab5f81267","sha1":"cb49c1851cde80d693a51d9155b8d462d1fa30c3","sha256":"9a71c7f43ecc3f8ce79335ab3cdca1e8d3e047e21351d02e600b3f9f56683beb","sha512":"132718215d1790b2f0d17dc125d08d918a8c26999866c1250f7fb04420fa1100bd28540a4b960354e259f2d573746698f06b13e357c8463bdcc9ca09773646ed","ssdeep":"","tlshash":"93515cc3c6ef7ee4920c8a78b15a46352444ecbf5f5d5bc998b49f110e0bc76215a053","first_seen":"2024-08-19T17:56:08.328387Z","last_seen":"2026-10-08T16:09:03.647401Z","times_seen":76,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/nba","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.646Z","timestamp":1791475691646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/nba HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ef3D7d54md23BhA9jnM0mWGtvyUZa9TdFhaBhR%2Bz93iZemjbXgWm1yIUInxTrdLx3g%2FIQibo0eB8KG64wa2Z4vTaEPsxvb8jr4JUs9kIAgM2ZjYdLYXVPz4mG6T78XVab4GEH6vVh8%3D\"}]}\r\ncf-ray: a4766720d89f858f-ARN\r\ncontent-length: 1649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1649,"size_decoded":3415,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"cd18e8380d34e77f2521380e2aab48f5","sha1":"7c4f8be9c5a84890b1edd57e095c3d6d7494614a","sha256":"1b8fec5c02fbe3b4398569156b05d6a3afca1f0cdd0b9f32b3ef5ec921641670","sha512":"f52e8acb9a1a700e6cc64ca8955671736b26582f3ad6de0be9dd3c3b764c75393742b50f31e76ce1059bbc9ccc53f5229ecb9189194a38ff954a1ca0ca166a4f","ssdeep":"","tlshash":"23310abf7254d73a8afede9618141b6e027807a41123e1ccfe62b22d0b93647739532c","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-11T09:34:43.197203Z","times_seen":103,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/870.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.476Z","timestamp":1791475691476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/870.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQ5cRS4xUk8U4NTxL%2FpACcznwwny6kNWCG%2BOFCcSu5w5XR%2FlF7ysWD3toAOCsJZf5MfVA0iktLSaZvcmxvGzzsy9xRqjOu9yylhbv4lLkh2aUHWPseRM2Lm9lloyilb9L4VAn4xA5g0%3D\"}]}\r\ncf-ray: a476671fc851858f-ARN\r\ncontent-length: 523\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1442,"size_decoded":2438,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"6a60267cc2941f6dbc0db1e5148dcaa7","sha1":"ca20df6bc3d323ba4debb392fdc0295869a21c9c","sha256":"d7b5a36e1a8d1313b25c67ed6381d09c9f03b9d0f781d5696d41a6b5e92e9076","sha512":"a9ea233aaf0594be8cfd989533da8a64ce16a868c982ed7bd059ede252114d47812e5f2b2fd6b60e6fddd79ecdf5827b73e3a6ce34ebcbf17db953116acfae94","ssdeep":"","tlshash":"57219c3220b2760c1813fd652b5a53cd9176c42ade6663f86472d62583cb2db0da26cf","first_seen":"2025-11-13T20:36:08.187649Z","last_seen":"2026-10-08T16:09:03.650478Z","times_seen":12,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_ci_promo.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.591Z","timestamp":1791475691591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ci_promo.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvc67vPsF%2FNdA3nnl10SfuBhoBvj7VV%2FJfIe948qGpMHqNxPTWU%2F1n%2Bd6wWgX3ohYhoeSl4RUA1rnzz0x4rFKELRzsvaXT8efU0dT17hKTCXtbyo87IgbTLOWkanSSeNjmNP8INs9Mk%3D\"}]}\r\ncf-ray: a47667207879858f-ARN\r\ncontent-length: 3876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3876,"size_decoded":5747,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ce2517bc9ce1a302051d260a7d71ce6","sha1":"c1edb4784be5755f011999d01883f406b774c83d","sha256":"6011a9f8289d4fab69a8c7483ef85a01d665d507d222193d5cebc26b7c8872f0","sha512":"2de4abe3c2ea70f123f1606ee21b57214119b756b4bcdc4c0b45376678b932897ba4e011c5162c0502e2221fa8a9a2001e4d3742d5112c7fb4e348b3eb91e85c","ssdeep":"","tlshash":"fe815c082b51029606aabb1a2ad0bbdadc346094e0588cb27854f77d163021c7fdfecf","first_seen":"2026-03-28T17:27:48.277143Z","last_seen":"2026-10-08T16:09:03.651826Z","times_seen":35,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/deu","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.618Z","timestamp":1791475691618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/deu HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=StFx7Uf24M3PC4AxaYcKXq10a%2FLh598HRmcPwJi9pcAlNjd1djZCrCupUA%2BSuEeJlyIAWYTnwayoxDrlkObSft2WwJDSZrZ6BS7s%2BhzYBqfkw%2B3Lnw3zNBcrXt0L3MCpCWGyD34%2B5BY%3D\"}]}\r\ncf-ray: a4766720a88c858f-ARN\r\ncontent-length: 248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":248,"size_decoded":2019,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"942da9124c5ea90291d1f15caa64c3b6","sha1":"4448efa0c614ca238520ae0377f554832e6878b2","sha256":"40e842f24749be808fcc6af2ced18f879290fa6fd38f248b6f982be125ab618f","sha512":"f495f0e3a2d77213a6abe103ead9566d5f66a0f597f5d88a3ebcd5a37c369d365f527512cd0858c0ecb431f97ccbc8491e2407aa6f0d9d4a5048a675c2447a66","ssdeep":"","tlshash":"99d09515d980104847fc35be009553740f580642d16d401003632b48dd17c6d179cf98","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-11T09:34:43.227126Z","times_seen":112,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/pak","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.688Z","timestamp":1791475691688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/pak HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUbxPJf5pl5aaUGbG7QRpIwocJBj5Q%2F%2Fen5P3N0neq9K2BskaHlSVFT9gK2wSnCOYOE6Q%2FJJkaa0Cnx1P%2BIDA%2F1bRkmtJIntbnM593vMMK3Q3tLZkrBFMWUBTTlW9kic025vGd0jJLo%3D\"}]}\r\ncf-ray: a476672118ba858f-ARN\r\ncontent-length: 984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":984,"size_decoded":2755,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0370bea53ae509e4a5d9e5ef67ab047","sha1":"645cbdb49859a72da5573e682967fcdb10c91dbb","sha256":"6ad4508e91d8314a9515de6b76c76619b161f812505c0854a50920898c733986","sha512":"7370336cff10dad717886cca9068c93d49ef5d621a75c4915c17f14dc34ec25e7cde9817a4360a31f7c53c4c6a969d314147827ed98c7e51f41534e4fb53ed38","ssdeep":"","tlshash":"83119876e16e7870f9d4b4c284a30ae4f8ef12ff7562ebb2065374766444321815c697","first_seen":"2026-04-05T09:22:55.037484Z","last_seen":"2026-10-08T16:09:03.653877Z","times_seen":11,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-sun-of-egypt-3.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.895Z","timestamp":1791475691895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-sun-of-egypt-3.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kd5isLqTPq145dnGkBBGnuF6uMGj6XDH4oHPk9E%2BGmYzZOMQtCcpsH%2BwSi9ZzQp97NyEgQt3qUqlAwU%2FlH3F1%2BZugjrYqutIM1g3UFaOtBKYttU%2B3E%2FYzUxt3evwCFNZ9m0woSTyW38%3D\"}]}\r\ncf-ray: a4766722593c858f-ARN\r\ncontent-length: 6162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6162,"size_decoded":8037,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c13ac801a3fa89f9fecdb6b97cf1590","sha1":"35e1d886c4f05af5ca6344647b9d78055fbd97d0","sha256":"152098768e0e2a7363559f5e64ec4c374fe921f8a30c484431ba5d8d37739036","sha512":"e69b9b672368c9267a93c36a58fe385185ed27c6b3b213b707c156351ecd96e1b26ab5eb7d1410f5fd8c34dca8cd1b09d8126c5836f0f78d43d69bb25be67c51","ssdeep":"96:0MOLPpYz7GXjFJ7bbUt1C+2ngaGKsyGwkJqNaXpHjXdOfHX3i1IZcs2Hn:4ezi/gaxgaGDgNMYHX3iSb2Hn","tlshash":"60d1ae75938251868379f3411f0b0dce2ceb4cf1f1a4de149a1da4e1a5a1eacbde4b36","first_seen":"2026-09-18T10:10:37.771074Z","last_seen":"2026-10-08T16:09:03.655854Z","times_seen":8,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/eng","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.610Z","timestamp":1791475691610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/eng HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAew2JPPwe66PvQovZbn0rWAE4mDhoyuBld%2BttX8pEozNZCjiCSCjdAYpk8a3eNLw%2Bh26JlMvL3Ky%2Bv9b%2BS%2BVp3V7DKMv9AkrVYHiu97DAGD0mnTdmN8rdTZEYb%2FFbRSNjUfBC%2B%2BHoM%3D\"}]}\r\ncf-ray: a47667209882858f-ARN\r\ncontent-length: 2025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2025,"size_decoded":3803,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"28192fde72ee7804eb6b985625a2d269","sha1":"21ce6e4e5774d0e6fe823fc574ce301d961411fd","sha256":"9a36d225b59eaaeffbdc8bbb5c3a59d2005b19967d2138b25557ec3de1763f57","sha512":"6eb0933824656a8b4fab2ed849bdb265a48b1cd12fc71350972a0928bc0d345b205dff3d22d6ed0da4734805d06b4d0f5391b346440f20f780cf82bd684b4946","ssdeep":"","tlshash":"3941eabeea1e28f805c4ac05b034e111062cdfba3787306d8915f9d8ba7dc6d1b92495","first_seen":"2025-03-09T08:50:28.596159Z","last_seen":"2026-10-11T09:34:43.162319Z","times_seen":114,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/ukr","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.621Z","timestamp":1791475691621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/ukr HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3K5DB7aEaeODWCjdpKcxpH%2FtUi4x06cWFYeSDhh0RS3cX96nKNDfPR6tInQHtkv8enviepSp4qH%2BfPRTvta7Cj20EiAReCbc1gwoVhPf3IEC5S2p3NB4sK5rDjmdN%2FSeXVcqFNZmtw%3D\"}]}\r\ncf-ray: a4766720a88b858f-ARN\r\ncontent-length: 316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":316,"size_decoded":2083,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"11fe565f6938a10bef2f1c6cf9dcf032","sha1":"dae75dac8a12bcfbad8e19b3a26ef842370a93fd","sha256":"9a4a597d453af66fa11de2af6f3e2bc2f169905327be83a9f8576f02713017f8","sha512":"10049d55e7257eb2c3c3ed6ee64a61d3d41e8c5d6cc4e683676f420d835576886cf9c9207e3a2c14d5abd011eeb1fc590c14de0a69c0947b24e53b7b715ddf8d","ssdeep":"","tlshash":"43e07d8b6204ac70c9303e775ed56c80486f005468451fee0c26f4d36aa14129a96506","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-11T09:34:43.127737Z","times_seen":104,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/rg_l","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.695Z","timestamp":1791475691695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/rg_l HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pn%2BzngE61qhNB9hUhru0I5ISo9BNbrAHJnrVCoBlU8sqLUfueugtp0gyn5HoYgfW4dMt4WkjvReYgqNuyhLnDWw%2BpPChT3FYQ791u2atPInuh%2Ff2JJSGu%2BCpKdud3D8fCw5%2B0yZk2Ag%3D\"}]}\r\ncf-ray: a476672128be858f-ARN\r\ncontent-length: 2602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2602,"size_decoded":4374,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"06ba3562fb42b608fe9c12ce972f3529","sha1":"0644e278cd4e7668b812befb0c03d896f21576ac","sha256":"39ea2bae26a94349948282e43354d624a75f946fb101bf810a49fc3a2b655c2a","sha512":"c0cc1594aab23fcdaf61fd0fafd3d3fa25b48d64bcf2e2e48ab4dd1f58c77a2a39feadff293870eda3c0792307e02fc4b999822b0677a8f9f8628749ce58a5b3","ssdeep":"","tlshash":"27516dd514456033fb9f4525849d89851b37f1c5312d8a36583bfc263778e8050e3db2","first_seen":"2026-04-29T14:23:59.82116Z","last_seen":"2026-10-08T16:09:03.659883Z","times_seen":11,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4d518021-ff83-4082-b997-4edb7b86a7aa","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.752Z","timestamp":1791475691752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4d518021-ff83-4082-b997-4edb7b86a7aa HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6N2o18CWo5vFREfTocarrrjGzZf4VU%2F9Ihh2oEaB%2BrItPAWXy6S9xFkHauX9W%2FjfqSQunlGaDL8a%2BNpHSJSR2yST2Blo2Pk%2Bk0tX9iUPr1TrFGXOaxeBL0zuYjZyLBzSXk08%2Bu6Kc4%3D\"}]}\r\ncf-ray: a476672178ed858f-ARN\r\ncontent-length: 38612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38612,"size_decoded":40423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"204837e7d86a94eb029643ecd81985d9","sha1":"d24678e82c80a0d7d90cf4a43a70d56a2d4d9d6d","sha256":"34d00516dd846570ab92fb3cbed30dc53390fea9b1777acfea3bf0ee2524b7ab","sha512":"96d34093d45d31b272ca3b2460ac7ff2b254a0d8806e969b2593fba0d109b80208733bf1de75f01fe9f83057ffc6fc3cd7e2404c84e375d286ce57131a12f1e9","ssdeep":"768:xDIh6GeKj83u9oP4V0/VKIxbpDtaHOIr8FCA32kmpppz+1ozoo2U:x8hQK+uk4VqN08Fl2aSrb","tlshash":"4603023c7ca51e4bbcbca0a9e5f0115eae0d64640295c09e8fbccedbd127465d8bac50","first_seen":"2026-09-18T10:10:37.96758Z","last_seen":"2026-10-08T16:09:03.660597Z","times_seen":8,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/630-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.851Z","timestamp":1791475691851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/630-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDaL%2F1iMtJ6nvRoFUMtMiQA%2BD6qpS2wG3fE4FOARiFgsfjzRK%2Bguqo0wSDezNGGn6KjfI8ys8FCkJos2CuknIrpfbrmltiAtNthahOMF0iY%2FfRindNBg%2B3riHtF9EDXyX7O5tNjXYKM%3D\"}]}\r\ncf-ray: a47667221920858f-ARN\r\ncontent-length: 10352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10352,"size_decoded":12125,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42f7c028c048704907e4633c6690f89b","sha1":"7c495a17d5b89d6fcb18858ef1c908c51df27004","sha256":"d634bec84bb473e724efee1668038d117df0ac9b81e70e5e1402fc12b633cf6c","sha512":"d8cd3832e2053424fab01400ded856d4d69db200f195db206357ddf15f42402806317a74a33f5569da0fb43d3f2771870b61c483d7da1a6b050ebb88b4e20a3c","ssdeep":"192:T2/kX5Eu82edNWvcXUhVT0bTJzZhp/hmDODAPvDKmeiIFgigQ:Ekiu82edNWEOeNzTiLKme9gQ","tlshash":"f922ae402b50676946992cb0aa70342de2c760cf91d6d3c12b531ba59f4ec74b1bda8b","first_seen":"2025-03-05T01:10:53.871723Z","last_seen":"2026-10-08T16:09:03.662691Z","times_seen":17,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/1998-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.888Z","timestamp":1791475691888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/1998-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ma0idv4gIUeNzshC2FA9sWlr6MFxwpgKl4wsTYu4fcx%2BPq1ckXigh5yqXNNHDFjEXIxJVUXbwOYcp9Qj3V%2BBhM26h0WpnVWXt4ASNNqISgWb3vS98aZYaJ39yGjkLTQy1PLsUC%2BqYwg%3D\"}]}\r\ncf-ray: a47667225934858f-ARN\r\ncontent-length: 11986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11986,"size_decoded":13755,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73145073d9e08db8577190878ba1432a","sha1":"0e6d8135fff8f3cfe5a85df9101253e6ebb7fa7a","sha256":"44770d44be9ee5c86b678b4a7c66cbb1cf12b12695ca0905227cb626e09cccfc","sha512":"cba510c05d357442cabd36d0afe73f3c17c8b204f84e6f798dc349605dbac7bd241823b07715f999c865041cbee915f609bbd9a500a142ffe917868b8c64f206","ssdeep":"192:PTYIMB3LjLiLRTKHfVYFFjoeiBUTt+XkRIlyYJf1C1uSdgXxc:nMBURTK/VYFFjkUTsURaA1uS+Xxc","tlshash":"c532b0722a059e8f8fe4901af5a143e611b87c023706fbd67fb85e0646ff798449087e","first_seen":"2025-03-05T01:10:53.961046Z","last_seen":"2026-10-08T16:09:03.663439Z","times_seen":15,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/elk-pirots-4.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.897Z","timestamp":1791475691897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/elk-pirots-4.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIlrAnQ6sVr2I40AXJlK4bYgcHFU4yBA56xo70155bBGEkpJVLbsy6KucQny3cpY9CLwmGN3XS5ddIqNs994vyaaurrZjdu0bhAUfd2inBjZoewcZRCG2%2F%2Fs53F70ZxDsNzL5MBgZvs%3D\"}]}\r\ncf-ray: a4766722693f858f-ARN\r\ncontent-length: 5712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5712,"size_decoded":7579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3911f672c99ca1f2a2f35d95282cc21","sha1":"39f6db7dc8870cef0df28013382601f9c653b8f4","sha256":"b75740fe5d0638d95c44716ba9e64351119620233c801fb1e102ddd963cd633c","sha512":"195243b6dc7f2b1ae8166621b6e0aca3ce00f9f4e11d1ab68af4721aea9baa734778ebd84ecfc102761034d22ba1cb2960c522e48daadfd14add3f25047145b6","ssdeep":"96:axilfzJCiJbgsXpTvf/ClFdop+3k0rpNyO4yLsK5rzJqqAEVEyDSug7TqrAcopIA:axy1DJbgsXFwdoc3LpZsK5rz0hEVEy9+","tlshash":"fac18dba306e1fa5be79eb18766d733c808645818d0fac11f697f4b4e3875288707039","first_seen":"2026-09-18T10:10:38.042006Z","last_seen":"2026-10-08T16:09:03.664145Z","times_seen":8,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":732,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vswaysdogs.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.907Z","timestamp":1791475691907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vswaysdogs.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:13 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq%2F7DQefVWiL2v9y9IkXK0mEeEPq29W2ViFzsos5ovy9G4gjIhlpOLSVOPsaMd30ET2Q1%2FN3i2jU2OkMlTPzcVUsKnKKI2cIEYx3elc4wgEnfU3gT5L3JFDYDSk4y6wYLSlCAr2DdBo%3D\"}]}\r\ncf-ray: a4766722794a858f-ARN\r\ncontent-length: 7628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7628,"size_decoded":9495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4626fd54c0aaa5ba39fed029a881b34","sha1":"9b91a678bd80b194ae3da67b67e98288a9342d15","sha256":"304c111658b3fad4e0f0e9f2e8ba25137ad8f439d6f45a3cc1c143efa22badb5","sha512":"f5e5e491127c4199e2d2fbb20d48770bb6976ae6b98a84c91c9c511a67db33eaf260d2948319449fe6e6c07b31a7e7f5d5daf78c8dbe1946eae045b553d83f76","ssdeep":"192:Tx8b9ahhVZFrUQL9Rudom1vOEra+38B+OcP/pnao:Tx8bChVZP9RRKvnxMBI9L","tlshash":"3ef16da91c6fc4a29158b695104d3337ea77b844fa4e92c462ddc2bbeb5cbb80e16108","first_seen":"2026-09-18T10:10:37.971574Z","last_seen":"2026-10-08T16:09:03.664699Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/esp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.612Z","timestamp":1791475691612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/esp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txOmr7GQt4ykNM4gIzaovrVuGaFDsUrieQm%2BOrBOzmLaf4kmjPO8qlTDON%2FujLGhypO%2BJmU0eZoFvZx%2FwEvI31Yu67GAku9%2BA4XiltMf0QjmWiHFCQCxEqhbMRZalGDw802k%2FZkC7P8%3D\"}]}\r\ncf-ray: a47667209884858f-ARN\r\ncontent-length: 594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594,"size_decoded":2367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc90fec6e81738baff462e2735fc1efa","sha1":"f119101a5d267447fa68a42e9ec138a593824e0f","sha256":"a4b2b2d4b54233630539359624788d65f09ff7ef8cce9c68c1674df8f01fcb2e","sha512":"e1b8706344332765113a43cf24a86cf717bb6cd4480e8959e47a6ab0438fdc5589c52a7dbb0cb24d7cfe9b5e5e4a85bb19955db1dd87592a0575587508fe6460","ssdeep":"","tlshash":"92f0b130c6bca3a2f4b32c2c61c20392bdeb001dad2ddc289b43a2c485d4113c238210","first_seen":"2024-08-19T20:57:32.148462Z","last_seen":"2026-10-11T09:34:43.195891Z","times_seen":108,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/nzl","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.652Z","timestamp":1791475691652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/nzl HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Au1NDTF7uJUKsCScL51aUeufDsul%2FBxG9pdDZ%2BO%2Fg58a7q%2Fi0V%2B1OoAF%2BUuBvYkn%2BKpqj2CP2RCaYkrpBJNbalHM7OPmYxvgdyZCWmQde2GRMzQCgxHwWQedgEUaMtKXD1aDjRQaX6k%3D\"}]}\r\ncf-ray: a4766720d8a8858f-ARN\r\ncontent-length: 1416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1416,"size_decoded":3192,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e600a6ead52d772485eed990cd296d74","sha1":"2586284f8c711d3425b1fccdae5b0bec7e044ba7","sha256":"c4a20d4ed8ed22ef760c7eea0d4bd99fa32c22632fa157be9311b31c9a1130e0","sha512":"ac725e556c2483849bdda677a1edb0b16f9ea46b8dba12844f074b53033f8226ae71678766ce31031e693e80c497acb717c2b42e01b24329c8f263ef6030e580","ssdeep":"","tlshash":"8d21b9c5dec871508d94b1af298e934623152c6b674522b9960308f055f46ad4f44de7","first_seen":"2026-04-29T14:23:59.748156Z","last_seen":"2026-10-08T16:09:03.665853Z","times_seen":11,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/ec4fef5d-1395-4dd4-a0fc-00bc9e392fcc","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.713Z","timestamp":1791475691713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/ec4fef5d-1395-4dd4-a0fc-00bc9e392fcc HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxzmkkM6UX668siTkcScPXdbMaW%2Fgngr%2BQJhpIcKeWj0eOq9%2BoLCubHsaEVaXKXCKWDwx39Ep6VpvzW5%2FJnINr09tXYE6vfyJ7zpGqbSfv9aYetsBw4HZgzMIwhKI2jCOYdLsgNzaXw%3D\"}]}\r\ncf-ray: a476672138cb858f-ARN\r\ncontent-length: 1420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1420,"size_decoded":3226,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b277bb78bfcc1c9d138bf8bce6be4282","sha1":"132fef3a0ce8136fcc10c4bd66e52f936a2fe28a","sha256":"9fa59cb92472224f9db50353829b3ff48d4761730c86017dd0a8ba7111cb466e","sha512":"ecc9f8170ac376f92c255f10c9b0f87ec98efdc1a350a3f7f0986136b91d1a63d32faed078ffc68e14c9fce459220807ac63c504a2fae727e7fe0763885f160d","ssdeep":"","tlshash":"ac211b7f8667ccc1ada8dc1deba375f104b210b5b56349f42665c692601c5b4ce43427","first_seen":"2026-09-18T10:10:37.842771Z","last_seen":"2026-10-08T16:09:03.666463Z","times_seen":8,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/cb074165-5744-4e91-a3d6-0e3545709b35","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.768Z","timestamp":1791475691768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/cb074165-5744-4e91-a3d6-0e3545709b35 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5lRrx9M7QXYvhOkcOKICA1J9fGKpjqUXwZZm20SGZ%2FQ0Yp4uam7JpeNLg9uOnj0rQJbybLRG0xEmw7V2njDU74c0BvZevDi%2FFDNF%2FJGR7%2BZZEPxkakTQEp1lVCZuuscZcgobtPEsvE%3D\"}]}\r\ncf-ray: a476672198f5858f-ARN\r\ncontent-length: 844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":2649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4e89c37720dd6994954e070db1676ce","sha1":"105b034e0aff088e2a2fe61499a7c7a2e5709624","sha256":"91b6895f148ea6a4fae968acc37774f46d18c9c48ed2b3ec1b9e54416086fbef","sha512":"db7258aa97e56cee6799e37fc2b182776774b4789101ea86924246350463b8b9444de0b322e403809728c5fe320381cca5ea8c09c498ce3e6f0c7575cc3a76aa","ssdeep":"","tlshash":"2401867352c6088cd0bbd214ba6fdb2c3cddc8578881d8f66fcb467b52044166b78740","first_seen":"2026-09-18T10:10:38.03561Z","last_seen":"2026-10-08T16:09:03.667079Z","times_seen":8,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3490-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.849Z","timestamp":1791475691849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3490-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOs7mUzD3DCPPLtbf63MO3LdrzbhTZ1NxaXCNPwn6eV06tunqsdiSfezbH9nI%2F27aAGGW0bZhqzw4cFiNPJdy8dxAdbhiumLscoSCYW1uz%2BAGrBujB4pc5Glt7%2FfmxHQUnTKLLdAtGE%3D\"}]}\r\ncf-ray: a4766722191c858f-ARN\r\ncontent-length: 10982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10982,"size_decoded":12753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9333151a86780420e2d28970f1630bb","sha1":"82bd1bea52e9c63036d7fd67249aecc470256dd3","sha256":"6e03f4eacbe3ec71f642019475c9d106c74a9a38ec3f617dc86b95eb59a93908","sha512":"1f08f92472d66da6498c992161c7eb97ad5c9d23ce08000839b2a715f25869cbb9f2a8a0841c090c3b7939922c4fb659e20aef609cfebe1bb41d607f89225b5a","ssdeep":"192:O3jW7GndHU8IenLjRnAcX0EK3GckJZ6HcvAwWSqBSk+xv+pi8JjdRQOs+8:6HnNUw9yR0cHcvAxSqGvmZRQF+8","tlshash":"a732cfa9acfcec31c5a0bb1a1cd4a01220e671bb5faa2753d49dc1c439780f619ca8a4","first_seen":"2025-03-09T08:50:28.601855Z","last_seen":"2026-10-08T16:09:03.667882Z","times_seen":15,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-supreme-hot.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.896Z","timestamp":1791475691896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-supreme-hot.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIC3SHeZXASrHF3zCdhAq8CtB7pFit14L8b2DsV07ga6jJpcK6p5d0Z%2FiNggOFGYYny%2B2%2FL8gfXIR34seRnvZfweL4xiJKqdjp%2Byp7wtXPF%2BNa7QytlPlzYAayls71jLi4btTXcj9hU%3D\"}]}\r\ncf-ray: a4766722693e858f-ARN\r\ncontent-length: 4850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4850,"size_decoded":6723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"916d22ad59c91eecb76b9eb86611977a","sha1":"e2f0fbb689bcdd90eb7d6b8872acee7d0127b0ca","sha256":"2b7ff6c9a4f31de4e58a3224a40beb3405075f5ede36030acaee4c78b249e886","sha512":"3fff2929510cbe063126987a81b2ce39b2989a05b330a4b3bc4d133352a0746fc6997f68b76cec032996f3e6c6bdbde2a627c8f21081f1fea0aebc1cecc3e0ea","ssdeep":"96:nChUTEse5MslQBf0IuERtc51JlBHmwLTB5qfKVuvpVRCxC7bWm7AZdCFdJ74U:xx/aQBsORmVBJLTBcfKIvHRCTmkZdqdN","tlshash":"89a19e7c63f4255f0e11090e2ec5437cefa640e69e035316d1d1f21eae295d52b8352a","first_seen":"2026-09-18T10:10:37.982869Z","last_seen":"2026-10-08T16:09:03.668653Z","times_seen":8,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-super-sticky-piggy.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.914Z","timestamp":1791475691914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-super-sticky-piggy.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:13 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BO51lNzO12WcoliX0Ot0lngZ9DVKPdHra2jvChrDUaz%2BPDAqHvXRVA7kf3nTl5GxOLTX6nNRlUkecIWPkDP%2BUkkHo9RvqrYpKE%2BQjgnmCUAJg2KnqahFRdyDRBOz5ZQ7pBDy0QDv424%3D\"}]}\r\ncf-ray: a47667227951858f-ARN\r\ncontent-length: 5676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5676,"size_decoded":7545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ea4e1622078fd69bd923306c123c455","sha1":"3b142b8ff5835787674699260b89e37e441dbb39","sha256":"66258414ade65644886661b3ba7dd7beb31f9d93d028c3d845246db1470264b4","sha512":"b9c696eb10defb8bd5df9e9561850cdfcb3e5ad7fbc5586728ec9057590ba46bad7f16624766ccd72a57f4c7ddab495dcfacea9feef375f4c2c21f62c80dac4e","ssdeep":"96:rGhpkGyKv8urZpC4t3W5vd8j4LWqe0tV0Y+PJoB/8CUoW+20ORBn/:ahuyv8o7ZK8j+1X0Y+Po0joW+20WJ/","tlshash":"5ec19e3f56ef6d849156e8c8b758c87e701a7b940f96df43324c26d1ac0ac4f966b09c","first_seen":"2026-09-18T10:10:37.832602Z","last_seen":"2026-10-08T16:09:03.6694Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/59555-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.943Z","timestamp":1791475691943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/59555-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oN0btZ3jRCQG4%2F1dw98z9lwLmfHriZHwAIHKPzDmdB4qvhDIZGiS%2F9dtZlm%2FlmqJ8AQ6eqsyvdqSNUlxMEiknlMu%2Fo5aWcFInHP1ATwbEOmLU7hgpaF3%2BmnMF1svTCeLMyFwCoUamGM%3D\"}]}\r\ncf-ray: a4766722a970858f-ARN\r\ncontent-length: 11530\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11530,"size_decoded":13303,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542f10427888be99b7dbdf016215c1dc","sha1":"5bdc572e639595de50ceafa60444e309b1a490c9","sha256":"792642ce1691834b6b3e6289bde7c5346142e5a7ea5ecb214f986fa4cce1971a","sha512":"4cceee3265f22ca9d10342fe2a4d3123bd24275a03bc1837758abe992ed7ae4ebb0f35ef3925ea5b5947073467e6c95125795da4c79a3c3fc1dc61e5bb3d18e0","ssdeep":"192:bbAXpYt/98am5xSVPOjbIzw0zvLttxaMDNuk0E+HbeWSTIZwlp2n8CBt8:bvUHEOj0zw0zvLttoiNuLb8bSZ78","tlshash":"4a32bf955ecae30a4e5737c35557c879438b30a62300962e622a7ae3271589337fdfc8","first_seen":"2026-09-18T10:10:37.859049Z","last_seen":"2026-10-08T16:09:03.670048Z","times_seen":8,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/915.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.480Z","timestamp":1791475691480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/915.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g84nVv8MnfWiEcWRkS0VaVypSNT5NS7hTSLfjYd4LwutAXs2%2FJbUGkIQPufmhcztuFHT5xuStSbjIGaVNqMkGMGYq38Ky4jNnJRpM48hg9x0Ur4QNPe%2BfhhF%2BmWVGLLK1gHZazX0KLs%3D\"}]}\r\ncf-ray: a476671fc853858f-ARN\r\ncontent-length: 497\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1417,"size_decoded":2412,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"a246c443f2506f158bbccc468d4de4d2","sha1":"e5e9dd4561d1fa6be30f266e2302eafc18cb323d","sha256":"b7b587d635b50ffea56e87ca74fea68da1aaac2a320f76e704b312ceee9e2ca1","sha512":"48d4b6730693f5af96bb4a643c4cbe9970962a5a2b940c08270c49fa06a297fb50a0bd977da27f0e6bbb830b9cb39cb5922cd2ba9731c6a431047cf09c1c46f1","ssdeep":"","tlshash":"f921ce3320a2b60c5813ed502b5a23c99235c036ca6263f86876d72182cb6da0de16cf","first_seen":"2025-11-13T20:36:08.496839Z","last_seen":"2026-10-08T16:09:03.670608Z","times_seen":12,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/735.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.494Z","timestamp":1791475691494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/735.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Vck2JPEchcRGCPxxXHSmWrsAqOLG0tuanhMuH%2Fd3F63ZLlSRD0PksoljC%2BB2uWzZBsX8i%2FgmjNH8TyCbUMPQdqIVIcI726rQdrqrE3WoCKuIevP%2FFP13sX2YutzrTS%2F6YmorjYrmy8%3D\"}]}\r\ncf-ray: a476671fd857858f-ARN\r\ncontent-length: 956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4197,"size_decoded":2875,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"69907d3a92a34578d3fe6d59c2cb4790","sha1":"773fc95c95337cac53eefeb5bf5b6e104a81147d","sha256":"4701b9a3236af4bb0ce808f4bcb0972a4808d7d9bc47035d5b2fd9e4238fee38","sha512":"a68980947229a68c5dac195be39da3bb9f778b472366d294703fcd1c455d18c968468e1c36a7f7f0def42e00f72366304cb18f8e36482bfc6d63fd1539c3eeaa","ssdeep":"48:H1F2U4jTp36S0WOfpO3SX9ffioJDv+aNEj8pFPR3lmrV1bHSjqIq:H3s/RCfUSXRfZRv9NQ8pFPRUY/q","tlshash":"5a8103733ab2760d8863bc7daf8a15cf7070c022d66696e855a69b35439b18d0ee105f","first_seen":"2025-11-13T20:36:08.358561Z","last_seen":"2026-10-08T16:09:03.671183Z","times_seen":18,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a055890a-744c-4f96-8f07-6a8febb13741","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.709Z","timestamp":1791475691709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a055890a-744c-4f96-8f07-6a8febb13741 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cBKpU91DrggDyFCeK0BRwdCLhCu303O%2F%2BiFVmRXuPqlfVd1MKVdOwl%2BaLVT2xaVnBRZvhcaYrdY5fnyb%2FsnVf54C%2BbPPEVj5kSsljIQmH6IpzTTDDtBSRDmLfEFJmIQqEg8r1PFfcTw%3D\"}]}\r\ncf-ray: a476672138c9858f-ARN\r\ncontent-length: 1838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1838,"size_decoded":3646,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0bc7da6331eec1675ced58da768c84ca","sha1":"d7390df58b944fe690852955e67a58ddda019f53","sha256":"7c54e64a832477cbfe2b8c4dfa9df192581413a0cdc588736f22dcbcf12949be","sha512":"79464708f91e011b8e1bec70fa9d4c8b78f26ff5e51c694a70bcbf9ffb957b83b2c4249dafa3b7428e75601fe0292e75781645220cd4faaa49c1c3b4991a23b3","ssdeep":"","tlshash":"e4310988f3d49bd9eb2ded39327f5a27d80534ec6ac1790894c1504393e5991b0021be","first_seen":"2026-09-18T10:10:38.009435Z","last_seen":"2026-10-08T16:09:03.671747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/11dd9cc7-c721-47c2-9a95-19f116134e26","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.718Z","timestamp":1791475691718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/11dd9cc7-c721-47c2-9a95-19f116134e26 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dsEsFylJG9vLWdFKub1cxaJRW1UGWZqXbiyFdzT2gkR2FXQicx4l%2B8qE0xLXapHrDUDVhXE4EU4uidAZfr9foDHgAb%2B5kfEMPKCoMrEk9jcZIgRltdct%2BEVE7WH0dwb5QFQDcPxahg%3D\"}]}\r\ncf-ray: a476672148ce858f-ARN\r\ncontent-length: 1170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1170,"size_decoded":2974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfad7a629f997d3d3e85457f61859701","sha1":"174de64e2f8446cf5cca25efd591927f7f9ab222","sha256":"324c54eaac421558c4545a76dfd80a8b534e4a63109c53185aec65aee19d5077","sha512":"02e5a77a1b9058925ead7f82fb3d45aebfd835396238914e7e62367f5f8bf84959aac7483d5a56acc26c48b8c80a8e728feafd83464d535a098f4c55b2630657","ssdeep":"","tlshash":"5e210a91c9c082f7ac261c4d33e4f470863411c766fbbf60a1ba6d2a28127d13bc9559","first_seen":"2026-09-18T10:10:37.762556Z","last_seen":"2026-10-08T16:09:03.672323Z","times_seen":8,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d1a9b80e-b42b-43df-bb71-5aaad5d978d7","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.747Z","timestamp":1791475691747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d1a9b80e-b42b-43df-bb71-5aaad5d978d7 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOkTcXKSd8XdK5cON4oYG0E78mRiLoJYdq1V4Pp%2BeZIgYWqtfqT%2BHlesjDSpV43ajx1RWhlwXHCl%2BOWh8A0Y7FXoVG05AogcxM7jn6l2RIfWqkZykrmx9zOqzGnXhdDB1AFadqnxY00%3D\"}]}\r\ncf-ray: a476672178e8858f-ARN\r\ncontent-length: 12572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12572,"size_decoded":14377,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdd202d91e60404703771eb662e208a","sha1":"76d8040928deabf9d0b886c47c3094db739c180d","sha256":"23ef082c90909039d5e44ae93bf94fe71a043314885bc383e07075c37661b76a","sha512":"013cc923dffa0e634adf8d7fd57896dea3fb9c6241aefb645bdc36489ba01b179035a5b177664969fd512f2ab3e718a4e20e5a41c352417a76d7ed1e401aa1b8","ssdeep":"192:d/T21HtTUEIENpM3d/Yfw8yyAieLP0SThrJ0sVH48pBDhfVqLA6YZ:d/T21VJpMtwY8hAieLP0Slraehf08Z","tlshash":"6642c0bafd051f7c47000968d43d368e2f97b5406085a89d3ed3c6426b2551a2a0fdee","first_seen":"2026-09-18T10:10:37.76857Z","last_seen":"2026-10-08T16:09:03.672897Z","times_seen":8,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4fd8f2bd-07c7-4ff1-bbd6-d06e649cb1f1","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.751Z","timestamp":1791475691751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4fd8f2bd-07c7-4ff1-bbd6-d06e649cb1f1 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LM%2BA9pOgu0bJWrJUDy2jfBRIVWx6TS7Dyg4JLZFktfskLesRQHoiCVxPNewbXYYy2nMCBG8E1efUZNoC0thPrC17UE3%2Fq3tQHBKPXcdHT7uhSPPVmlHSyXKvDTXVNS2f0hIMv%2B7davA%3D\"}]}\r\ncf-ray: a476672178ea858f-ARN\r\ncontent-length: 8640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8640,"size_decoded":10444,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"523ec879729c33ab3cd500290f674948","sha1":"b300326500f3efa155513331cfa9cb6ff3bfe5c4","sha256":"c7d525c661698029630fcb89fe633d962c2f1da20d85c4a721309fa3c516c8ce","sha512":"d5cc82e30d03048144d91cd243b254f6c7a93a38d46ff83a5683184320b149b84a4486ba196fb4620cbaf1a8ac1031a13ecb87438796e83c4dd63f30f8843bd0","ssdeep":"192:4rp2m9MjvDC90942eZ5CuQQBhZtR3pxEZCiCHi+u67TOFD:iubCq949zR3pxECHFRTOJ","tlshash":"6f02c115f9f43f17beb9527830a105f42fa3222e805893cf285c7a94a35cf123d696d4","first_seen":"2026-09-18T10:10:37.99076Z","last_seen":"2026-10-08T16:09:03.673509Z","times_seen":8,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b0b61e4-bf5e-4ee8-a328-04d71816f48d","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.763Z","timestamp":1791475691763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b0b61e4-bf5e-4ee8-a328-04d71816f48d HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhRASS%2BhQOgoKlB1PARTVxiN8OcOgnawlXiaAYVP%2Ft4B9EXLQVhtygkXyVn7JbYekrZ%2FvGlXOG%2FAFMXnYsEei99K%2FMRFxuhI8a4oNzL5sCHgtc%2FkDydbKWHrccX09jBvP7T52Dq1B0E%3D\"}]}\r\ncf-ray: a476672188f3858f-ARN\r\ncontent-length: 810\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":810,"size_decoded":2619,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7c3609d9d5a37accad369f76d6f1ba8","sha1":"605d8d2bcfe93c4e87235c55a06d637e2bf89cbb","sha256":"d22877a62cea1843f6d9b0c54430907842ecdcd03ec1092dc77a0120fe9bdd77","sha512":"98704aa6ab65b777289158098112d8113309923fcdbf36b9670b20d5af5dfbefdabe985f0ed7119a878788dd14e1905376b26001bed43734ee82c6df1a1530d1","ssdeep":"","tlshash":"a1018634870bdcb898a604bb095725765cce242de99657f31b0019464d87dc405e1500","first_seen":"2026-09-18T10:10:37.808039Z","last_seen":"2026-10-08T16:09:03.674237Z","times_seen":8,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/62548-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.921Z","timestamp":1791475691921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/62548-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhP8%2F4TiBD4yP6PJp7Pguun%2BDEiBuaYeYEDjwn92Woa1hVMjoqpBvq%2FppyT9N18ZVhnhO79yD3vguotq%2F71oXxUcbogVYXZpVR5f%2BeeUYwLoeX28KnDsZv9plKuOKRFcvMXjZuLLUNc%3D\"}]}\r\ncf-ray: a47667228958858f-ARN\r\ncontent-length: 8438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8438,"size_decoded":10210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d407acea1433dadb7f3195b996b17f55","sha1":"02387327d529864e99fe9283997c1698e31a4b1c","sha256":"881006d0ee28c4718303bc5acb0f08866dc66326c9b84ba382fb6e56e5cf690d","sha512":"8b4357b20451b3b9cc7ee0e6628ec0b469e92d9e5bf27598c5b398efb5d6b2b4f1118f961b7ec7dac45ec916aa0fc300b8e1580fc25044d202a5aeede261746a","ssdeep":"192:TU+ntrkB1+OVWaPpAY4m3ahLAqewqeyr5im4BKrtd:rtrkBcOVWgOm3eLF8b4Y","tlshash":"3e02c03b0b67646a11f123fdd4f9730598e0e86811791fcd029c06a24c7ea42eedba7d","first_seen":"2025-07-02T18:45:14.865319Z","last_seen":"2026-10-08T16:09:03.674983Z","times_seen":11,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5c036eb5-7a1f-4907-adbe-d54430e2dd45","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.734Z","timestamp":1791475691734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5c036eb5-7a1f-4907-adbe-d54430e2dd45 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efILzn%2BxJA3aTWkK4UeSltVOYBKaca4oNHzNMFCp2vrPAypGIxiUH1ZdNAyAFuiEVUdMhIbZqLb4K5JuAEbt1TpQKwBuexhKi2Z6R5b1vnJUjlJb4rKfZx5fR99eP3biFpff7Iczcdw%3D\"}]}\r\ncf-ray: a476672158d9858f-ARN\r\ncontent-length: 13510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13510,"size_decoded":15311,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc5355b5bb7020cabdbbf602c6d5617a","sha1":"1a084343b1738b7933a35704134bd95dbbc3c7a8","sha256":"dba54ca89bb4d7a7e84d227d6e690f6b3871bc7793d4b2093531b4f44ee97ad4","sha512":"151010c895d980cf5c1179bcf07d8c58d5bcff40cbd070be8a5fd89f5c26e6fdd2ddf806f40294aac918976e4fe2676d568267dc8f1ea6e8291b9db8b0dccca7","ssdeep":"384:72fE13pMlO/1F6HzibaLTzifpul00U88+LfH6hnM:i03ilO/1sHWWLwpulbz7H6FM","tlshash":"fd52cf18a2d90b5a9134f68bb6be51263383342a5613be6c7fec3382e798145255322b","first_seen":"2026-09-18T10:10:37.80617Z","last_seen":"2026-10-08T16:09:03.675668Z","times_seen":8,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/19374-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.867Z","timestamp":1791475691867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/19374-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSmdbQnoS69FkuKmhFTBkN5NUhpFtQ1F0DCunOY0PJl7U9KBtgtzc%2Bwo01iMbF%2BGIs2qoQYTC0%2B%2B3oktYHS3R660kUD1%2BHxpjRG3HbgACGgcsfU6PlkwufgUbcYVUh1d%2BbVyVdtX81w%3D\"}]}\r\ncf-ray: a47667223929858f-ARN\r\ncontent-length: 6896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6896,"size_decoded":8670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1704312ff80fd3c674324b5051ea8aae","sha1":"a4508b6350a7166d22678a9dbc8b2ddaa950315b","sha256":"3aaa5378e8b1fb3de5ca442c11091748ff1b5b40f231f318c178948ee5d23e6c","sha512":"fdbde8a0ca18c289ce8fd59d2caf30003bc919d421951c281812b05258919896ccc0b9d95534533aead550ddd5c96289ea43d6f82f849a584315483ecb7a2b06","ssdeep":"192:rxp+LntGOIp4fkXMi9YM+Ln+C45CPIEkQhLkfbA:rr+xGXp0kXMmYMOvPNBYzA","tlshash":"a2e1ad3d4de0cded98e6c52bc3d517b9aa88bf1d43b4cbae28921ca20936496348407c","first_seen":"2026-09-18T10:10:37.88929Z","last_seen":"2026-10-08T16:09:03.676209Z","times_seen":8,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3533-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.890Z","timestamp":1791475691890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3533-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mBUp6OKc4IP6Dq0DU%2B9NST3V%2FGP%2FQT3f%2BuTrhs1ol3qv94yhWmdpAdxozGSRl7SN4u8E9Qfn4e7ktVA0q2wsJhSSnFOPDEEvyJNZOA8LqCIse87AkXUEcJOAb%2FZ%2FJ0oWeJobJRdvMIw%3D\"}]}\r\ncf-ray: a47667225936858f-ARN\r\ncontent-length: 12494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12494,"size_decoded":14269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c19ac7d6c76c28af7e2dd913c1655a2e","sha1":"19375034cca8b4e730d7a34d42a0e3438816bb2e","sha256":"27267124054476d63424ebe8c659a794fde5a5618a226fa5357848a621403fd1","sha512":"cd371da436a1fe8ce25bd6f4d246d88691b6aef6810d9371f98a3488bf9ca1ab78e232bdb8755e809eaf1a60a61984b3cc2abf60becfb6b0810f480ca15e6fa8","ssdeep":"384:0Mou+Jc+uD9hbMT8+M+8txJ+pdLm82/F5wv:0Mou6c+ubbwC9+PXcwv","tlshash":"0b42c0d5bd75bd51e8130b5a316701b4e0d52801c3dc2a9547c39edbf6b8c88a91b739","first_seen":"2025-03-05T01:10:53.977772Z","last_seen":"2026-10-08T16:09:03.676806Z","times_seen":13,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/64985-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.942Z","timestamp":1791475691942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/64985-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hXBREYt%2BRBVS3KQm81P7O%2FrGx4ZJ2uGblSCesXeGEIXhBmPHl7vLNsYv7Jg4L%2BU7dJKJKsFHLTSg880dbULUeC%2FE8rYu7egtDa%2FZr8RX8XAIHiEP4Pw4aa%2FINhkAg8l4PWXKRtUv00%3D\"}]}\r\ncf-ray: a4766722a96f858f-ARN\r\ncontent-length: 12680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12680,"size_decoded":14455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bf45d926b783367da43f0c376d27a58","sha1":"b520632d368beb4ed4d51b67120c755673ec50fc","sha256":"d9d93ae0dbc5e4e35da8bf13c48e4ba415e805cf947df0a4e6794f0266367694","sha512":"7e9590060a8f04312ceb43ac1e5124277d5d7acdb96f974f02d1c3d52cb07ee317759005b58956517005e3aa139290692e267b4f39835e59a4772be64409ba27","ssdeep":"384:2LLOlwKJYJokYjJOggMfAR4i+CQL6musC/z+:23OlwKOJ7Yj+IdT6muj+","tlshash":"b142bf1cbde303d92bb765b1f51dd52b7b6220e6d8038ed36a044f5fa4462c183a651a","first_seen":"2025-03-10T19:15:00.52492Z","last_seen":"2026-10-08T16:09:03.677337Z","times_seen":9,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/52052-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.951Z","timestamp":1791475691951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/52052-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QO0iB5NjdOHlTZriPg1%2BFCqniyws7wr3MxVpkyWkKY36iTBJM4eFNPRTDSn9tAEo%2B24Kn3uYUF%2BAHsXIshrKseunRo1RKIl4L958N8qFY09kS2HH0WDCGZDE%2BsQ8MkBTkqV%2Fqirz%2FWI%3D\"}]}\r\ncf-ray: a4766722b97b858f-ARN\r\ncontent-length: 9038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9038,"size_decoded":10812,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d86082ecb9ea2614a0585a77fc0d513e","sha1":"1adfd2130a9efb49aee98f667b7fbeca75355cf7","sha256":"19c4bf154568da1b9fc0aebe2cfccac795e9701db92bad9ca52529f2cdad4d3c","sha512":"d1fc853bed0d1f11df66b630dbfebc420f95322d064914b51a4d5b0fb02bc95c017c50f5224e70d7c0e609c95572072917bf305a92b47810b7264d10cc60d5ca","ssdeep":"192:M3CVLiFyRbHh1Flbyl6LDmOrJ3rBi493KJaMsisrR:M3wH7zbykLDmaJdCJdc","tlshash":"0b12ae747ffcd22fc75e01b9809027b6294907a9ee8740b88aa5c8d6513268f1b43db2","first_seen":"2026-09-18T10:10:37.994746Z","last_seen":"2026-10-08T16:09:03.677898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/146850-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.963Z","timestamp":1791475691963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/146850-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBGJaligd7Vypu0jhQrpza0ByyElWP2twHLzsKi8oFb%2BCmuQFe9xYPIfmmEexAIcq5cL6txGtZhoB0Yf46QrdHRlrqmaULIp1vcAu0TVen9RmW2dkqrXUOk1n3yUuk0RaLkjTUD6EZU%3D\"}]}\r\ncf-ray: a4766722d984858f-ARN\r\ncontent-length: 8718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8718,"size_decoded":10482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c829665f8dd71ae056eca87bd525d1f2","sha1":"e78be90c167ffceb5b4cd898a2c58df1ddcfab96","sha256":"06000476786e080da7e7a6b838d0e965470d8d1156996486abe819c0feb0495f","sha512":"982444d41d64d5e39d08952840f3e6ce5fbd1e31c705d25961d32870b2380eb24c375d47b6465746ed704bf9a860efc92034634993fd40d17df1c1e0f964f9d6","ssdeep":"192:pA+YB8kyeekv3TlOWex0u+yBCzrOkS20WL2R5:PYB3zv3ToQAKaSm5","tlshash":"3c02bf8be88ee2c6f8194e3ecd1735b3981ce2467206621e68311d0717485aab8530e7","first_seen":"2026-09-18T10:10:37.78275Z","last_seen":"2026-10-08T16:09:03.678502Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/prj_footer_telegram.svg","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.008Z","timestamp":1791475692008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/prj_footer_telegram.svg HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ryPLMv%2Ba6frinC9tefKVoxwBj4oQ%2BNGF1otKhkXw07qL6mXLHGtSsa4%2BDDJ6eQR6JZrCESo7UjFRLfM64CTqsWXebaIyNQxGKgBSAt%2Fi9n%2BCYdhUkxOhGc4ut0uMEkIp8GVYdlS45c%3D\"}]}\r\ncf-ray: a476672339b0858f-ARN\r\ncontent-length: 481\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":958,"size_decoded":2402,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e5852133411729292817e230a23c877","sha1":"81062824c9b5f346e766030ad1fdf3fa1f40c6f5","sha256":"1b3c3f30c60b3ee65ebee4a971a51bc3f259f18f6d1f4523839ff3bb231af06f","sha512":"55d484564e86fff7b61b825e933705ecb40fa00e6cc90ed45da53b8341c916a81a3ae48d1e4568fb85d9f434c212cf405242c3d30cfbdcb14c871deced75e3eb","ssdeep":"","tlshash":"6611d4f3f298b627e29bc6f5de69b937102460ffc8858257d6449b4e50169cb2c1cee0","first_seen":"2025-11-13T20:36:08.123767Z","last_seen":"2026-10-08T16:09:03.679044Z","times_seen":15,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/icons/PRJ4/apple-touch-icon-precomposed.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.732Z","timestamp":1791475693732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/apple-touch-icon-precomposed.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 08 Oct 2026 16:08:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.35\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlink: \u003chttps://parik24-kazino.com.ua/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHgJdFhbxX4RV4IoDyq%2FiU%2FCVgdlaxaeD6kgu8lk0z5WS5XWVmFN3jPEjjXFLU33LkEeW6UNoBAmeUf%2BT6rx4uQz6vGvMA8zwmhXRUUpN336l3JLhDwzpPfam4AY8iSsCOLOgFpVVMM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a476672ddc72858f-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":97352,"size_decoded":21413,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48217)","md5":"6ccb04ba67163958c89fe1ea8b6f56a5","sha1":"7627aed0fd42c7b3a25fa4ee389653cc5503ac6e","sha256":"7664e3f2af1554462d8070b4605f5eef3c8988f77406c27baa5c8d9c10620aac","sha512":"1aa2e68d7d3558ba6241a89a003bf3f849bc92ff2c2338d7235ead7aed69c097320d61d3726ccecc506fce0ea5887d23b9ef1300e80c3cfadcdfb2ef3d451cda","ssdeep":"768:RtpuRC/NAp0kt7/+ptnFKcWWtyfKcv5v/v/aPMvJyroAPyfKcv8v/aPMMJyLRJSx:R82C+jnF+ypx9RTN+3R1","tlshash":"7393c770a7a0257a263b437de59af60865695a23db0e73d6f0bec09c45c9fa304f170e","first_seen":"2026-10-08T15:07:25.817833Z","last_seen":"2026-10-08T16:09:03.679589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/Main.1be5fb9ecf998d6411ba.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.455Z","timestamp":1791475691455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /Main.1be5fb9ecf998d6411ba.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMsbANtgHXuWRZs0jAC9WZrvNwjw0f1m5bc3GwbC%2BAAuTITiXkgJbXAkRo53%2BzUfyrFOQuLlHbwJBd%2Bo5IlTg80RzAZmLNc1TqGMqwUHztYIXExHmD8or4VYxlFDdP40E%2FzEZKc8ZZg%3D\"}]}\r\ncf-ray: a476671fa843858f-ARN\r\ncontent-length: 638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1737,"size_decoded":2555,"mime_type":"text/css","magic":"ASCII text, with very long lines (788)","md5":"c82cd40678071fed26e313bfdcec3c1c","sha1":"be091fc3c66956854667aecede201ac4ba06a687","sha256":"c36c33cbee763403156a8f577ed547ce7acf6a108777185b73a4fdd6d25c26e2","sha512":"c6521bc0ff7c86b603593710b31e138f9d4e754ed5fce10a4a474cdf5a4138edaa04a7a19ab9dc441ae4698639cb5e16bc2a15e77b99fa38def14392ed0ceb6e","ssdeep":"","tlshash":"473120323932b368bc33c423d7591c9d4386d112ee235ad9df82362685dbaf17b9212c","first_seen":"2026-09-18T10:10:37.73852Z","last_seen":"2026-10-08T16:09:03.680619Z","times_seen":8,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/seo-kit/assets/6154.c6f25ce1309c4a7e443e.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.465Z","timestamp":1791475691465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /seo-kit/assets/6154.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtGgZg%2F5F6QPCX3jv0CZrs50Iru0iKsL2diDc5o7zFf%2F3xZveqmrzC1uwviXFWhr0ur1%2FSMJKnIm1SQ9MWAuIKSdvXz3jtaNls6weXXaNsgB3fY%2FGp1mjd6jSLv66pCDMdAdS%2B4FsYc%3D\"}]}\r\ncf-ray: a476671fa84a858f-ARN\r\ncontent-length: 716\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2351,"size_decoded":2635,"mime_type":"text/css","magic":"ASCII text, with very long lines (1679)","md5":"130974ba618163ceffb3cd28edd369c5","sha1":"4a9d97f3edaea1c3c9b93b4b2a3059a27e1d8cb4","sha256":"7bdb91b71d4da3983402c263b2c8a9d5cf9aed87f909632ef61d22fdf1cbaae4","sha512":"299a6180492c7d9f0a4dd4142c40ac224c7cc0ab3f1ad6f646a51c423f146c613eaed395b21b8ddee68a8ea268a4baf981d3a463cf114ff18ca48cfef5cdc879","ssdeep":"","tlshash":"9241e13311337f2e513bd86c4b58a95a1240d02ae4bb9bedc960db15c3e3a9906b535f","first_seen":"2025-06-29T08:36:28.692737Z","last_seen":"2026-10-08T16:09:03.681202Z","times_seen":87,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/268.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.478Z","timestamp":1791475691478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/268.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tsvxxbn80YbrMxu9ignPes6ru7aB3grn8es0BsBN8OLmLZMaTOoR3R3NGF41UBh%2BpFqYiOJ5utUTMFSm3Ag5Gyz9%2FEFXwLkMuFvtSxRMjqD0kZuMgwP4T7PB0M%2FK0eGP5pLj2iXbgew%3D\"}]}\r\ncf-ray: a476671fc852858f-ARN\r\ncontent-length: 528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1499,"size_decoded":2443,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"cb744a8ea3fd7ec4c19e38c1d6ebe581","sha1":"9f2beac1b3e8d885e9920dfc53af5bfd09be6ce6","sha256":"261de3af1b637c8ddfa0a5d6ebbe39e1eedef85be8eb8c2372a14e6a96fc6c38","sha512":"99617c6e1d5d995f341bfee683b0f263d45caf9069fcc342c280be3e34db99ef9aef08f5c3642eb1226302d10918194e1998b285d7569e4f6bbdff0077f45d46","ssdeep":"","tlshash":"3f31003260b6761c1817ad202b4e13d89276c425dba263f86972d72183cb2ca0df26df","first_seen":"2025-11-13T20:36:08.413525Z","last_seen":"2026-10-08T16:09:03.681782Z","times_seen":12,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7bee5464-b58b-4479-a37d-09cdc92df0ed","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.740Z","timestamp":1791475691740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7bee5464-b58b-4479-a37d-09cdc92df0ed HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aez3o2569P3lriIaqZnJfd4ZQYyuubrK8Z5LPsoy5WcWblRL%2FuRZ7gQ8rxvYiL04sSo9WMAWH%2FPmoI4vj3DOqAfnQorJeHLx6M6j7V9HuFboZKbo%2F3cCJidsKA9gD%2Bf95S0g3Vshu8U%3D\"}]}\r\ncf-ray: a476672168df858f-ARN\r\ncontent-length: 10878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10878,"size_decoded":12685,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9828f946e7ac48d24b5e1933056f888","sha1":"c13a723539742bad12747a73f12a3f43a0c52603","sha256":"16b166c79ed7b091c2db3b33bb1f58f232601f30cf82aaa29aa8cbe0dff41bc4","sha512":"2d3929afdb976a3742f443f1e00e2f015222da68ae697b1ff3f70c3c11a6fa75a110d94fdd4e35697cc2941607fb9be638b673538f6adede1cf1f7f730998d18","ssdeep":"192:Wp9jZf6xVLD4CqsTg5WIqzDSMK1f3ayJjcS6vM1OTaPYQ4MbxFck4ml:eY6szDSLfhPD9P+Yaa","tlshash":"0c22c0b202d46e0a2fe591ed3a31909a806ed779f17d0f763a52c376b14858472fbec4","first_seen":"2026-09-18T10:10:38.020686Z","last_seen":"2026-10-08T16:09:03.682379Z","times_seen":8,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":975,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/b281f48e-e1e6-44b6-ab2c-1bdcf6185634","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.829Z","timestamp":1791475691829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/b281f48e-e1e6-44b6-ab2c-1bdcf6185634 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpzMW41IXGKnUf7E9A2gFVqQt%2FBaEn%2FWE%2BfFq7tTy6j8Z6PlrTDBgRBjOwZx%2F%2BCQao8zz1%2Fp7rXpYSvvydv%2BV0KCUG3PSC0WGk9bVIC79n6MJ1HXc5EVCo3EU%2BfwxjHgehKSMb5LwYI%3D\"}]}\r\ncf-ray: a4766721f909858f-ARN\r\ncontent-length: 944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":944,"size_decoded":2759,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b82e0589328501773561d9206431d5be","sha1":"2b63692a4284720fae8cb69d193a6e44bd6aaa17","sha256":"6651d83c0655443d66c79cf5cc19a8e962db21cd4bd8728500fb0969ac8c5c9d","sha512":"644de7d6b3e2811bd3ef5c917ff65b1b741f0d22ba8a6a7d5b4c6cb1c826a23a46137be5e45a313599ae88d9812be5da88a796f4b7bb4490efa1245765759de0","ssdeep":"","tlshash":"e7118426044f2c4746eca9613376278a0315ada53f9cc7b243652eb183121b2ee76e8a","first_seen":"2026-09-18T10:10:37.796154Z","last_seen":"2026-10-08T16:09:03.682959Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/84629552-dade-44cf-9ddc-6ed23fc43335","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.835Z","timestamp":1791475691835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/84629552-dade-44cf-9ddc-6ed23fc43335 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUBou1675IKQKuB0ACtSpo0aREnEXj7UBlR%2BQUjcJp3XlMqryG1vGmmYNDg%2BtWh5I2xjlgOYO7je51k8Mr5xIyFr8pNILwFKgVdl5jDz%2BP2NBghdQIO1Ci12PtM%2B1aZwyH%2Fsl3VHEDE%3D\"}]}\r\ncf-ray: a47667220912858f-ARN\r\ncontent-length: 324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":324,"size_decoded":2131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3bf8789f546cddf9e8503a18095e48b","sha1":"df61a9056193f35995f47457b15a220f0a72c753","sha256":"c06c0acb654c7bb7061f6ae37f7779ebb96bd77af53457725cede1ccf15e78d8","sha512":"2997c3eb8d295c59dc6bec97b88dabae15d430fc9f06e8243b2bda449ff3098eac15880470ba62de09eb21f42b27036e0a300be2a42cbc68e98f3abbeace13a8","ssdeep":"","tlshash":"66e02dbf2a0009e9fa20acb0f74610cc2ae440089f318db301c084a0181a0406c5d3e6","first_seen":"2026-09-18T10:10:38.002775Z","last_seen":"2026-10-08T16:09:03.683523Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3606-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.873Z","timestamp":1791475691873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3606-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHcFdXvf32v7VANLQ1yVJgwedyQ077azTGNdEFWzVC%2BSQbZAI%2FZMUm1zWX51WwnkmvK%2FgYTWXyIzQ9SFhETjnJMBbeOvSwNqVb7s3H4TNKJnJGV%2FVt%2BcGyTjnU47kZ7eJCeg5MgLQDc%3D\"}]}\r\ncf-ray: a4766722392b858f-ARN\r\ncontent-length: 6896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6896,"size_decoded":8668,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91c8daca0dea65649784a390999ff3d7","sha1":"babe2ade62e1d3176ea70983816d08c3fd26164d","sha256":"be5d84c84379fb470fcd84265714bfbaa1593a7629f9f6b5fff4544d1fc683cf","sha512":"2de852029cd8006e1a50a8243f107fb910fc82c3c2df5e534303324419c5a4ba077f22f10a590ce763e09d7e7544bdc48aa3d670ad380afb39401a1ef6469ed8","ssdeep":"96:VxUxpI4L+B9I+z4foDamTdOnB51XMqqdUQKvslb5Wz3Wz2D9MJbaHCbRdJ3mSFke:8/tL+3I84qRO9Z0Uylb5Sq2DibR3LFv7","tlshash":"ece18fa46ce7fb47472500e1c7913eb66a03fbfdae0419ae69e2c891457d3512104326","first_seen":"2026-09-18T10:10:37.917262Z","last_seen":"2026-10-08T16:09:03.684119Z","times_seen":8,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/59517-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.970Z","timestamp":1791475691970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/59517-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoAoqrANCbT4hisT3fphcJTC4JKJUHze9kGyzSuYSLAboLAQ%2BhzhxkaHi1%2FDMvameMPMJ9A42QrRUW3xjQhBPIZc5VGzj1X6kUjZlLWaogO%2BPKCYOK3jDGqX4zzndHKq4faTZ8zPkig%3D\"}]}\r\ncf-ray: a4766722d988858f-ARN\r\ncontent-length: 11420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11420,"size_decoded":13189,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9454d735179e30be91c240f1a838d214","sha1":"ea63e118c3a2cc1552b0e1eb1a88f0b537b4a62e","sha256":"d6780e785c50b4cc49dcc403b8cbcf81bb73bab2e288788cc1706dc53ecf54f6","sha512":"420f9ce748afed2c6b028b2531cb493ee2cc87a46863c7c61887673fe57e5928ea840eb10877fbd57c2d9b667d19d5068d227ea239b2e4b551cb46779493f1a4","ssdeep":"192:f1dstVrWIsN4KrS5v6feTRnpnVbm0uGYqJlsRlpcs1bwXpuUyaTblWH04MDHLIBe:fGrWITTQ0NYqJMCsB3aTblWH2DHLoG","tlshash":"9132c087f49a1076d5e4ad71f676b3a4472a53a7e4f166bd5fcdc80a8e00086b08cb9c","first_seen":"2026-09-18T10:10:37.911541Z","last_seen":"2026-10-08T16:09:03.684708Z","times_seen":8,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/Application.c9c5d172f391f5dde136.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.444Z","timestamp":1791475691444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /Application.c9c5d172f391f5dde136.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ylwan7yOYz%2BLozBNRTeEb7e77kOAZNxIbjsW7WUtLur%2Br0z89nqokmBGqop%2BEZDxudSxjATgnkCos%2Bfu91d3Co6yweK1mLepAJN0KggOsGHJ86ALOo1ZrCinNe2Ilg8CAvlvCyCmt8A%3D\"}]}\r\ncf-ray: a476671f983e858f-ARN\r\ncontent-length: 5482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19945,"size_decoded":7400,"mime_type":"text/css","magic":"ASCII text, with very long lines (4269)","md5":"af1c5f3297e04a85e497158132978d43","sha1":"289efbe0b8deb83d8ec496685f5344b10fc33e1f","sha256":"dfcb496ce73941a2df1f8d2a0277dc5221850d467ac168d94c6ebbeedc929a6e","sha512":"5565c42542b1218d98fa1a9bcbdbf260c30e3dc92b28a73f65cad1a9ba9129cb0acb9615006a15773e992180247ca6ef09d8c59cd920bc23eb67c39d0e9df2ca","ssdeep":"384:8+VkBjYUmf3hVc4MSc27KNj1K/NTbMVz/kwYRIaO5Js9SpBmkprpvpGpHfBJOcSm:8jjm/hVc4MSc2mNjo/FMR2epwx","tlshash":"2d92e8671061732c752be81457d80b5d9254c023e527abeeee24aa34c3c7fe936f724a","first_seen":"2026-09-18T10:10:37.812302Z","last_seen":"2026-10-08T16:09:03.685272Z","times_seen":8,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/45.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.470Z","timestamp":1791475691470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/45.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j8nM92fJYS8u4Wxf3l7xLY9XUFBAuZ4DFwR5BDoL8%2B07bjhHUfqQTvymUNzRccRRJpYUT948tItGdCGe377C0czqSfOUsVjv%2B0Ze5meeJGQfiRltMt5LaPbX74zl%2B%2Bg3zWAJ7lOmtk%3D\"}]}\r\ncf-ray: a476671fb84c858f-ARN\r\ncontent-length: 757\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2835,"size_decoded":2674,"mime_type":"text/css","magic":"ASCII text, with very long lines (1913)","md5":"865119732acb7343e26bcec97b4de3c3","sha1":"7efe08ac51e63c118dcfa9fb2b7f84d380588dc1","sha256":"e89c2a94ee7f858b5033e9143b85aaec4775a8749b1370a0199468febd776ab4","sha512":"4e979692adcb3b9819eacf0a6b23be815215ec59502460d7c2bf52c9c317f09f1ff5c4aeb93dff58c8cf1a805ebb58a68a7864d56c31188c28c7e976b2379f81","ssdeep":"","tlshash":"1751bd337a702e3cf4c7a61d164bb1990971c9a6ca721af97876db34c2d31890ed258f","first_seen":"2025-11-13T20:36:08.304773Z","last_seen":"2026-10-08T16:09:03.698897Z","times_seen":18,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/754.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.474Z","timestamp":1791475691474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/754.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ekmFUmclYJpkPFTtKmWLt8zCF8rEqw%2Fa19AQsRkQNWuZQiXD7OWyoVmu3Z5KR%2FBW%2FlgBR9wj61wuExNRKgQKqMnRYX%2FPzsanIp0HMdXBGbj%2B7LCpkF8gjAtm8Rw3uBRI4yWITrtC7w%3D\"}]}\r\ncf-ray: a476671fb850858f-ARN\r\ncontent-length: 420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1213,"size_decoded":2339,"mime_type":"text/css","magic":"ASCII text, with very long lines (636)","md5":"cdbb3339b8bc24de24547ad0d4f8ac55","sha1":"b95f4b3031ecc4c8cebfdd726420a190cacef596","sha256":"a1d6bd1d911145b87d2a207cc4365da0ab71e1a9da1145fc78ff67924be43460","sha512":"63f791421b04c234e2375bc49d24d9da8ebd4fdfb3fe07c5f9d7c3fb3792a3775ef7b281888ec1588d7e55c5c534d5d195243238d4198fe03dd1d7207b16205e","ssdeep":"","tlshash":"6721cd3770e0770d006bb83cba8f11458172c035cb6991b4b4b8d7214be624b2a398df","first_seen":"2025-11-13T20:36:08.30676Z","last_seen":"2026-10-08T16:09:03.701859Z","times_seen":12,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20fruitsw.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.894Z","timestamp":1791475691894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20fruitsw.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtHIED%2BEQTm3cwh3eD2x%2BrBn4rVlc%2FaJLi7cBy6VJEZ%2F6kZBkpyY4vkxQNCAVzfe3JBpztISRshui9mKwPYmeWCPFSucySv1822cHgjPk0aVme4Ox9Yh28sZ%2FjjAmCY3stkeR8Sye2M%3D\"}]}\r\ncf-ray: a4766722593a858f-ARN\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6074,"size_decoded":7947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"875b8af4b0f46fb291c688bec61a23cf","sha1":"927cef6cb9ea191eda229e04fe790179b87d7451","sha256":"6c1b04f0aa07a680f4e54ed6d58a7462a205752879e2e70389ac5076c5e69acd","sha512":"2d7fdc39dc79fafd84ee5ea4b8dccfbd6f4ecba7ba56ded27e97490230de762bdc1df0f7563e38e8eea1c97c90556a0560a0e5f05331887b42fbddf12b0d57fa","ssdeep":"96:NRV9xHYnwlZZvDqgxUlIlBF3D7FEItO6rZInRNlrgvr7gJLKabMQhEK/fkL7ow/y:HV91Yn+Z1Dhln3D7FhOoyKXop+KHAswa","tlshash":"73c18e43a6114bc5dcdc5983aa991672cc3faffda21e8681e0a6bea70b300590467996","first_seen":"2026-09-18T10:10:37.969612Z","last_seen":"2026-10-08T16:09:03.702838Z","times_seen":8,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-3-royal-coins-hold--win.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.906Z","timestamp":1791475691906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-3-royal-coins-hold--win.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:13 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CYXvWhzJSBzVtDV8RKXfc2Yc2es%2Bh0WSfPDDvYJbMey8ZnLaCo61OYA0oEaG8dLGdaVLPeUY%2FLPY%2B2XbOXQSFDyKZpoDyZi1rmXw%2BeaQHsgsyo5ekrrPlfiYqIbYCMTtxgdEH4mRT0%3D\"}]}\r\ncf-ray: a47667227948858f-ARN\r\ncontent-length: 6410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6410,"size_decoded":8281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313216dab3ec62dbef0e060bb151c279","sha1":"fb05b7ec69252a7d9b8bff397ff87634844e239c","sha256":"8ac9622cd9721c393bbd8b1b24814496ebf85917d10448d207de4ab6024e8963","sha512":"f9f875025aa5c92c354c35ab2a7768bf18ed3ce2edcf174ddabba842c64e636541f08c70b69f6ecdc8eb632c5a9d5ce2899cf5d62e2eaef1d38c07b45242f9ac","ssdeep":"192:cTqdIcSXNdxEWsf79PDB7rCvv2NwV9VtKo01NEmzEkd:NIjXiWsfZAvv2NwdkSSEkd","tlshash":"9cd1afba28bbb4c54ae9d49468ac9a0cdf95c62cb1f95477c43ea8dc0d634448954cfc","first_seen":"2026-09-18T10:10:38.011035Z","last_seen":"2026-10-08T16:09:03.703856Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/50429-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.924Z","timestamp":1791475691924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/50429-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YT%2BdBoAhy0IfpS2D4Rb7GU8puxv2FTTJ01MdoQqi6UP7t5ZtP26D1WmzHVysrLZfeFpEma%2B%2F14nfOg1wxy2b%2B7%2Fch9UWIuKT45JONwYHWUYwUju%2BujwHJfVTJiOV%2BnbSeADjYYmhRRw%3D\"}]}\r\ncf-ray: a4766722995c858f-ARN\r\ncontent-length: 8322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8322,"size_decoded":10098,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fac84daa170f4c7d92d16d104c51986c","sha1":"f5c4c4221fc2afa20a78d6669256225a03ffe96d","sha256":"5e546cd5607cc6648dd1f253abff145e5832d4d22b032096f2ae491765467742","sha512":"a7564babefc05a673c39785c9923bedc2d98d13e5810a64636f9773c86ae26e762c2f856b054866199791e5107ddda44bf2924272f726a32892ca1df1952520b","ssdeep":"192:fje1Z02VEasmfqNLUkjp0zkFF+jPu/DKWj6Uvd6+2t7+SFappzyl:7eb02JfySHPQx6md6+2t7+2a/yl","tlshash":"c502cfe44a772a8a4d68d80046ee90164f41e1dfe76d5b60b8237b981c4b33b5834eeb","first_seen":"2026-09-18T10:10:37.720691Z","last_seen":"2026-10-08T16:09:03.704784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/618.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.489Z","timestamp":1791475691489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/618.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKR86PSYk3BVOqWV3z3jHldGb8lsktoVDkL%2BIKf%2Fk93VWelQKWZWlqtCqE26Bh8%2BJCkJb29wMnaxYMD1EcxrFx1jWl2kqDumLN6fuEtQSXQby8T1ogJCmeZQEDANtlDbaXjTsICQRgs%3D\"}]}\r\ncf-ray: a476671fd855858f-ARN\r\ncontent-length: 390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":997,"size_decoded":2305,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"d8559b77fcf20cd2d90d5f6b95915c08","sha1":"0301a6c562e923a070a75c94db5ebefe10fd5c3d","sha256":"7d48ff5e3ff3a10b58003933f8f0a4122c45ad47bb44e8d20960d302b4bd9d05","sha512":"37816338164d28160826897a1335064852a3a2bf1705eeefbfe3e2ba65cf981fd9d6bf97b94ee61337e4107e29c65e5f1af703e8f5b259a549917dd09c87d0e5","ssdeep":"","tlshash":"7411af3230a2b50d1823fd553b9a56cdd076d475da21a7b86476db21c3cf19b09a0b8f","first_seen":"2025-11-13T20:36:08.391259Z","last_seen":"2026-10-08T16:09:03.705658Z","times_seen":12,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/eur","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.648Z","timestamp":1791475691648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/eur HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ya04fdu3BZEh8VIsR4aXnEeKmheFaPE3FiGH9jN8OdU2Kj7unHCGS4IkQ3BCQkaobU5Wblb89W1IU0fI0J%2BMMm1pkOtOG7TF1F9uTags%2B6WJBQV1ncJSwS4McdRbfkkdsyRsyl1PnMo%3D\"}]}\r\ncf-ray: a4766720d8a2858f-ARN\r\ncontent-length: 722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":722,"size_decoded":2487,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b0f940bae607f2db85b56123f6bb255","sha1":"897ec10ca4925863f4689fa0dc92aa85b51ee5d2","sha256":"ed7e3032fb1932b087ff527a0ee8e37a7cf24d0b3468d72f8df7e808ebefa6f2","sha512":"9549c2d67bb9adcd54d14e01ccff64b72e2e9298f4fce88f4e28a579fa7a1d5dc8889e29115257d7f1d14540aadfff59790e97cab5521578a46e2fc3999ade6c","ssdeep":"","tlshash":"a60160efee76b0d8423d70c15c72279417b2a7440a11653ec5177b88a3f0408aa61a29","first_seen":"2025-03-10T19:15:00.482363Z","last_seen":"2026-10-08T16:09:03.706579Z","times_seen":23,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/fa21f3b9-dac0-45aa-ac18-b05f67b698ca","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.800Z","timestamp":1791475691800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/fa21f3b9-dac0-45aa-ac18-b05f67b698ca HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAPAQ5p7lEYD7Acz33geTQw619iEph3h%2FrI%2BIIB%2BP4kJ5R8zuVvFImjn5%2F3hw9NDRRoV0fmLDF93O6qFHutM%2ByIVH8mxyLAe7xMN%2FT4tUR8iGoHi8wx49xzo5mhuVaFg8zXOcxZkT%2BY%3D\"}]}\r\ncf-ray: a4766721c8ff858f-ARN\r\ncontent-length: 800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":800,"size_decoded":2611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0fd4b49f670c1cb215e1ff1de98bc814","sha1":"7bdb6a4b60a96798c6b0f22da109a0a32560e4ac","sha256":"9ebbbb33540b51acb0133989aa2633df02c627463a4df9bf3dbb4698f82adccb","sha512":"230fdad28290444d79a3f1b8f07c2a88fc9a7df62a800fcd272ee3fd40b81da793c5306f466e315927b96197376efea09428e09a61b2dd40380043fa9de75831","ssdeep":"","tlshash":"0801756fcab60046ce4d056b43d85b67006f2a5d35e8042a24ca8bd8ac6e56ef670db7","first_seen":"2026-09-18T10:10:38.023001Z","last_seen":"2026-10-08T16:09:03.707744Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/5040-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.891Z","timestamp":1791475691891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/5040-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rN224Afl1Myfs3TMld3sITtHLLhjBGt6ZLvhBD7inHgVFe5D5nIvMXVNnoRVFHIFJ5TNbviQ3jHTRnR8s8U7mv4kD9WCVSow0Op6sY6KB1z%2B6ZARpfHQV15k%2B7pokYCRwf%2Fmn82CbLI%3D\"}]}\r\ncf-ray: a47667225937858f-ARN\r\ncontent-length: 5650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5650,"size_decoded":7418,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f31f45af85a9d8e7871d3fe8d4a43ef1","sha1":"d4e27b1490c7cb4cf42d46e02ca514d1b09ab1b6","sha256":"b17d309adfd2b3a985dc2e819f996509197880cd4c744e0fb7c2b1fb775539c7","sha512":"699497f92bede0745fac55b2d403d023ae2a18efb21a4f62aeaaa4a622c465451bf836bfc543c0b4306b2e6d5490643dda2c8a8b0461297942bbd0599df4e01d","ssdeep":"96:L+fsnsQgPG7XQ5kEe2fHUy8Zo5xzqNSGrthajaWzVvCWELLNhKL+E6BGbyZw:6fsVU5kuvUixzqTrthunVGuSeD","tlshash":"f0c18e35903b4bec736307d8431ec7d535c2169b42ee07bb9b21be27e920d6e1869961","first_seen":"2025-03-10T23:12:12.209252Z","last_seen":"2026-10-08T16:09:03.709123Z","times_seen":11,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/Viber_logo_2018_without_text_svg_8b744f1aff.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.014Z","timestamp":1791475692014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/Viber_logo_2018_without_text_svg_8b744f1aff.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nitgjGT8B4yJ5tr0kU7KIQ2VLx9TFGiQdS5neK1W%2BwUwggjmfuTppDW9lS8TFQTW1s7pkVi5zPgBh4wYtCM5jJlNZ%2FGG%2FRyNcDDUwdZG%2FpIquhdAhKe4ZWRa7vCC%2FSHbTnnu7TBcpeI%3D\"}]}\r\ncf-ray: a476672359bb858f-ARN\r\ncontent-length: 5772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5772,"size_decoded":7645,"mime_type":"image/png","magic":"PNG image data, 192 x 203, 8-bit colormap, non-interlaced","md5":"b12261b746d15da78eba43ea24b540db","sha1":"b69932f2e29b6d5b791043489cefd0fffc7b9a60","sha256":"bdfcc8bad8b5179d088c9e5634be58ad36ec761ad9beab0b153846de51a79ede","sha512":"5c9214fc570fb8879937aeb51b17f15b6e720eccef7a44ace2d2fdc68bb78e3d05aec6c1dc4219f6f2f6988fc5f88de659cace063b5630e8157f2d011369d514","ssdeep":"96:NxIJAPos4adFnicGhS+Qcc7ITSLY5peyTNwHZqTXSQI63zTBYPTeqzA:Nx+AjFilGccZLYvTJI6BeTeqc","tlshash":"bfc14a223af1ca6ab9fc8570557f734dbe9178e2b2ccb55525508d92c5903ca30fe306","first_seen":"2026-05-02T08:32:39.44056Z","last_seen":"2026-10-08T16:09:03.710183Z","times_seen":14,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/react/1_104_3-index.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.450Z","timestamp":1791475691450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/react/1_104_3-index.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:11 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckgQECQTScIXnZhdn9HXGe0t%2BrVdvKQ7%2BM6EBddo6RdmlodLfjfm8XmwuFtzQLpZr1Nfa0EgIwhgiHweTHuMul0cpLsMs9QJ64CK3iHR%2BblXU4UGMqZ%2B82dpnq48vnAvv9V7fPjwkug%3D\"}]}\r\ncf-ray: a476671f983f858f-ARN\r\ncontent-length: 266651\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T22:43:31.335783Z","times_seen":19039518,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/footer/assets/291.8472d4e50c8cce0932e3.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.472Z","timestamp":1791475691472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /footer/assets/291.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1rYgNHYewwg%2BiTPFwRs%2FYPxYkKmFzeVfwefmldbcvQr%2FA%2FMvWUHm8JP1ankImKvP4sdYBnTWXq61mlwcsK942hGLbqdGoHHQju0LEZP%2BBFmItLPfpZ0Ai8%2FwkSsLP%2FtBxlx1BFJ%2BN4%3D\"}]}\r\ncf-ray: a476671fb84f858f-ARN\r\ncontent-length: 628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1751,"size_decoded":2553,"mime_type":"text/css","magic":"ASCII text, with very long lines (636)","md5":"0b0cbeda6698eb33ed6656ca4a70f5b9","sha1":"a0299070cd0fd5a1dfcfc8d463ec14c31ae0196d","sha256":"f416926761e52cdbaaffafd574d0401cc5d94255d4d8ba3828b2cb93a315c3a6","sha512":"d591952a53da4aa1977ac5fffde488d9e99b9410679efc4183ed1764dffe11b25ce1bdd9c3545e5aacc2049d895904c8c9fa6e2a83d8469ab4fe0e94125cb117","ssdeep":"","tlshash":"ee31e03775f02a1c08abb57cb9ca51848531c425dba991b47578cb304ba718b2b3989f","first_seen":"2025-11-13T20:36:08.37541Z","last_seen":"2026-10-08T16:09:03.71129Z","times_seen":18,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/pol","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.699Z","timestamp":1791475691699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/pol HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Mwr9szFM1vGx9CWklqSVlLugb2l455RIUMzws6seB0n1QvDqq4YzudsVaTiEOf2UWVjnw0D70Uw4WOH0kdwQcb0nE%2BfSORctpSnc9GjDLJuvVUmtuUR5Kjo%2BxLxRjbCgavrIuDQAwU%3D\"}]}\r\ncf-ray: a476672128c2858f-ARN\r\ncontent-length: 262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":262,"size_decoded":2027,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15604cfa8885a8ed774ab27f0ea8bcdf","sha1":"2bf74c04825be725995b086c444109653bb62b11","sha256":"1a25a5ea1e22091e2f1b72ee086042257b04ddad72d94cec224c83c2b182fe91","sha512":"074c49cb9fcc33c1b3401edd82d49158292cda4da226333f7a58e38facd7fb4ab0705aca238bb315c1fae11cc501fe8ce543ae7c6ce3bb1021c55e883c7a4b2c","ssdeep":"","tlshash":"a6d09517af6c18e9b939e57570cadb7551060541d0553c44d9d66753c4740b01f416ec","first_seen":"2025-03-10T19:15:00.423866Z","last_seen":"2026-10-08T16:09:03.71258Z","times_seen":63,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3573-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.850Z","timestamp":1791475691850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3573-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yldSMtdTG%2FYxHoxKXvShMcJO21p5IgQCPEHEUpQD4kvafoMqDRHTrzku4g1sHzs70d7IIjT5zs%2F0rVzJLodSRZaTp5w6IbmsxYvvnkpkrPN%2Be6vUCQh0raRd8soUydT6%2BUufBd4CbSk%3D\"}]}\r\ncf-ray: a4766722191d858f-ARN\r\ncontent-length: 18222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18222,"size_decoded":19993,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"265800cffa1a9977909c2f12dc2d2130","sha1":"a5e6de59921fb7bcf5e3144df34ceb44c9bf86b5","sha256":"789fe65609c179ce694b9561e725c10cfdf184df71730ef76856198aef5c12bb","sha512":"d41d858589651728bba98fb12c5368de12bb707a5393a63ce4306e44b5c29e830583ca393adcf9108aedb45f5f2e9310c12b1300d43b4ead6a48a3efa18504ea","ssdeep":"384:IAC+DfW/pEjpfCcMsfzMuP2Iy29PniawR8I5b+UIUlKg5DNzkr:IAZLjp7MHQqp+klKg/kr","tlshash":"9e82d05a60119bdc9a4e4cd7395dfccd160fe9c4d0c686a4e7c97871c9b8ae4cea2c48","first_seen":"2025-03-10T05:32:40.311807Z","last_seen":"2026-10-08T16:09:03.713751Z","times_seen":10,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/64760-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.929Z","timestamp":1791475691929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/64760-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEL6oHDByHw3o0xFdyPZLTiUpK5BtQ7xn5%2BqBo8NFERPzazQscYNFyDosAPhf%2ByXzs40IYtak%2F%2BWqYqPY2nG1IwnpuzvaWenrUSL3gS19t92FVasl4zN9%2F5ryxwlH%2FXdPQ6UcMsEiQg%3D\"}]}\r\ncf-ray: a47667229964858f-ARN\r\ncontent-length: 8678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8678,"size_decoded":10452,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72fdc04bc8e25f4e343c2c96a4192593","sha1":"ae78fe5e89e1b6e6e069b59f8fbd0693a6b9f72c","sha256":"010f6c1a66827c58521dc63c5477c3ff792fca0404442d28a810337d704c3f4c","sha512":"b94a8b0f46db003d444726be4ea717ce62718a448019ad28ef3b100d4bafecefe7bbd1449d6f1f768a1a08ec717bc9e243d072e86a48aeffc6177a9e79d7c16e","ssdeep":"192:thZe6D3E/GE/3Yo6ZqJD+1u9ttZ19gW4tOtu4tkb3RrfY:thY6rE/GI3YoQqwu9ttZzQEtwE","tlshash":"3a029ed1002a4a64c613ea16c2d76960f1c26576ce1e97415950422bfdf379ce93ebcf","first_seen":"2025-07-02T18:45:14.80406Z","last_seen":"2026-10-08T16:09:03.71485Z","times_seen":11,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/60963-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.937Z","timestamp":1791475691937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/60963-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raT9516lX5GeISQaMkyf%2Bj%2Fyq81N1FxaNl1hIikIezLzqujxQkzdKz3IPpA%2FeHBez1EAaeiR4AGuo%2FNG7uFycRnHfzs1sAMC%2F3JeE2pNAX8m3zE2TsI3%2F5Rgl18pMAzQwA2DcwDTvgI%3D\"}]}\r\ncf-ray: a4766722a96c858f-ARN\r\ncontent-length: 6198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6198,"size_decoded":7972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e89a1a542d3b22422760364b6af0883a","sha1":"1ea332c6f7a8c3512ecdaae5aca8028827f1ed6f","sha256":"f4920d5966018f3b6d106aaed489a4d3f27b4ec8535d17b59fbfff5132b94dbb","sha512":"5064c03c1f04c45b5ab2baad17f6c5fdc096f229ad2397580ee61fb0c08c31712cd448b2570d5ec745db71ead2bb1ba2ab15f1b8b7c4610288bfa74d8d3d145e","ssdeep":"192:ws40/Xk/J5J+1fybzA5ZKgstN66JQO9ElRB:wdiIYI3iZKggQ5lRB","tlshash":"42d17d8b60d942c73119adb537204ba02a01f52356fdabb9245f9fd286e412a3e0e7c4","first_seen":"2025-03-10T05:32:40.364238Z","last_seen":"2026-10-08T16:09:03.715972Z","times_seen":12,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/62358-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.945Z","timestamp":1791475691945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/62358-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWoLEaAEldvidKtMQ8mRXRX3bcqA4bmVtKJ458HQRjE6xmImqWbVirks9KtISmLSXmU29ShFc4dMfI5Bu0ficO6FxQCjdal064Oxi05raOZaoG6xo96IFdWCMmrde1dKriUh6GFqKis%3D\"}]}\r\ncf-ray: a4766722b974858f-ARN\r\ncontent-length: 9858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9858,"size_decoded":11620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19a8a8d1aa9a43592cf046e0618c50b5","sha1":"481fd231189b7ddfd351ba6f7561651042571a89","sha256":"b0a6563dba6f16bae40f5c8ab8ebeb6db159f307efba0dd39f36dde274746f85","sha512":"b0b501d77f257bf1bc7ccff4fd4f8adf1bf0004a56acb6cf475240fdb16f1ac518969a8d0ff98b214edf2e427ebd18d41d7b3d6e43fde2248cb3e7af33e1d77f","ssdeep":"192:VNKzjtDWEsLcRdTABiTOPW9abEcQAPK0Veqwpm9RL0JEPKtE/8A+mK:VkhcLUdTABWO/bnQAonpmLQJEbEA5K","tlshash":"3212cf4049613bbc3e13d4bfd65eb631e0bac6887d488621396f18f1e42afd58c5d8b8","first_seen":"2025-10-04T04:16:50.015902Z","last_seen":"2026-10-08T16:09:03.717112Z","times_seen":9,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T16:08:10.215Z","timestamp":1791475690215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.35\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlink: \u003chttps://parik24-kazino.com.ua/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://parik24-kazino.com.ua/wp-json/wp/v2/pages/146\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://parik24-kazino.com.ua/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWkVOH2zpizM6ATbKZFfMjTO7F%2BY1SNiNsvKE85tFt%2Fqb3JbiT%2BLFMyDZ50ygRXNMZJXLIse7zVGnfdUx83c3isJ%2BLwqC%2BGBJqtjpRBXvpZ0dIc3KInzd1FZ1U%2FQfZIDUPh0IOkVUeY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47667181efb858f-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":1012807,"size_decoded":99412,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52162)","md5":"598c21f7281bf9eecbf5ea12fdc67d32","sha1":"9428cdd9041a40d4e087cfff1e60fc624be1feeb","sha256":"4fc26a83ae9669f5cfaf06f0e281e507bc9ae008d7139657fe3c33fdfa60b07e","sha512":"07f9d9e3b0fed049d623c987bba0ed4b900f915ad07529fc2c0ffce17bb4d190fd3ff61a9a1d1cecb633a2803e4eefb663811f097c184bf788323a7429c5ecd1","ssdeep":"3072:EF8LI0SeGR0kYFaCGO7She/IB4VhlLPWTNlZk7iABCd5Cn6Fbw52/zZsa0g73ZFA:a4PGR0kYFaCGO7She7ihmCzZsEO","tlshash":"3725716873f16a31b33b86f879a73b19209af1d8cb0389d491f0f6e446cad67e6d0154","first_seen":"2026-10-08T15:07:25.814166Z","last_seen":"2026-10-08T16:09:03.718455Z","times_seen":2,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":10,"connect":22,"send":0,"wait":552,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/ita","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.615Z","timestamp":1791475691615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/ita HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtBH0TRL4T%2F7XGFEuVuZU6uXRqUBoYbrwQQubq%2BRLey9DldsqDaeczbzMUyRCZCfx6hbBf58E%2B%2BHJUvSSdb8QEcpbNuWDlzuUo4ye6U1AcdMTXjSETTE035p530H%2ByS3wTe4yWS475A%3D\"}]}\r\ncf-ray: a47667209886858f-ARN\r\ncontent-length: 272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":272,"size_decoded":2043,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5400a6392f403c8999d1aaef45ff2d1","sha1":"aaa6074f22054d68374845e23a6866f4115a21f2","sha256":"f956581c5f79e81ff93ff51d3d396c10c6163bc6088c088ec69790e95480bcdb","sha512":"1c70cc3d80a659a7a17f186248aaf33e5eeda04c8f4155209a82615c7f40340e151f353f799f7577d2c3f92e209537c4080411819a35b1b1938138c908b53188","ssdeep":"","tlshash":"6bd02b450a7d7a59bcb258b9415228143a8b4c6db703faeab6533488075c75d362861c","first_seen":"2025-03-10T19:15:00.589925Z","last_seen":"2026-10-11T09:34:43.242986Z","times_seen":111,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b167aaf-3984-4516-be46-88aab3e7055a","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.712Z","timestamp":1791475691712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b167aaf-3984-4516-be46-88aab3e7055a HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5k93ynJhWM0ZaY45PMXOx7TEqkM3EYSqMc0P2558a0lRMy8tFM9MkwF9Kxdm5oYPxjGqwJqjpL98oxzzKY9hqKmficSdr24OaNppeulpIJbf4YP5HviimG%2Bge8aaKt%2BBKUE0zjTWQTE%3D\"}]}\r\ncf-ray: a476672138ca858f-ARN\r\ncontent-length: 2138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2138,"size_decoded":3940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1242e202e0c77686d798524768cd28c8","sha1":"9787749010fc52db6d36e15b29fcf273cacde643","sha256":"bdc2422c91bdfb8ce44176cbe51eadc1dbf7d0eb3d22c544379ab07691ba0a97","sha512":"aae3df2a271e9efb21debd58de4d74f551d8ac4eaca7d3746498d6c9533d381ca382237b6d3f2192d2979e4047846c14af0d549c6c8824d397c1b48449022252","ssdeep":"","tlshash":"cc413c1c43805abaf8b52439e2e5422637a67801902e428e227c0a5ef711365f07745b","first_seen":"2026-09-18T10:10:37.753266Z","last_seen":"2026-10-08T16:09:03.731229Z","times_seen":8,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a09b2eb8-f861-4e12-b707-6a6818711f09","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.758Z","timestamp":1791475691758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a09b2eb8-f861-4e12-b707-6a6818711f09 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdvri93pl7YfGPl6YK2zUC%2B3AXNkPppw%2FGFamRUfIN3V6NvY4HgOY5XTi4Xw%2BvN7E2FnmTtCp6Z7Z9Q%2Bp%2B9wcoH9zaQvGLShXdl2avv4f6TUc3FuJEcYA%2FwU7K0knLr3DRoGRT5O18E%3D\"}]}\r\ncf-ray: a476672188f0858f-ARN\r\ncontent-length: 14118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14118,"size_decoded":15929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4eeb97f5c42f4d502a234783fdfb6e2","sha1":"fcdef3d26f1c14d53b7746ad2670a2db5f3d5aef","sha256":"85d08f1f0cefeb167ffe202746714854a836c3570e6cb6c6d50521ea35c638c5","sha512":"76f024a3073db3df0493d74ec6c629a4e27c5137cd5ffb0e0d0c1daf784d372c7fd131090258187dc549044090d86bbaf0933679a048a6f0b58d0ef55dc7dd76","ssdeep":"384:zS+RShBFXiGguCTds1t4AgabHPwaXtzpw5He2Y/6are:zS5hHnguC21t9XIatzpw5He2Y/6aa","tlshash":"7452bf6a5c9d17fa8b2555a22659a0502d8cd355d90b0caaf7d93e383c30437e1c8abf","first_seen":"2026-09-18T10:10:37.755457Z","last_seen":"2026-10-08T16:09:03.732546Z","times_seen":8,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/3545-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.860Z","timestamp":1791475691860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/3545-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ePAEmU8CweIxKo1jcsVmI8bKXlPklQLZc7acWUuWn6GKBhl0zvowhjahPPQ9GRkwWJqujY4twtaDUqq%2FJEuAQmsozDWJQOpPrhc%2FYosQ1Azk2o4hD0wEku3VMIz87PZ0qLQi9bTm6o%3D\"}]}\r\ncf-ray: a47667222923858f-ARN\r\ncontent-length: 6168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6168,"size_decoded":7934,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b96b18cf6873a65524b4faa0e961d377","sha1":"096e34f8469b344ab36ab7fbef19382389bc056a","sha256":"ff8bcbd77f121502ffb06d907a53aa8ed081b9f202fe7908f697ec4eefb1de80","sha512":"77a2e51691c382af8af870879d84097f46e96dad65f27722dbfb381bd4271b6def9165719ee541b7ac6c97a6a3fbc4b0510b253994b896f9c7610ef0149f6170","ssdeep":"96:emD06QBZ8NlFdZ9Yi4B8zkN1ap7aXx56WyJiDsvNzysSNctzvdlROzVRiiDOhMIr:86VDZT4B8kN1rXTkwOJysXzbo1O/stNs","tlshash":"2cd1a06960dde0c2762b1fe507481c0a1dc6d79b974ad21e959bb112a008c6cbb3e31b","first_seen":"2026-05-01T08:24:01.755299Z","last_seen":"2026-10-08T16:09:03.733814Z","times_seen":10,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/1327864-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.923Z","timestamp":1791475691923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/1327864-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9%2BTtcS8Crrq8nV0Eb3ULHkwiPAqrnKtoZkyFY8i%2F3LOiVwUDR8ckhJT7bOntJIBPg8rwOMkR4Q8NNV%2BKwFY1Fb8RW%2FiCHNH9z082Bq51jvMu9qpCfrD4%2FRTwt8kyhcTpsW1Gk7Vt14%3D\"}]}\r\ncf-ray: a4766722895b858f-ARN\r\ncontent-length: 9446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9446,"size_decoded":11218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a901bacddde1f9b78a095c27b0358c77","sha1":"5135398448e1f77d3cdfb238772631390ca8a5b6","sha256":"c3dd36d47953be7489756341ebf317e486fd27b14689e68b42f77a7745b0dcd5","sha512":"a012b0d9f882c4abf4af4155a763c91c321a9ff421f5ed0770814ef437917aa03328ce64ed7790834e9bd73d5d743f8419f3ab56c402de558b0f16e89a1feea5","ssdeep":"192:8NKHPnhDvF10twsfSbLq21YXdudiz+BEP6GO:X/hDvktwsfUETSBE4","tlshash":"7912b0bf792c3b0c4ba9d051992ad5cdc9de25438d0425ff5d282e4f6ef48849833d2a","first_seen":"2026-06-18T21:04:57.762057Z","last_seen":"2026-10-08T16:09:03.735078Z","times_seen":9,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/57470-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.956Z","timestamp":1791475691956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/57470-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPFl790onOYQ8Wq%2F%2BbQcSF6Ov0o2HXGZxlXHT%2FsdVPaYfCSbFQDF73B%2BG0nlsqUFQmuDilIy5nhk%2BtmHVPfvsFdCPP39CfsPLaUJDx2svfNOXq43hChoLpErUOCOype2cxAG%2Bs1iIUo%3D\"}]}\r\ncf-ray: a4766722c97f858f-ARN\r\ncontent-length: 8612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8612,"size_decoded":10388,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b9e3293146204246e797c2e814c7d21","sha1":"14af1bee3eafb23592bbd95ebc789fa6c7134b4f","sha256":"c9f4b46de7bba0fc9dfe144a1f5c6c71180525c81e45e26228eb42163fb2a00c","sha512":"85c2f5babcb2b2bfaa7ce18126d7859bb672a4682e55c8ae8100f489cf73fe98d0e9b81c1104160b385c6e33e1d02fe293bc204ace49c16c6c860925e3c0bc8b","ssdeep":"192:hSwgw8YNWRf2+hyc1RzPMZfz5lZo38ZQwIcn7FVClN/0FOAr:qoWRkcHjMx76oze2oAr","tlshash":"f802be53b248c3525a6c7d30388cf25471b23aeed630dbbfbb92354879189e4368c229","first_seen":"2026-09-18T10:10:37.95254Z","last_seen":"2026-10-08T16:09:03.736254Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/cs_dota2","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.631Z","timestamp":1791475691631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/cs_dota2 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niXBMNiGa%2B9QtevFBddzLYQqnD2G7EGK920wriS3RxXPcQIFSSgH8BVG%2BA7leHzrE8yTPYppGU3jUDLLs45ohJbRWHz6BIgwCJQmOrq6cLPbmn%2BC2I9IGAfBKPhTkyvv%2BywjnBe7Beg%3D\"}]}\r\ncf-ray: a4766720b894858f-ARN\r\ncontent-length: 4008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4008,"size_decoded":5778,"mime_type":"image/png","magic":"PNG image data, 200 x 150, 8-bit/color RGBA, non-interlaced","md5":"17010fa41a79294a457aaf70549e69b3","sha1":"df74a5bb6f4a376c6b8f943001cb0d9f2f6ec7d2","sha256":"bd18a34c6fc0462c978b9161d48376be72e76c19146e754f989392409cab942f","sha512":"532c2c72be9a0356800561e06bac60c1158dd251fe6c1e489a6ef07b970ad06420fe6bfdc0e4d432b30975c5fac23a7cd40389a66951c7d75f52f77c9321214d","ssdeep":"","tlshash":"16816de724195d323e810a62a77253380480476c8cbb152bdc9772f53272eace632bcf","first_seen":"2024-12-15T09:19:43.741524Z","last_seen":"2026-10-11T09:34:43.117195Z","times_seen":64,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/17a40d6a-0e70-4a6f-b3d0-9e13457c1710","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.706Z","timestamp":1791475691706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/17a40d6a-0e70-4a6f-b3d0-9e13457c1710 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NaLToogzfN1muuAjPS6IuHgt8JIqX3w5Ak%2FrJsGKZI%2BJai0DXI6VbXnbD2DLP5IR6O7Zw921%2F8v2uiWajMYNBTLkgSY01f5eMdFRmUqQEXVq6qhq8nbqKYGueK%2BBGvcrCQfYkHiwSI%3D\"}]}\r\ncf-ray: a476672138c6858f-ARN\r\ncontent-length: 792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":792,"size_decoded":2597,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d35578f3d57f254601e48700cdd5c4be","sha1":"a72e8d607d0c74b141b50a6160f22ac0df89b9f9","sha256":"837d92ac783a5119d7c79f5cef584fbb5b079ad069cfc1e60db19fd4b8e9ba9c","sha512":"74fe73d6bafdbeb729ed01cb1f530456479ad73fafa66318036835d39b5668276de22122af4518bfc7e86a3a72114f0c14bf36be836dcb6c4dc89ec1a08b1061","ssdeep":"","tlshash":"db0181b273e49c2bcc8c61ba2a426d487a69a790cd344041201030cd71e9031ba82f87","first_seen":"2026-09-18T10:10:37.829618Z","last_seen":"2026-10-08T16:09:03.738573Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/88b25c25-cfdf-40b4-ae2e-01654aa6b4c4","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.837Z","timestamp":1791475691837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/88b25c25-cfdf-40b4-ae2e-01654aa6b4c4 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIDCDKwI7w3am2POrW4%2BU2yRG7ywdSVOSirU2asTGqKaa7eXJWtrUMC8IN%2F1zvpuRfFIGeaCtZQ7hJYuUplceK1%2Bj7x2ZSrNOWhflHLiTmo9BxzhcJTvadxsxzXYPTd01VPughlj2Ko%3D\"}]}\r\ncf-ray: a47667220914858f-ARN\r\ncontent-length: 842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":842,"size_decoded":2645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67cce8df287cc030ecdf701ab6cf2256","sha1":"1b984eaaf92ffa16a6b91485ff38c5b896d44869","sha256":"2a400a065d9c456db6368db7e81313daee209ce13ce098c09be71339dfa12587","sha512":"f56dfaf1f86ccba71fb97db9be66f84454b3ae5a265575b517ae51f7b2d501449e3ebcd6b401797c284da8ae67d4606508020b61d4a4a7fcf9ec572865b332fa","ssdeep":"","tlshash":"ff018652e1ead5534e4869b87e6d34addb07949ef52c2a2abe6880c4600cacd0a36d42","first_seen":"2026-09-18T10:10:37.844052Z","last_seen":"2026-10-08T16:09:03.739455Z","times_seen":8,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/5353-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.845Z","timestamp":1791475691845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/5353-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HERGIprIMkJCCv1n2W%2FoEMfJ6B1VH8QKbwVsUrk3BHy3IYmIxqdw6LVPsWHmpAThtkm5axx63Tb4fj4GETioGmT8Av1CgORCHUUu0PTHbwxJpMdH%2BpNGqgfLq1LHt9PrtiGmIpAqZoQ%3D\"}]}\r\ncf-ray: a4766722091a858f-ARN\r\ncontent-length: 10008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10008,"size_decoded":11775,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"319ef3f0439d7d4504ce5ac2eefaa4e9","sha1":"77c08526995f4b7bf597fc209b091c30067fd97d","sha256":"9cdb827c7e51d6e08774cd3cec8c45cca71b16a63bf34b8b0ddbd8e7af1a9125","sha512":"0fd6b0fc1ea1d3334073801f972f39314576f47eaa5d4a93a5028931b390644c1c3f30c99d2d4386462bd2684ff6ecf73fd7b3ac7aeb24aaf017c16fd48aaca4","ssdeep":"192:QtAULnvX57kgHo7k3KLzb2Qxign2w/CIdSZ8if9K9gLEmtwNq3hwvcb:A1f55Qk3IzqBgpR/kK2EmMK","tlshash":"dc22bf2b1e736f2594086cbe2416c962f0951f9c72610f3b4bf8696d21a9fd3331a891","first_seen":"2026-09-18T10:10:37.818248Z","last_seen":"2026-10-08T16:09:03.74025Z","times_seen":8,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/16770-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.934Z","timestamp":1791475691934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/16770-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Tkw3CAECm%2BFoyHw8s4ulLBHUfXRYm8t0mS1%2FhwiqVBNw9PuQI4tzYjMDOM8J%2BG%2FkHNtAHN4kJXukOROzysWvMkDIuJysm0G5GQjf6bnrcKikG4hxbIgjiexcEnfuj7Y2xP%2Bg%2BDtvFo%3D\"}]}\r\ncf-ray: a47667229969858f-ARN\r\ncontent-length: 12866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12866,"size_decoded":14641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a161cd08a6d453d3aa0e92e5cdcd095","sha1":"d095caebbf0f82993bd8e30e3ff088c6028b3140","sha256":"628bf1d3e71ab8c4dde1f755fafa4113e91b0e6567d7c2bb13e9b4d9c13fb352","sha512":"2fddf149f0726ce0e54916268793a206223cff12d52e36089278eb771933d25d43ca61f5221559d4fa348ee899ac72eb3ada86db1ff050e5c53843d873c9e6a3","ssdeep":"192:rHr0AiIFIoCdVZtSkhlAJ/yPnM7S+C0lJ8RcyNVIjPfEYuhF3owPZLieIJT:NnFyDtF2MItz8lujkYuL3oXJ","tlshash":"7442cedcc7b809e5924890aaeeaece728643916aed237ac7efcd4033756cd344e91510","first_seen":"2025-03-05T01:10:53.909988Z","last_seen":"2026-10-08T16:09:03.741072Z","times_seen":11,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/59838-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.958Z","timestamp":1791475691958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/59838-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGBhmfS3DRSQGjV2maOJT8IuwoIf9Tcop1qc9wWZapivE4zIx%2BsGlWaTlc5tXQsi6hD02%2BOh%2Fc16NlGKOa1e3afD7KE2%2BVlZC75cbDUPkCRKZltVdouwqyDI0W%2BUQVpxUTVs5JFu6n8%3D\"}]}\r\ncf-ray: a4766722c980858f-ARN\r\ncontent-length: 9478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9478,"size_decoded":11250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4386cdd686753d942e1459c8daf63bf4","sha1":"35dbe362fdeee3eeaec2760c1736699037bbea8d","sha256":"531b76266dc8fbd3f79be139eed32d82bc0b3048ec5d098276005874900fef41","sha512":"b377ae6f48c98617edb558ba5fb0e3d0ac46fc392d8a7513ac33f9ae896f713d93ca5d2b75d050e299cdd815b9a2abdb6546808b15faf81937bf9fde5b464617","ssdeep":"192:e7siIJAJvQMkVse87VB5T638U0XAPwSxM+ntK4G8Bp:e7TIuvQhsD7VWMxXAoSxztCMp","tlshash":"c612aef46e1641de316db219eef05ed092867e18314bce33530536abe4867a618ae1c2","first_seen":"2025-07-06T09:15:48.832954Z","last_seen":"2026-10-08T16:09:03.742036Z","times_seen":9,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/prj_apk.svg","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.975Z","timestamp":1791475691975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/prj_apk.svg HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8VodR%2B%2BuyWZYurIlncWkq%2Fl0IrhtfAdL57v1f5YfcAu4yEJ%2Baora8mKQugSIURsL72TY7zYimtZeR%2BNmX1cGb7LamVxQKWXAaNe%2F%2BybQjFDW2PuKBwB4SkZ93vprxJMqXj79AlDtvc%3D\"}]}\r\ncf-ray: a4766722f991858f-ARN\r\ncontent-length: 3593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9968,"size_decoded":5519,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96c49782c9efc66bc06457dc82c3a249","sha1":"2c23f84665538b21ccce28991d111b50419dda24","sha256":"254d34b781edc19d894dd067341d3917113d3070a1ecc4eb7de953d4e5131609","sha512":"d64c975259f9e6595d0f1a057a4bb3df1342cf667652f62b96280e1ceb0367dc9ed2bfb9607853cbafaf8535c0ead5632a29658761d8471c65b107fa6b2fa882","ssdeep":"192:y/vOZw0MhpapTv/9q3mYPf+Y1NH14naJ7VmK9XQ:EOZw0MGv1q3mY3n1NV/hVmKA","tlshash":"af2273d6262863dc5adbd68e9f32d850631ed0bab4b3d5c14e8f9bd8548b988f607c10","first_seen":"2025-04-13T05:38:58.917512Z","last_seen":"2026-10-08T16:09:03.743672Z","times_seen":23,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.438Z","timestamp":1791475691438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"EWBSpTW+p9MGvh5hBlVzyw==\"\r\nlast-modified: Wed, 09 Sep 2026 18:52:02 GMT\r\nx-vapor-base64-encode: True\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2026 04:50:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4a04999483e64eca630768c036a0c6ab\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6981,"size_decoded":2928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6981), with no line terminators","md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-10-11T22:12:19.353951Z","times_seen":683,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":2,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/prt","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.620Z","timestamp":1791475691620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/prt HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DL09FdBCq774PUlMviwf15AUmB3Wbr91UjJUZ0WpQEqgfOtCSmyNunbmPLky5yzMAKPuftG05%2F3nANtsV8YhqQnMrYF7FXNHZS4ZWU5Y8BwYn9WwsarsFe0nzqRlZs2wfkQNtumGxA%3D\"}]}\r\ncf-ray: a4766720a88e858f-ARN\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":2848,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"5040bec2f80f884d8efaee776f556ec0","sha1":"caa760d0bec1ead36c722ea2adfa908b766b10ef","sha256":"ccc3a79768c3aeed45567ffd7b305d774d53b3d843903c661aa18b08517a91a5","sha512":"c4ac1ad0725dad8c021296fec6405b949145acbeafac631083150c2d70c863b35f94f1bf23828fe12617b6ff3e9ff1b33df2385f337d8efcc18bbb16b8126382","ssdeep":"","tlshash":"2f118687ddd4ac3d42b7541c9c419494df5612ca30157e814e4ab0536f6b39da8712bd","first_seen":"2026-04-29T14:23:59.915055Z","last_seen":"2026-10-08T16:09:03.746916Z","times_seen":13,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1596fc4b-5fc6-46eb-92a2-00c14db990dd","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.728Z","timestamp":1791475691728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1596fc4b-5fc6-46eb-92a2-00c14db990dd HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zj7SFQtVBwUkxeknKtKmjqybyDLnmdIBViEGjWEbjxjJx9cWvjX%2FxklIC6sRcVQBoCU8RajUuxrmAJgJUOdWSkz9foNZ%2Bhyfcg4Vl7RTLIBVOvklcQlcdYJbDFh0aQCF4A74fjYPb4%3D\"}]}\r\ncf-ray: a476672158d2858f-ARN\r\ncontent-length: 1262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1262,"size_decoded":3064,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"337e17844d83b68f9825525bd632819a","sha1":"801bfd2981c1ed174af790b512e9c497e65fc611","sha256":"32f3e9efe2106d9a4a784977c8ddb81e49536a7d3f701c64787d1abd79c3ccef","sha512":"49bf43b25f54ecdb2e90238d76a8b2812c34b6f0155813e0935cb84c3c94b6bce9ad280029274e5fad52526cda971f69dab905a5a534042a99e06870c752f625","ssdeep":"","tlshash":"a021ea0b35e44c05f721855676f73a6e4e95589a880ff030e3cd65fa4edd104a3570d5","first_seen":"2026-09-18T10:10:37.742613Z","last_seen":"2026-10-08T16:09:03.748527Z","times_seen":8,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_instagram.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.731Z","timestamp":1791475691731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_instagram.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9lNrdJ8BH1%2Bz8pTEwFqa5qYAmAJQpqCx7EehjHhYj7JseOJX4F0Ls%2F%2BzPbVhtNaHsIctrFyeFNWxVTrRyxXQEg%2FA%2BkJVc%2B6iJ2K87ATqdV5Gwk5fiVy6iGJ1QgbNtSIW0ep8K68J5Y%3D\"}]}\r\ncf-ray: a476672158d6858f-ARN\r\ncontent-length: 3084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3084,"size_decoded":4959,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7a1707b30f2445934bd82e242a90f09","sha1":"45046f0ed49a2fa83b2ea734f02ebaaff28d3ec5","sha256":"3e0be502c5681334ffdd86d0fa5cfa7b6e4b6bdbb310e478acd0c660708e9fa5","sha512":"791e79914db92393b8b26946c781d9733b0e96ac564edd31029e478d00b77794f4408bfc58649d82472b4dcc909c3a8b370c0235bb590cd17df7744a1cedb6aa","ssdeep":"","tlshash":"35514dea74d0cc3a32623571387f75ad4601587a0e1efe82d5e8ed0507f586ab1f29c1","first_seen":"2026-04-29T14:23:59.941095Z","last_seen":"2026-10-08T16:09:03.750015Z","times_seen":15,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e7be01fb-f347-44dd-b338-88265b4c5d71","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.735Z","timestamp":1791475691735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e7be01fb-f347-44dd-b338-88265b4c5d71 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9miM4donJMw1uYbS7mFulT3ZfmdNpGcfPqkBLJTBYnDxROW2UHZiCJft7og07A%2BH0yJbb5ksqQbPAQ61ZmpfIIr7rFpZFteQ%2B2mU1iO1OztsYgYDsbCEOaP6X43cM2bGG9k7RKA27VY%3D\"}]}\r\ncf-ray: a476672168db858f-ARN\r\ncontent-length: 14196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14196,"size_decoded":15999,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"448967e0642a588dfc0eb39b40b38d57","sha1":"3fb58e0f477aadcd4ee7b451e050968b3818f1b5","sha256":"5b7b444160b03ee564af728a847808c25cf611353eb28c6378511faecca4007e","sha512":"af7d0cdaa85f0442635a0e39a5530532d2359bf0a7103447e6d6db67b61df5454efce819fb6219dea98e0f5b84e43c3656d6e3edef9d105735bae7eea82f50ff","ssdeep":"384:x/LeONepBNsHFrSBiiypScDTv7+xiCOPpOnc1ZeI:xTeWeZsl2BiLpS4n+xiC0p0cn","tlshash":"c352d02f5a64f3e04fac0133032899a2540739a8f8951b745bb9d28d6c6368fff92146","first_seen":"2026-09-18T10:10:37.718637Z","last_seen":"2026-10-08T16:09:03.751351Z","times_seen":8,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d45dd58a-6609-497c-9079-80190d6ec241","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.783Z","timestamp":1791475691783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d45dd58a-6609-497c-9079-80190d6ec241 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XYotSjlUq%2FHSyir2NPSl60Q7C9gl8%2B3oavGBbckgtZbMZDSab3M%2BNpr4TaI%2B3jahXnVugi1H9HhXQjjIdO2tK2wveZ5SucyJpS4Cz9Q%2F%2FiO4HcQxyMTwb0h3MOg8CTcSfKfFboCsPUo%3D\"}]}\r\ncf-ray: a4766721a8f8858f-ARN\r\ncontent-length: 1146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1146,"size_decoded":2956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3be276653a8e6441e387c12ba230a355","sha1":"abc84f07a640cf8c58123ae652fdfc6965784000","sha256":"2af751b209d72c8dc6b78aa74a534adbdedeb1977f251b4724b95a709423b487","sha512":"32f971d932557c0ea67c25bc89bd8040eedef51c8b0edd74119bdc44ef1ae31a1121318f8e47d08bff35adbf6b3093ab6e81d12dee1888b6f5ea34bb2b100790","ssdeep":"","tlshash":"6121cabae560a5f0e452e3855cbe25c407bec8bf150d8843fd5bb4c404f2d166e220c5","first_seen":"2026-09-18T10:10:37.872758Z","last_seen":"2026-10-08T16:09:03.752442Z","times_seen":8,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/35ac9982-0023-47ef-8027-1c1881ada3c4","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.819Z","timestamp":1791475691819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/35ac9982-0023-47ef-8027-1c1881ada3c4 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ak1m31LhljfcVR6J1iOQPLvzbQ7GVAkxQnUmKZ0Uo4OolFtK4YUPf0BXrFbyoMhZBXF2s%2Fp2%2FlPfOifAOnNP84xfme9pxslua1gwx9z89n9plNeh4qxN%2BQWaHFo9mFUiAZCm7uDN34E%3D\"}]}\r\ncf-ray: a4766721e905858f-ARN\r\ncontent-length: 672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":672,"size_decoded":2475,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d540596b693baaaf9d7f6f6cd4b81792","sha1":"e3d6af30f00d38fd4be8957e1e4159dda5c6e60b","sha256":"d6ed7fac9b3f5b63516f6e13e7b3263fd763c67628dc93a099322c6b65607dba","sha512":"1bd1bcdc519730e64eff73385ad0fe2f722e0589c7bb4f7f9bb18e5b29e15aad6b8728d73a049b2b354313cd42555ae6f76a0a11a230cd007b381584140abd47","ssdeep":"","tlshash":"fd01233ac16d70a39c3d2d9865701d46f6db0c82babce60380494dfe6a0e2c32696703","first_seen":"2026-09-18T10:10:38.038528Z","last_seen":"2026-10-08T16:09:03.753295Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-egypt-fire-2.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.912Z","timestamp":1791475691912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-egypt-fire-2.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OULQlBNAesX91n9GxE1AJ5K6JhssdOBQGxbF7zDzOYr36AMaU27eLAvSd8Iom01qUktDq%2Bl9mfL%2BU9umWzjl9VxqP96KFK9SUqdSvoslPw1Soof3g6PX%2BBNFk%2FtWO1zBOV0qdlSgGpQ%3D\"}]}\r\ncf-ray: a4766722794e858f-ARN\r\ncontent-length: 6218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6218,"size_decoded":8089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35fe5ab2c70b1707ae773fa030d906aa","sha1":"31bd95480ef3243cedb40fc14a42cbdfe739c06b","sha256":"4a9819ed334632cbde4f9951f97a3bec11b16a36e8749c779e80cc1e9f31d164","sha512":"6efcfe75fd8aa83540868438c82dc96d3eab4cdfc6e0dddef79c597dba68a54b6f85929f56ae14c2baa188c4ae90f6e76665c5caf6e0eaa440421c332ef7bdf9","ssdeep":"96:s92dvcTOY73iLIc/Wga5TPHPWLQr2KKMWTw2YaiuoCir+Li8cnWMvPcgpRiW4i44:VBcEp//m2i+irSi88bn6idn","tlshash":"e1d17ec2b2bf474fc23b9437650878292df246149756c8fd2b495737050846aebdd394","first_seen":"2026-09-18T10:10:37.745449Z","last_seen":"2026-10-08T16:09:03.754143Z","times_seen":8,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/seo-kit/assets/9833.c6f25ce1309c4a7e443e.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.461Z","timestamp":1791475691461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /seo-kit/assets/9833.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTIrc9cEaae0bNCq0UW3sm%2FH0V9Ap2bj9dZ5kmrjFH%2Fa2hCaCAcsZymUFi4xPTKS4zP25hkU%2Fy9XjRu2oifuS6%2Beu1DzdsqkPos38qUleuetCsHvZ89HFvtzRL2%2F5YXCiJrx0oO2J%2B0%3D\"}]}\r\ncf-ray: a476671fa847858f-ARN\r\ncontent-length: 176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":464,"size_decoded":2097,"mime_type":"text/css","magic":"ASCII text, with very long lines (463)","md5":"b4ee44940066a271f8575baa60e65903","sha1":"bdde2b2f8e9be34dffe963f50ea36280a3cbc6c5","sha256":"39bf0ed323fbebafdfc4d9d41b740f4c435172d63db0f269aba4904ad58b6cfa","sha512":"74dcefaf0583f2144ef175b6318e85cbf6f32ff068f7328c509af4317eec323f2450d6e986903e6f5f1a4cdd4984571a9ffa5b98525dd8220a6d7a228ac361e8","ssdeep":"","tlshash":"0af089d0c9f5d0ba27fb727d054cb2252b447145cda68bdcf95a167450c83bc0096f88","first_seen":"2025-04-27T18:41:41.60946Z","last_seen":"2026-10-11T09:25:08.184567Z","times_seen":251,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_bx.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.608Z","timestamp":1791475691608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_bx.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZDWDoKU3Bw4mWgQ3p6soBrk9SXdJ8CDNkeuXcFedYGkJEUlZH2nloqP8yaSk%2BrO7jDXo9W1z%2BluA32F%2BTJ1pdTzZnbj10WiNL%2FT1RyO1yTpYax7rR4dYbaUu%2F9GYmzgCWd9jZ%2BHYMI%3D\"}]}\r\ncf-ray: a47667209881858f-ARN\r\ncontent-length: 3110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3110,"size_decoded":4985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17740ea1a3c03f25e3a1c00846222272","sha1":"509154d47df4ddbbbcd551f340c1e4cc431985db","sha256":"3d8ba15de400d48d6ab4dbf40f9b61eeb1d559495199bc0d221fac5fee8df322","sha512":"02beb4dce3199ff046dd9c490135066ed5453aa74734c48ed91a35401ec7e897c76a7d46ddfd1f9c267fbbd1fd698520edb60eae245650e151f5f46d47677d88","ssdeep":"","tlshash":"7f517d37e35d7923fd54b23d4638f5d286d155720e87dfc058148d43921c3a2506faca","first_seen":"2026-04-29T14:23:59.922014Z","last_seen":"2026-10-08T16:09:03.755649Z","times_seen":21,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/fin","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.665Z","timestamp":1791475691665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/fin HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=viX1dlBt9v3h7GNnllaEaG8pVBqh%2BgMhljH1T1%2F%2FW6jJgjBHgGOyX8dgndT%2FTaJAqlxU0fIN0eol%2BWgmdmdB9sGqd5tUq5CluNIrifNQkAkLhoOuw0Bn91RP%2BjSuwaoMYRna%2BKdV%2Bfs%3D\"}]}\r\ncf-ray: a4766720f8af858f-ARN\r\ncontent-length: 230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":230,"size_decoded":2007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8a9d2ee3b0cf348805e3365e3f80aeb","sha1":"30de7c49ca8b2b388b077c9c860fb6b3f4932982","sha256":"7a305c0741e079f529c6f646e2ee105534c6a018fe29e1dac979985b59d33bd9","sha512":"1de45d4a78f4b357e00581ed3503332b9210db87a3f774d6cee29aa890198203804f7248eb3aebde96477ca3883a730f282daa95ed640ecf2428ab510778bb68","ssdeep":"","tlshash":"3ed0976a8f054388389aae000a638eeb808e48080a1968d023034d8c742008513b4c62","first_seen":"2026-04-29T14:23:59.604301Z","last_seen":"2026-10-08T16:09:03.756387Z","times_seen":10,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/mlb","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.697Z","timestamp":1791475691697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/mlb HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mAQyT%2FCkyNGftxWZiaAYBI9E8YWsf4CZvY%2BOZ3ACsPEOjTvwepWAnq96bFu%2FdatwbifTE5ht%2Bhbdezu4pibER2hTr0eioPHOxQanRwWfat%2FQKPjO8%2FcLv4TL%2F%2FACHYxOZZXg1xIyg6I%3D\"}]}\r\ncf-ray: a476672128c1858f-ARN\r\ncontent-length: 1979\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1979,"size_decoded":3757,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"c068789c5e67df9866d0892f448767d3","sha1":"eb0acb0114d354e543f4e671e917e153f9321529","sha256":"d5753b53ef8dc5cfae65ad3f18c6a4d2122b18881dc905bae51d7c792760a96f","sha512":"1f09f0f8ceadd1a92b54a49db00f0c64611c2bb490a8bc3f5c13a47b1a1dde43055cf4508aed7f8e13143540ee9c64be817301c3cd5a843853f2f40a464aeee4","ssdeep":"","tlshash":"80414a960e5338702a11b0d39a86e8e045d0d35a4a003e95b5cffbed6c2fb431388ae1","first_seen":"2025-06-29T08:50:22.744436Z","last_seen":"2026-10-08T16:09:03.757157Z","times_seen":27,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/5035-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.841Z","timestamp":1791475691841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/5035-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqxjMVgmHXGy5kgbzr5smOEqdMqRrkDqtI6RTvkde%2Bp%2BFdZYR%2FW4ymqhQI0tcMlcZIK%2FzMY%2Fxtg1YrN3Ui%2Fsax9E2iRvgtEHQ%2B%2BvUdA0pWvsfAUB4M9O6NVRSppy8Gi4UTel2PBSuSQ%3D\"}]}\r\ncf-ray: a47667220917858f-ARN\r\ncontent-length: 15566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15566,"size_decoded":17345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebd3ea546ac2a465b1508b6206f7f218","sha1":"673e29ce594bb6fb99b5e53b6ac52ca99fb40466","sha256":"b2089de21753536cb74c9aba4c6fc4f1c961746d9733326503ded15dfd9bed24","sha512":"f6d930be8664ad0d9ee2306cacaf049a2996ab622fbfc265e5d92dd316d77d6741a4ef83f79248d42f11076837e21e90a130f417ac8d6408c8dabd42a669b84a","ssdeep":"384:+ZEkI0qKg7SnyszgXGB8dyzR8IKViQeOxmwS5B0N:+ZEwqKgenyCkGB8MR7QeryN","tlshash":"4d62d06c41e884b59ec56cb9ccfc97d3215e753d2326929964006a27bbacf800a9f7b4","first_seen":"2026-09-18T10:10:37.809245Z","last_seen":"2026-10-08T16:09:03.758003Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pgsoft-wild-bounty-showdown.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.913Z","timestamp":1791475691913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pgsoft-wild-bounty-showdown.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCi4SWGG6at4QjHU2%2BvWdTf%2BFRvyDzbU9x9YwWu1F3d0XompJPPG2UcbHK5nujMQMzsjMsEXE274gV%2BzMSYX3ZEAIf%2FkDlPIAspDbR1Q25rVxuj0Rj9cU9O%2BiKgf6FiladYW47cGSC0%3D\"}]}\r\ncf-ray: a4766722794f858f-ARN\r\ncontent-length: 5394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5394,"size_decoded":7267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d88da03e9bd694c703eb44843e31258c","sha1":"535de7cc14111d65b8bfe54051d4c6ed3bc13d8a","sha256":"f3bb84d9b308c71b406edfef5a31e29019462e2b4f93edc5b467c46e45931b4c","sha512":"48ce04db1e17988df7fec42c420ff03a2df48b08d1e6191d67adfa5e93acd129b9b784f59c454b146c601e1b0417b90c4f52a0b5bd9246e88605dc44b9ec4581","ssdeep":"96:bWlrVoBL2QciMj8ahD0sw8mKt3ZAAze4rvqN5NpFcrSi6QZ/IctKfMC8:ilBOL2QctIahDrcKt3KGVvq/LFgSvc/J","tlshash":"69b18e013e61b0b2a51d4bb26bef043ff7b4a443be48aedc667181520dfb41e411645e","first_seen":"2026-09-18T10:10:37.98493Z","last_seen":"2026-10-08T16:09:03.758758Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/243073-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.967Z","timestamp":1791475691967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/243073-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBnOCKIaAUFqemuiyE8zwHbIJtgDzb22fxOFtIK02eq8CW21t6njZ0McjUld67O5VEcg7b0B9q8babefGx%2FZ8E5IX2g7qOJBU0uEdEHkhpVOpeLHQkGlWh5KiL%2FKnssJylNsHuJxNUA%3D\"}]}\r\ncf-ray: a4766722d986858f-ARN\r\ncontent-length: 10164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10164,"size_decoded":11931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f051d7a47c9eb45da07e0bf99f212e57","sha1":"9a68d24d2e82a256c37c486444fc2a0d05d0a8fa","sha256":"71b9e25e9c3967f4f2964b2f2fa511304bdcc323e28b90bfc11194970fd13bc2","sha512":"e0a1d1f67f8e0d5c5a6716542888731a41bc09b3909f6bde8e196244b47f807179df9b5dfa77dd262c9bd18b07a4de4c4ed79731111e2d314b7f557adf1e41a7","ssdeep":"192:+ltYpBcOh/SEKHkWgHIj6cEYU1wppEkMjSWvn5mYvzFMyUaY:+ltS9h/jKeoj3E20Sqsgz2b","tlshash":"2b22bf5af29f103aad91b0d964770e7ef631256ce98435970083ce9d1ef1b7920ed688","first_seen":"2026-09-18T10:10:37.822627Z","last_seen":"2026-10-08T16:09:03.759566Z","times_seen":8,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/60754-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.973Z","timestamp":1791475691973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/60754-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\npriority: u=5,i\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJtD9IEF%2F8daUO5MPfE2u%2Fiuz1XZnGBDjUBzTkE1s0zi9aIkm8Pr0k6ze0zrbK3oRDaYtozjCSfHCYNNI4PVs9xf73MN6h2fUNLKYUkaSzyDsUhBKSraFFbuJ8LzaBWJ0kJsWpGjCzk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4766722d98a858f-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":2054,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fee0cc2f258c97da0c1ba0fbc2aa63b9","sha1":"33a19abbf16364ae9d89d629de02d69d3b6e8045","sha256":"96ab528e80fab35cfe4747f07c03f0f4cfdf5ced2b611755596ac814931f88d0","sha512":"3d167634981a58f8905639df73244e0b7e429a4d449af3b8a7fd5c0bf3e732d52e86326ae03270be31760d0a5df5e85d94fe0106647a54c701e519557d8d7ba7","ssdeep":"","tlshash":"0ed02bb4321cec1a4640c206032ff40a21abf0e69b85c354f8d17d3566062f7bf5d7a8","first_seen":"2026-09-18T10:10:37.956889Z","last_seen":"2026-10-08T16:09:03.573069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/t_wta","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.642Z","timestamp":1791475691642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/t_wta HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJZ39ZyuATIgrWEyyqloMXYiVpng0xkolaRAEMggfYkfVgs04jATYuLOFst1DYUeQAmTTRj5dF8vmMWe6NJqwvBrbyPJXMF0jOt9ypC3mBFoj6dBpuXVVryz%2F0qCah4Esm5eaWbPi8U%3D\"}]}\r\ncf-ray: a4766720c89d858f-ARN\r\ncontent-length: 8416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8416,"size_decoded":10180,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"7ae5c20ab409b05522e5d04128d6e772","sha1":"837da192ea6773661b830746e1f1692268167c8c","sha256":"f5d41b55a5e77cd0f1b02c8d49e1f71cdb755fa7cf766b391822044923b48914","sha512":"34b3d6985b91d7a470a1a7676afe117d13418a2ae2087b4a1948c3a8ca2aa3d9d3f7ca102614957de83bf86191a8a15daa97495cd168f154cc7d161530efba10","ssdeep":"192:8NDC/IkeYYG7poBD0bslxH/9Fgd4cuAEK19PANTgOw7BEkEe:8Nm5e3mYD04y4cuRK1ygOw7KkEe","tlshash":"7e02bfb23e96963dae7179f690c1018cf93073b94000ada6d1a3f8b7932eb5c350f560","first_seen":"2025-03-09T08:50:28.717421Z","last_seen":"2026-10-08T16:09:03.760409Z","times_seen":67,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_h.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.605Z","timestamp":1791475691605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_h.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1z7aHKQH%2FvwR5gOaULZwQd2MmZmRDWgKDueh65b1AweWX2b34SbiWc16JhMOIT2SZPvDb5PL62D4rPLBx8FOCXrM1%2FKPk9kLG5R6yCKhTsxvsHT8U9iI6igD%2BJxoSTbK0tzNSowk8wE%3D\"}]}\r\ncf-ray: a47667208880858f-ARN\r\ncontent-length: 2066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2066,"size_decoded":3935,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9130380d5099e0ae07016c17d6c7919","sha1":"f1893cc1b2c8e2c28f607184afb0fc3a22e0fbaf","sha256":"7917bb6f527a10f95367a926e0ca61378e09c4f672982fb545830f8e9db83130","sha512":"c33c04b4fbdb701a038babc7213503567dc9400539213b4c7f385be93a9d62667dde443c89d6fcde6a674c6b12b563b6c768feb384e2c89defa732bbf0043960","ssdeep":"","tlshash":"b6410e60b64374d46908bde148d843f1f6cb06f0af46eead8693d75502fd745f05d504","first_seen":"2026-04-29T14:23:59.626246Z","last_seen":"2026-10-08T16:09:03.76128Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1022,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1780659075","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.683Z","timestamp":1791475691683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1780659075 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fGJvhbMEACD9obhbWtQOZ%2F06ORzjFLkw3CusafGyYAC0P7oCVHQQbGsW%2FoCKMXqMdrWeI6%2BO8DoNzuB61VVvIQfIC7zGDkwkWbkH3cDFHlIuA3sGz2TPZneN%2BBljkrH%2FLeibIPbQgg8%3D\"}]}\r\ncf-ray: a476672108b7858f-ARN\r\ncontent-length: 12704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43833,"size_decoded":14583,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (519)","md5":"dc0ab4563ee0d92d8837cf8d12ddd725","sha1":"89482b62a0398687aa49cbe0a94ea0480a7c0e59","sha256":"ead19f0ceaff91c8437160ab44698647009dc865fad03610ef889de90840b381","sha512":"ec228782e91348254d814bb6edbd1294840d45d0139db4277fe32eaaba4b06e045330480f7f2d1f8a18681cd7b2fa3e718545f0fe65c7d28c444581b7fe6c56d","ssdeep":"384:UUw0IxBpHfBwxL7J3mcj4BZ6aQ7hiZ7rd8jKt3HOmvBmcdYGcf9wMvibtfc+MV6H:/wV/5wxp3mcjDkRBdMV6vy49T","tlshash":"c4132b7962bb003a4013916fc79fb74c36269077b206ca087dac5b6c2fc593897b5bd9","first_seen":"2026-09-18T10:10:37.965778Z","last_seen":"2026-10-08T16:09:03.762499Z","times_seen":8,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7a78d421-b837-488d-bcaa-94d582d60465","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.738Z","timestamp":1791475691738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7a78d421-b837-488d-bcaa-94d582d60465 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mref8W3ZCXiGNnZUxBb5gzffUSdxBVngJ9BpMDV4cjVqaKNqsbog5ZU2Tv8ztkHPm4pjZp5k3FKu87HVx6EWc6FeuHfAg2u457%2BqYtr0N4q0lsTegsl9U5lO6tsUk4MQR40uPQH8PN8%3D\"}]}\r\ncf-ray: a476672168dd858f-ARN\r\ncontent-length: 25068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25068,"size_decoded":26869,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"936b718d137b10dab44a9b45fb3dc513","sha1":"5401a04a6927e68499d61b0f31851083d38d725a","sha256":"e9cd612f2c3349b3b3b4f815f1e012f006b0de9bef7612deecd873bb0ebdeb54","sha512":"b15135d0c24b1496af67a1574078d4466b839d6c57d5f7eb4885480f3fd95feaef2ebb7da79407cf998f6f9e86639266d8479b2641e10e37ee6ff2b4d136a940","ssdeep":"768:jh3B86ImsFMd66DX0lH0VHJ1kbJE+B4t5KTw4t:RBILWd6zh0n1kb9BqKT/","tlshash":"91b2d18ff99932f49d5461f7e331de32d083c384e472998a11e72c75e64caa0d9b612a","first_seen":"2026-09-18T10:10:37.851257Z","last_seen":"2026-10-08T16:09:03.763297Z","times_seen":8,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/484b2a81-db26-4b76-a8d2-de06b44bddd6","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.797Z","timestamp":1791475691797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/484b2a81-db26-4b76-a8d2-de06b44bddd6 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwMwKQ2D6iOaGcdmIGGO42nqU7n5xZz0zqseXgDzcPuslXItK5CrGzsimWz3wUD5lzohVAr7qADqpfW2IWr3iQoXQ%2B4WvU4NjVN0AELWuS0n9E33v2qi9KFhFJUx7gBTHbOaeT%2Bvan0%3D\"}]}\r\ncf-ray: a4766721c8fd858f-ARN\r\ncontent-length: 830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":830,"size_decoded":2631,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"767c016cdd11c35678f60538c8841165","sha1":"6ef46a7670b297dece7afc24b6bc43eeb48bd790","sha256":"f5a41a73447bc1c94e174c71ab1fea983e569ddfc5902ab2123a88f743cfc155","sha512":"8f394b28aec876e0dd0a64fd5e74a2545f914b67c56f0a5d9605df55b41e43cd976aeaf428fa9eb64ad2a242720d0f42093d825ff5ca4f9a76d81aacec31c11f","ssdeep":"","tlshash":"25018639c9f140018b2970759f45be9470aa0e56577bec3e83d2a18c0c4af633e3bb48","first_seen":"2026-09-18T10:10:37.886368Z","last_seen":"2026-10-08T16:09:03.76426Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/834-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.875Z","timestamp":1791475691875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/834-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtDxnR2id%2B9EgOZ4a%2BXYkFt2Pc2pere53W%2Fcnl7SLoqpqQBm2bbdW2mhTACPvqZa4RsqOuyp%2FBwSL3heFeGbA7PAIsRI34KeiUQHkF9EyHGU27KjasCjnreUfRpSzXDxl3VzKUrq4s0%3D\"}]}\r\ncf-ray: a4766722392c858f-ARN\r\ncontent-length: 5780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5780,"size_decoded":7550,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63886a9fbfce5568edbb02d59c11a826","sha1":"61dc586bce2ee4735965565da1c0592eb100d05f","sha256":"840871fb777271d4fdc102ae5a8ab207c4b51f770a16ccb299affbeaaa0d99c0","sha512":"ce2d3191e97cb16045d97bbb58cb0be69db25f8e550a1d4f205ca5014cddfe05d284b927da66b468e1433fb8dbc572f99c9595bad44fe29ccad65db7c009204c","ssdeep":"96:FHU7BezRZaYAFTKRjNLxHYuokRxa7IqOpyLM8Cpc/LPLXO5/f5qum3JkAnr4ppkk:pcUXa7FeR5LFzwcqhg81/POhsusAkhw5","tlshash":"78c18fde4e9c46b5245ccc7520e5457b26fc6e13ad2136c003f5a50a154df957cf63ac","first_seen":"2025-03-13T18:40:41.870515Z","last_seen":"2026-10-08T16:09:03.765047Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/65596-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.926Z","timestamp":1791475691926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/65596-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6fLQnaJKbKdLeYFnJiCqKgQAaSw40GWenLT6q0nNiY6ZWzuanVtVlR8PS3gLf%2FYGKyElboR7GrzQITq2C2Ht2ytWZV%2BYacYWtie06g4XIXwGSRwjxIzL1%2FAScc%2BaICgIBbcrDMMAYk%3D\"}]}\r\ncf-ray: a4766722995d858f-ARN\r\ncontent-length: 11510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11510,"size_decoded":13281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9754a3c99c2274cb9ea327a5f10a025","sha1":"3ec9879080b2b3a44e26e45db20d6481c411315d","sha256":"83991fdeb3774026f97761f28b6377ed4d717973e1f3ab03a64956f263bfdf79","sha512":"3c613aaecf754926a799266cd9de27ceda0eed962271fde1991fd35102f16dde32a5ea80204d8c43cfad71781d9812f54f659e9ee6e43351b5527190aac0943f","ssdeep":"192:L6sgzy8J8pw+NbuZcSe7BFZSsrYwpwXgFlya7zm/XVo58s+TIXQdN7Vq/z:L6sgm3pPbuWnj0sc+yclyanm/gt+sX","tlshash":"c432cfc8a5c9b126b18a322383eee3cd01525b490da7cc9df6d69f7132b4db89a4c344","first_seen":"2026-09-18T10:10:37.948566Z","last_seen":"2026-10-08T16:09:03.765763Z","times_seen":8,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/65718-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.939Z","timestamp":1791475691939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/65718-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZuWo58UFVrOPNYZ%2FYQnwlfUbbu6zVpA4HZ%2BQItjwfIjIce2L1Gr%2BpL%2Fk4BMZ7kT2srEgBxLd2nU1O99UWGLgjAmvMwe%2BMqW1Ori%2Fy4PsPbpchD%2F46SyDFxnF4QhKXEPiHBKEn09fnU%3D\"}]}\r\ncf-ray: a4766722a96d858f-ARN\r\ncontent-length: 10274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10274,"size_decoded":12051,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c78f43810e0b25fee4145e98ca67702c","sha1":"4950dac21575b84a93d6143eb384d77cb4b899cd","sha256":"80da78c16fa6cf71d3ef8e6fb392b2e32b88f75945690fcc094c9eba409affed","sha512":"6f1bc777eb5a3fdc9a0a470e472fdaca34a3d5aec68bf673423ce98a9119da512091c3a979018541c4f8f20f9df5247637f64a6133708cdc567c4d31ae3829cd","ssdeep":"192:JDt1bA7QckQP0k8/LDjz0pc+M9x7rJeCo0lc+Z0cusYNeS+aN456XyT/NNYiwN6r:JA7H8/fjzgMPYMlc+Z0uYsheo/NjwN6r","tlshash":"0b22c00abd5185f28c12cae420fe0ed55eef4a537af016cae57434e91f3aa8931dc948","first_seen":"2025-10-19T19:10:25.669146Z","last_seen":"2026-10-08T16:09:03.766472Z","times_seen":11,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/event-center/assets/styles.04a6e15ee437eaab1e62.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.467Z","timestamp":1791475691467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /event-center/assets/styles.04a6e15ee437eaab1e62.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLyFO2uUVbSUfTO6%2BGN%2FjgJUOxzomcwqsT%2FkhKunROWwFobdymDhcntluZir3HV8qXJot%2F6AQILBiUjb7cVIDGDmB3V9QusfI6V5MMbW1Q2z2qP7bbRF%2FF4A%2FmabE269783w%2FD%2BHsqY%3D\"}]}\r\ncf-ray: a476671fb84b858f-ARN\r\ncontent-length: 9290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52778,"size_decoded":11216,"mime_type":"text/css","magic":"ASCII text, with very long lines (2579)","md5":"69a92ced4b06d260f6d34fffb0a24fbf","sha1":"814fc04589077c01574a16b388799ae7c5557384","sha256":"04a6e15ee437eaab1e629a1a668a638f0963293a1661bb43de4106e870a15de8","sha512":"b81e2759a9ef8fd611c82c2224977eba52c08d30c981e6dae57a962f0884d70c4a78b2a48e2bbbd6dfa180979d73fa460bb3133baeb0660657e045f822422c5c","ssdeep":"1536:HzyNdabXEv57G4IXrT0qh5hsIkkntkIYN0dkU6ZvmH:6eNr","tlshash":"0433e8e523d0b33cbc33e7119fe8579e9114a261da234affd991363449c7bd229b2258","first_seen":"2026-09-18T10:10:37.97362Z","last_seen":"2026-10-08T16:09:03.767237Z","times_seen":8,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_ua.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.586Z","timestamp":1791475691586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ua.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:11 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpY09kDEImHiK25x5Llzy%2BO4qdo28O8Rtzy6El8XLEV7%2F8a0NvXhr0SC3x4Dqucdq2pogi08OzAakh0p3oMaoa6VC0uFUS9g9SXfc5jNJbG7%2Bg0cZePeQhPyT0PobNOVJIrnAb2BFFo%3D\"}]}\r\ncf-ray: a47667207872858f-ARN\r\ncontent-length: 294\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294,"size_decoded":2162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a80a80ee99fabe8cceb37276d6306cf","sha1":"12f60b61e7c4a43cf63e71c0609936e86ddd678a","sha256":"542837302689d988c782202e7640cc515f39ff395b5d82a053ee0e2f970a12c5","sha512":"5b6c3719af4fe0ca953d96740a6c8dac3193cf1e2dc8212354bba0f1b2166b8ceeb42e1b5655fb521bf000c2c550cb1725b82035f91c890584018a1816a5171c","ssdeep":"","tlshash":"efe07d3ea0907484c704adb717986c00654a0905907adf40359e6e2415295801812e94","first_seen":"2026-02-09T23:34:23.656027Z","last_seen":"2026-10-08T16:09:03.768036Z","times_seen":30,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/mdlr/assets/images/brand204/mdpi/img_sport_top.webp","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.588Z","timestamp":1791475691588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_top.webp HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:11 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lF2oZ8IL3Q%2B%2Fuf060LHvMhMlwHmkgbm6HSPHYpk7f1sRKSUev7tti%2B6mI2bdBsN3pcEjrpQO7FpTuEvg%2BJM92BxQOTfMQU7OUsgNOw8o8SYu1ZlL7ja571ac09y8cOj90UraRr%2FnW6k%3D\"}]}\r\ncf-ray: a47667207873858f-ARN\r\ncontent-length: 2642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2642,"size_decoded":4515,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22476c5ea8b5bb349cb9b413f702aa85","sha1":"ad586528f7589f3a406cc2a65a5ce4c269e72bbe","sha256":"f5a86b0782c4de70ad4b43c0db9d1e32cd7e9525bfbedecf3640411be4ae5c63","sha512":"dcc420be948563739febf9b718a9a7cd6014e3a99bb05f9bc8a4cd421ab03d7246b2d4901c4cff1697a2153448222da51a930a306d0b15623d3fc77bc6ce62e6","ssdeep":"","tlshash":"65513cd416fdcd35066dd41d2e1441e962f25a85e6c052bdc1f0457b4db9de120ba84e","first_seen":"2026-03-28T17:27:48.333818Z","last_seen":"2026-10-08T16:09:03.769324Z","times_seen":43,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/131155-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.920Z","timestamp":1791475691920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/131155-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3wJYx%2FZahlEMbBprcyFt6DPrChNE9clMmEiNnOPTEVMawZgN4ZWSWS5pL%2B81dyxFIsTZe27B3dYdtUSXCURvclatd%2FZ7AuT5peAKFTpBgG6ktlooMH1kMcYnvYlFFqfXhPXCmym8kw%3D\"}]}\r\ncf-ray: a47667228957858f-ARN\r\ncontent-length: 9392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9392,"size_decoded":11160,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"233103dca05ed5ff8c698aed1c943b5f","sha1":"663238fe2aca4cad25eef105a762d12d13fee2ed","sha256":"3648c8408b503417d24502edefa6fe733b6a906e59a9f7de83fc4f1b0e01e8d2","sha512":"a63ce8e6aa2671c0a416427470268db7c6e3a4bb254f2bf6199c6f1c6d648c689c2743f36b951f92aba4edd1938fe23594b2c886868751b458c477cc33004522","ssdeep":"192:SVBu9RrYH7lwjWrN4yXorO/SHjN/zytOAAyVn+x30pZT4u8G/:SVBu9Rr6RwINqpDZhAAyJ+WHT4u8G/","tlshash":"6212bf9099a04017336aac794b77abdf34050066032a1e0f6abc5dafd8985ed3423bf1","first_seen":"2026-06-18T21:04:57.694487Z","last_seen":"2026-10-08T16:09:03.770209Z","times_seen":9,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/65372-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.953Z","timestamp":1791475691953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/65372-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htGJVIbILOoivOynyHI0HWZxVJaasJapnQv1gVSLGB8gRaPTRpW7Pwh1InzT6DzXLzqBL8wzLhOszbuxkY%2F5KB4rDllmIg4mubWAEszmJfSebyww0mK0VTM%2BHLM073KBHpkIHKeEtwU%3D\"}]}\r\ncf-ray: a4766722b97d858f-ARN\r\ncontent-length: 9936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9936,"size_decoded":11702,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe35bf50fc4ade1f5e937d83e811fc70","sha1":"66e51487b60b67264bd186670e5c99b6ab64f020","sha256":"b5a67e05ad48884c5d2605063f75e55af323eaa094e3f95b47147eba931ba03f","sha512":"8877f12dd85c84490ef177f5cd8deb8d743be3509bfc1b6afa67f751c0b196d3a766bddf38c20ab6ad1a95f5fab2933903382e069e477ac46b2c8b6149e16665","ssdeep":"192:14bxhx2ypdtNk5zCL8xOFuGOqfg07jZSpU5KwrDUtaJqn0KWs4e:14bdnv7F4xuu4hSgTrD5JbTs3","tlshash":"a922afb523a3d59201617fbcf12fbf1c9612219ea2c19ad239de050c6977be66433940","first_seen":"2026-09-18T10:10:37.73368Z","last_seen":"2026-10-08T16:09:03.771074Z","times_seen":8,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/39197251-0d79-4d33-8ada-46179debabf8","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.787Z","timestamp":1791475691787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/39197251-0d79-4d33-8ada-46179debabf8 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pu%2F1mc%2BhKSg1L5j4lohF704p4l3wOXVipiNBNsy8j0Ou22GMup8NnxnF34e16jA0IulJ1c0rWnNTboFDc3Ub3Fbt2gkQMnUYO5l%2B%2FeN7LboDCH%2FuFo56gINibosAoBxM7x8EwcPeZG8%3D\"}]}\r\ncf-ray: a4766721b8fa858f-ARN\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":836,"size_decoded":2643,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e68667b973055d5f8b995198ead63693","sha1":"2a0fe5125a094a72f3547e05b576e671f1f3f141","sha256":"3c2c843b18462cb424cf10d53f38de3fbffe1048214abc9516af42b3ad02fd06","sha512":"416454726a3fbf6edf7daa23f155c9f1dd4e26f856102973183e1ac2c433e12318b1956e83adfa914a182257ab3fafbefb2d94da018ea44290affa879e517fc6","ssdeep":"","tlshash":"78018a4d9cbf42138d7c5f1611765b059d5a01d439d64a031a9bdb7f793a47043257a0","first_seen":"2026-09-18T10:10:37.744021Z","last_seen":"2026-10-08T16:09:03.771862Z","times_seen":8,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/297300-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.928Z","timestamp":1791475691928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/297300-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrKdFqu7gLV1av92q%2FXWbuwp9FrLbtMD3orDceezyPURfQyGCcYyto2E9GzKXkFMXTsw6SJ0NEm0tgIEuzh2uYZMYXfb9tFzOaneUjgaKu4UJaNDZuAaeaUDoU9nkwvMrGriaar6mFs%3D\"}]}\r\ncf-ray: a4766722995e858f-ARN\r\ncontent-length: 12722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12722,"size_decoded":14487,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb1be6359f6ff141d890d8909ed7be8a","sha1":"403c98b2d4337e76b5bdbb599d81c5b8c5b9b1e6","sha256":"d28c8319d2518af64abb14eb8772dc40b6b79f2ccff0df9c42dd986967dd453c","sha512":"ea083883265015f37d88b2427fed6d048d84d4bb77ff8253b61ec3deeb497d663003a2bca53f88a70d5b2feea8b42fd641c35789fe770751b5f509123fdf9d4e","ssdeep":"384:r/0GRR4qF+ebvhxp458aH4Eqrik4sDIka8FO:r/0GRR4qFHvhzaH4EIkb7","tlshash":"7942cf8171f045a712d7e6a874ac7e9721adf18dc4885e500683b49ef7f4ee6f6f0209","first_seen":"2026-09-18T10:10:37.77387Z","last_seen":"2026-10-08T16:09:03.77273Z","times_seen":8,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/60924-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.936Z","timestamp":1791475691936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/60924-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35Z%2BIbhBiC4%2FZEsyHv1Or1f83ysnjLx2vnh8zmcWBE%2F57R5vCL%2F9GxVqz%2F7SBbHZLCCULHoOzNTwteg5qSVR7l0qMujnMU75aITkP%2BSiB2XLPjnOdIn57r7nD27JwcXGRT7yoWr%2FnTE%3D\"}]}\r\ncf-ray: a4766722a96b858f-ARN\r\ncontent-length: 5040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5040,"size_decoded":6816,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1af10958285bbe9cc191a51cae37c003","sha1":"71980814007cdcdd755a7b22599dbdf0c5fb5120","sha256":"19df4a3680e424921a963cab3ed288847020f093646c8c131ecc7328b1dbb337","sha512":"84f5ee4b6e1107e4895fb0f862da575a9cabe91283612b71da8aafa35c5d9196740b1a54b9c8637b883cd2c789994e7f05a9f5da72ea484299fe9c29a7c172bf","ssdeep":"96:Ulh/WcXIoj+YY/rmAGGSJ2DG2fnWJ8DoRZASxp2PmxW/q1nGMuWjcH/:yYcX0BrmAGGb6yvEgtmW/qJGMuW+/","tlshash":"3ea19e3e7248784ad5bda939191618959643120abc663a032b0e5dc2d323660f5f37fc","first_seen":"2026-09-18T10:10:37.907593Z","last_seen":"2026-10-08T16:09:03.773618Z","times_seen":8,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/X_logo_2023_svg_be90b4b865.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.013Z","timestamp":1791475692013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/X_logo_2023_svg_be90b4b865.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFQiwnbaNyVzX1i9OdKYeG7%2Bi7zY4H6bt%2FkXyJRLB6%2B%2BoNhrT3wgXaImZdye7pclV1sHeXemZ%2BAQwoRrAFL7ZwIb2uy7zSnr3XsWgQ%2Ffl60YkOTGyvUBGlhAZ6P9LGFZIfbaDHOje3A%3D\"}]}\r\ncf-ray: a476672359b9858f-ARN\r\ncontent-length: 5122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5122,"size_decoded":6997,"mime_type":"image/png","magic":"PNG image data, 260 x 235, 8-bit colormap, non-interlaced","md5":"d590684a305efcf79b6a3312b6572d24","sha1":"52c7d5d799e277c44e505c73b82259284a667b1a","sha256":"650a4fbc20e9060baed34a429e69fd60f43eb2207d5f6e7ca4c6a3c326925046","sha512":"d05a65155ddc732f6dc234eb96d93d31e15d63dd4254810f7988a565cf32aaca766b7bc4c7de2292f58d97d2beea30a8a5fd3cb5bb74521018699cd90a482a0c","ssdeep":"96:ANLABduc5U7WEuz5FYHNONHh37iTik6oeOS/K5M2BfBMPm9ch/7J939x:ANAduUUruFFYHUNHJ26oVSymgBMe9chL","tlshash":"a1b17ee9c5cf5cbcf07be77d0b6e240091a7254555251529c6a388a2d4e9e121af3368","first_seen":"2026-05-02T08:32:39.449429Z","last_seen":"2026-10-08T16:09:03.774438Z","times_seen":11,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/seo-kit/assets/8412.c6f25ce1309c4a7e443e.css","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.463Z","timestamp":1791475691463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /seo-kit/assets/8412.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:11 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7osy2nAG5855E%2FCTPptXi9A9MjJqq5UisXoQRqNmXdrDk%2B7n8%2F2%2FvcZQq8adF0LZomzKzH%2BH6qjWRB9XHijIPfpMWxCkUuYmftJmFBXXgC%2FXi5Zu0sS6QcR%2BFmv4eZRo%2FK4oHxp6zs%3D\"}]}\r\ncf-ray: a476671fa849858f-ARN\r\ncontent-length: 759\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2494,"size_decoded":2684,"mime_type":"text/css","magic":"ASCII text, with very long lines (1679)","md5":"e15c39833bdce3c94e1cb683c15ef0d4","sha1":"350bbfe74bf780e318a937793a4b0e1e87545750","sha256":"3ce9684bc51f1a1a5eb6db001d9021f1b47466daf360fe2964a0b6725401bb9c","sha512":"23e469bbb8d8044aa0f8360decb56f16b28b2bd2d9f228dce01c7ba39ff75be20f24c7ee9eb91e12615f416e559c62563303871543c749b38b3d1d6aa9019c36","ssdeep":"","tlshash":"69511f7601375f2e56bbf57c8a68f6492140d006e9fb47cdd6249b25c2e3b9c02b071a","first_seen":"2025-06-29T08:36:28.642315Z","last_seen":"2026-10-08T16:09:03.775233Z","times_seen":87,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/tur","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.623Z","timestamp":1791475691623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/tur HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPD4a5fLzAvmXuaVjcywiDps7GLwq%2Blv9YWGDTVhx660uw%2FzAmqDdw8dE7DrmdPnVpb%2F7tz0u5IjqO9Oa%2F7tpD5G1n3voL6fYX5whmJxdyVQ8MkCTmsilaz32rPXXkIaZL32ITX6WYI%3D\"}]}\r\ncf-ray: a4766720a88d858f-ARN\r\ncontent-length: 726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":2495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c18b8afd1a531b413e2b9239325d736","sha1":"02957d77cd2f00d8e2b41fb34076d9dd85f16c08","sha256":"3a9f1dadd4ad6ea4bc60465febc1733776166e650501fda7b10385b0d121ae37","sha512":"93dcbf987893c92ee4673596623b13261475d78e11269d92639ce60a406d7ee5c604b96e841f173929585658729fb0a127a44265e72824e96755a0ed55a0672b","ssdeep":"","tlshash":"d5019900d3e3a364147c0e87e92d2d1c696f6d0499006184337789d0e775720e528f83","first_seen":"2026-02-13T05:54:01.269561Z","last_seen":"2026-10-08T16:09:03.776051Z","times_seen":21,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/n_am","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.658Z","timestamp":1791475691658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/n_am HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rB2HJkLZitHOAo%2Fna620F4Mv%2Bo1tIxMorxJEYBMWzBiGe0jin4Vk6wyE7ul5M3fzn5uMzX6dlCPHdaVE03GubMPf1FzHw4yZ0oDDneVhlBJZKdiufVB1LEJcgtb5kusZ%2Fn9RTOQjFq8%3D\"}]}\r\ncf-ray: a4766720f8ae858f-ARN\r\ncontent-length: 1762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1762,"size_decoded":3530,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"b3e23b74e5a16277c450ad778a88c5d9","sha1":"66baf4c0d8ddaccfd5579baffb7f73bd92e455cd","sha256":"aeeae36da30e46cdf439315b7c57f328ff841213424f07324d3324503171c5e4","sha512":"ac6923109b29381943e819c7f3fd194db821142ac4fc14615a1b68ec35fb312d945b110f2461c33761476323751e9ade966cf42af35c2dab7a29397e4ce138c7","ssdeep":"","tlshash":"0f31d897ff30099708bc2aa7c3086eca36169f712954e968cd1150051955fd0efb7367","first_seen":"2026-04-29T14:23:59.657583Z","last_seen":"2026-10-08T16:09:03.776845Z","times_seen":13,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.682Z","timestamp":1791475691682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 18 Jul 2026 11:03:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F52fsdBohD3Qi6RtFmCwiEJYiq6KDNkue8M%2BG3EKHv62B3ApeuF0CY%2BpOW%2F8UrfALqu7w9FtRuZEz7tmm0AAt7Y%2F1ib6SiSlHC9SXawHM2%2BdyjZ9D1TZFDn%2BDhF3LuxC8CZnQrPP3n0%3D\"}]}\r\ncf-ray: a476672108b5858f-ARN\r\ncontent-length: 5693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25719,"size_decoded":7575,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25719), with no line terminators","md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-10-11T17:52:15.685476Z","times_seen":4067,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/categories/arg","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.705Z","timestamp":1791475691705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/categories/arg HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3gsjBdICtD6S8%2F3wNUHprhB2Kt0gtb7%2F0ypxV%2FRQmpaeHG%2B5Jb5Rsl3Lh8Z4zTosI4plmc6Tx0Wftj85psrFMvYX4sp39WOJHpM13bGn6G0yqouquFq28Qwwk7tL5c5kNXN%2FHIfvzw%3D\"}]}\r\ncf-ray: a476672138c7858f-ARN\r\ncontent-length: 488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":2259,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"209baf1c11a932b828696a75e8ebcf1e","sha1":"e751abb637094c01708feb921a8fc0e5a9b15b69","sha256":"ed5619e6f99841eb6afd4cd3169db823fe1c0cd2ebdbbfef3d7848ecfcfb09f2","sha512":"d67741edf8d498faf9448e1bea5173aa384e628a36a07be182230cef872075502a927e1df0f72f25774dc6f43187689053e69da9e1581143b993218850b4afe1","ssdeep":"","tlshash":"15f054ea4e309f386f4799adfa28d7b3c54fd4fa7809f51850174160f3ba01425a6366","first_seen":"2025-06-29T08:50:22.736204Z","last_seen":"2026-10-08T16:09:03.778968Z","times_seen":17,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/503bff46-e1dd-4a18-9783-857f93993c58","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.723Z","timestamp":1791475691723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/503bff46-e1dd-4a18-9783-857f93993c58 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6OfLAeBLvPX2Su86EHNPuBvs%2BH8hYw7laCEhDNFsip28vZh080UG4B%2Br8poeZA22tLA1nalViba5FzacNMBL%2FRAtSWsFsIMTpxsoomh8C9btiERWfu4jOfJSwpHOnzDkfccLaIpcMw%3D\"}]}\r\ncf-ray: a476672148d1858f-ARN\r\ncontent-length: 1240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":3044,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6c8619367c7a60ca5e9deaf8ce9fa9b","sha1":"d99db489b45dbac7a9141176a891649343421b6b","sha256":"4dc83c663c3f3a9e897fb47454876e71488759ab9729732c51d3ab0c63cd6fbd","sha512":"b4e3a89032278e7a8460d16cf6cdfd5d1600b6b77772e65e3b3de8ef4a2a22d25e92cddc02a405e73552f3240cfdc810b50423c42a1616ed1a74914e7129b96c","ssdeep":"","tlshash":"fe21953b50df15d3a6ac1450e3ca7764652d2b43c6804e685607b54e8482089d9f9a2b","first_seen":"2026-09-18T10:10:37.81696Z","last_seen":"2026-10-08T16:09:03.779859Z","times_seen":8,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/227ec483-6a2f-462b-99e6-f08cf16fafd9","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.726Z","timestamp":1791475691726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/227ec483-6a2f-462b-99e6-f08cf16fafd9 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDmWhq9jx%2FioLgEHER%2FGX2N9Sc42T40iVcIrt6i%2B0fmV%2FHVDrvPfz7kZh6MdhsYG7u5qjee%2FaOrhrk52WXkI5vbWzrxaVcmHIHUxbZMsySvxhnMTeQMWWfPcne4BJ%2F69vLOSoney6t8%3D\"}]}\r\ncf-ray: a476672158d4858f-ARN\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1084,"size_decoded":2894,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d9d0611bbedb937996be4ccaeca640b","sha1":"7a385130a79676dabec77c14b15f8254cf1103e8","sha256":"a86a41e27c3e88378ea3713b31d7400ac62ff8295cb02e11e5634ba87271d65b","sha512":"300ed9e16a7bb4056cf2eaefc76db4de4dc90d6a11dfd563f8217eb48d8e2e720fb46d29e384723b88d71c37f755698fe4b1ab914e9e3383eb250b1b5029ed61","ssdeep":"","tlshash":"a911b91f51b5e897fb0e49c5f6a16b33d19b01a8c94e9e89e0b277a68259f00b448911","first_seen":"2026-09-18T10:10:37.978809Z","last_seen":"2026-10-08T16:09:03.780625Z","times_seen":8,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/5068-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.843Z","timestamp":1791475691843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/5068-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYoHX%2FJOzaAAX7Uf1YTSjAAl1nYhNcilv9SYTx8%2Fhwp5zuR62S3%2FLmFOQDoQavmKRWAuUmkI8VOMIqHJgOBB1oYnnfSMCqZlsh9678BrUP9q4HNp7QKHIttLKzJsDWLy%2FEtIYX5BFm0%3D\"}]}\r\ncf-ray: a47667220918858f-ARN\r\ncontent-length: 10214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10214,"size_decoded":11985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a490c482b06543f564391b9182e1b79","sha1":"0150e57a2f1479f2611a9591857dbd470cd9ce2e","sha256":"5626e923494d2b891b23edaabb02949ba71834d058b0905a6f7b880dd9b0ff59","sha512":"76c1cc79e0830a3c442eafa67e15fc80cf5230339a7a342803eaaac6f0096d441d7b9d50ddcebad7f98ba27f587b8b8df1a8aa08e0d36e6eb3180736c4edc4ba","ssdeep":"192:A0mFk3GsCV9Qr0FQpE2s9dk+GijdYQ5r77mEx/YeADXdHu4R:ik3oz00OpiSrK2Q5rNwtR","tlshash":"b122c07cf64a3e53c8604cbe78bdf67b4e2697412b68b3f0540660422295447c3aec8e","first_seen":"2025-03-05T01:10:53.881935Z","last_seen":"2026-10-08T16:09:03.781376Z","times_seen":13,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/06707039-7167-49cb-8d8a-98344fff49a1","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.773Z","timestamp":1791475691773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/06707039-7167-49cb-8d8a-98344fff49a1 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qb4yQt%2FA3RGswassSTcKEr%2F9Q3aUP5RmvOAUzP6Hzvxa94ZLxn3KxEd8wyNyJsy2HsioAk6z8%2FJerdYE3x79qY0q58niGCVnKGXMKeJGJa6hddRYu4AN77ZSCrd6xrhTb1pwvyuJ6M%3D\"}]}\r\ncf-ray: a476672198f7858f-ARN\r\ncontent-length: 408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":408,"size_decoded":2211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffb0f063d59dfa0949296c3e1dea03","sha1":"b8e1e7402e12323d451d4b4fc7e7219205c035e9","sha256":"2134a764714cab3004f6e5f019b8dab4bd1f1827ee1b28f80a0cd21106deb0e2","sha512":"37305139bd24610b505e7b8f8de690e4e828715708661d3f04aaffaa626febceb099864b33bc70f2161bd7dcd32dfa0a5fd78ae4a7b8656281dfb38651201737","ssdeep":"","tlshash":"fce0f12c528a1d6fda4b2a609e8c7e017fc74b1339a59e4000f016ab083d5a104b2114","first_seen":"2026-09-18T10:10:37.887896Z","last_seen":"2026-10-08T16:09:03.782133Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/79410-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.889Z","timestamp":1791475691889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/79410-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDv%2Bfz%2FEe7An3ifJWMVu8B4ePeYbTDwv5nMyVdOTdYsz9jCdMvKghnA0aX8DVIK2ZAD3Rl%2FNdApr0AW%2BmnTmJl6aU5Lucbvw0Bm4UNEUKXk88mvhjULkJdW1DIkhZdvVQzIGzsJQvZM%3D\"}]}\r\ncf-ray: a47667225935858f-ARN\r\ncontent-length: 10670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10670,"size_decoded":12441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"178f89f2f538d4b97c52b4ab18354437","sha1":"99bdf0a71ce3558e883b740b7002fc02f38ee3bd","sha256":"888ac2bc406161b72bd17e7ba228570bd7b08b9302837e7e011e1c4999595f4c","sha512":"c90e4847dce5e0052749e3faf1ab21e67d5ab02cfcdb413b11c8c4437db4bcd30bfa3773f01bcbc7856eaac522b5d3d50a7c40614c92e9c55aac6800ceef4dc8","ssdeep":"192:Xmir8oqGJ9n7teLqmT/s0hWY8HXx5NEgwd7C7eBy/zx8P5k7LLA+33DD2Jlqp8OS:Mo/wqUgXx5NEgw07eS1M5k3LL33DD0WC","tlshash":"2422af611e5c6519203186a98333ab284bef2113394efce162b66c6d3cbb5557ec2f06","first_seen":"2025-10-25T03:52:20.362544Z","last_seen":"2026-10-08T16:09:03.782889Z","times_seen":9,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-lucky-penny-2.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.900Z","timestamp":1791475691900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-lucky-penny-2.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcxN%2FriDIPca1xmpnOYHSnf97Af3nKEY5Ap9NpNCATKDUCDUspWe7HAabPU7QSO9aLmdiCHn1tF6E5I1iTWw7SPLWvIabPmX5CXiTst6jm%2BxOEmlHLjbI49Z%2B3tVR3DNCHtNQsG%2FtZk%3D\"}]}\r\ncf-ray: a47667226941858f-ARN\r\ncontent-length: 5942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5942,"size_decoded":7813,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adb694d07b405a442662d8c9c628be2f","sha1":"fcdf9aca7ecc63ffaa2191139784be88451a41b5","sha256":"e38c7d6bf074e0a54643149c6450afd90dc56d4f1918c138f6c19b485c714536","sha512":"9162c3dd598ac2ea5c60b8f5f92607784b02468b9884924b1e533beb100c30fa88a3150307a23002753e8786de44a1645a98e8b1fabf3571537efaf1c048115a","ssdeep":"96:S8k2XCRa5/nF/qJWOrPtQ0ALd3DS/zR8ghc+QeM8vceDT0shvMxpkWMqlJFR2:9Xia5/NqRe71m/zRHhcWTUeMshvapLne","tlshash":"bcc1bf6c81f61c0acfa39c00931bc24243ee9a1de96646906149ef4df77929cee6cdc3","first_seen":"2026-09-18T10:10:37.847103Z","last_seen":"2026-10-08T16:09:03.783594Z","times_seen":8,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-27-wins.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.904Z","timestamp":1791475691904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-27-wins.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efD2OEoHWLe2PREe7xikkAwnY9u4H0Thk1W5P12nhFeSH7uiIPXgnREGifP4uZJv%2FSWtlkNAhjvJWjznZgYBgGgJAZv%2BCGJwgVCkPjgpuGB9vwp3VTEnrcVuzpcunBeEsllIs8PPWDY%3D\"}]}\r\ncf-ray: a47667226945858f-ARN\r\ncontent-length: 3920\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3920,"size_decoded":5787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21ca8f0e20547c6a14c13b6d2b8323fa","sha1":"f20d1b91e64642d3540f08a5b7877b60bc9d6905","sha256":"4f56d68b19c43b8d9f8dfc3e13c7cf65b8ab7d58a88fe9119bae636fb3a7604f","sha512":"af11e80863c90295fe8c6b6603ee1cdca09725f242a20b053d5034a2cf62c126022267fff217469bd555efb1336d3fd96dbfae496114a56a790080ad2aaf1474","ssdeep":"","tlshash":"7e817d146090f0742ab0898725fa1ada41d094e71f03ffaff7434595564b25d7edb335","first_seen":"2026-09-18T10:10:37.92474Z","last_seen":"2026-10-08T16:09:03.784288Z","times_seen":8,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/champion-sevensonfire.png","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.918Z","timestamp":1791475691918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/champion-sevensonfire.png HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 16:08:12 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cI%2FcOFwAPc%2Bsx66dTciWjmPt4SBPD%2FZxvzknStgP64%2BB6YTHA9CDSDiAHbajXPM1Q2M72oxxoAFFR29PDxiYKOmn4oUY0iUQ03x9ofU8Dk0LwGffB9nP5tbEDOt5BL2%2B5GsPCVxPb2c%3D\"}]}\r\ncf-ray: a47667228955858f-ARN\r\ncontent-length: 5022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5022,"size_decoded":6895,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d30f656e2eb752cb00b945b0eb532e24","sha1":"b3b8b27120f41be48a933ac23185e1596a0bd89d","sha256":"833065f5f03b44f2f76d604cb0c5bf4c77a1d8dc3202f0b3a77cbda987ae96ae","sha512":"40fddf9254cbfaff1f613f837f1fb3c5cd6d9c39de4ffa15c7418792b1613db5c04686c324a51501a68886d04178270f2ba53d87952d0b4fc60b525450f6020a","ssdeep":"96:jU1LOyarE30lulp4kIl230sZs1qHMm344H6bwY3tOOUSyQLFf4Urv:SerBclp4O3DMmFUZORSBxgo","tlshash":"6ca18ccd67a47d3321e2a0a306824f29caf605d604ab7f67ba3515a0303b9752c5ebb0","first_seen":"2026-09-18T10:10:37.855474Z","last_seen":"2026-10-08T16:09:03.785051Z","times_seen":8,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/254010-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.966Z","timestamp":1791475691966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/254010-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dRooYUiXWXtSU5dp2B9Tzkx7Rcq3YzhbhaVnl3Fabxddk6b61r1J43d2ukKwY1L3XV8%2BsOHH0ytC7IxAes0VWeqwVI2UxjoTQAhIMqgsFwcllQncW7m3GLr4D4H%2F9pnPb7BC9XmRpA%3D\"}]}\r\ncf-ray: a4766722d985858f-ARN\r\ncontent-length: 7548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7548,"size_decoded":9314,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0953e03f55f66bfec28a31c31c8a7774","sha1":"66b71cdc3223b1285d17789fdb2749e4bbbe5721","sha256":"d8dd01cb419a6789ea73ec9b3637399bc850de0c4a6c33bba5a8caf0023ff67f","sha512":"9befbc284ff74da1898136f7bc85746635ebe98f2e7a991a7b8d69c35754c47847f4871c01abb07cd89c1335b973ccd884d66a318d7328539695359e3cb18ddb","ssdeep":"192:H4+8BjKxbufPwwt3cIcjpVCA4goG+bwUQJsfwTTgNlCWrMd61:HX8BjKorgpVDewUss9XCWrM0","tlshash":"bcf1cf421eab4b55114e5d93e87cb55e0fc130961457869511dff02df08cf0abdb8a5d","first_seen":"2026-09-18T10:10:37.735356Z","last_seen":"2026-10-08T16:09:03.785811Z","times_seen":8,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/content/uploads/icons/PRJ4/prj_footer_instagram.svg","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:12.006Z","timestamp":1791475692006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/prj_footer_instagram.svg HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 16:08:12 GMT\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vV0LVBXaojnMJlEWYgFbuLTsCjlS94fIhqaInhrWSoqkOsqwAH8NRgR6WNrtPg74VM2NBcrNJy917O2UyUeh2xuXwH65f6nIUY5SxJbjUN%2BcImrWPgN1zjEugrkdrrOzPh%2Bt1kFhzJc%3D\"}]}\r\ncf-ray: a476672319a8858f-ARN\r\ncontent-length: 1001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2438,"size_decoded":2917,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"693dd7344c206fd4526e622ba1c37db7","sha1":"a0a7f37b9ceae1505707aca61faa1c15b324354d","sha256":"3408902c6a0ebd9906022d291b0d13ec1e1a417ee4ba499dd4e3e409adc00edc","sha512":"4568471113212f6aa76d303055d533e27fad1bf4bce791c03aad187e7cef47b5c7e6285bb465ebd35475aeda6e4fc138ff3903c2cf40dcde777b321889702778","ssdeep":"","tlshash":"724132da5724129dc0cb953fef3dadb2131ca1ba3ae5c60d59be472d44034d2ae5b580","first_seen":"2025-11-13T20:36:08.104105Z","last_seen":"2026-10-08T16:09:03.786562Z","times_seen":15,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6e4f1ef6-7272-4496-b0d2-b24cc7b17328","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.741Z","timestamp":1791475691741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6e4f1ef6-7272-4496-b0d2-b24cc7b17328 HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CnrrEU9I98fAScGEDgYQPfXtmNVyCOhsHGSv3qeOmJS9EwRzAeXakE2LoGaKx21o5RxLBSpk6%2Fkts2VpEX%2FNLV9SmgfhzhyGaVZ5VwvB0k55s3hGl56BNBbafGJ1SgChENB5ZaZf4Pc%3D\"}]}\r\ncf-ray: a476672168e1858f-ARN\r\ncontent-length: 19644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19644,"size_decoded":21447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9538926ebd36a8811fd8e0771e3f0e1","sha1":"7fa1e107ec545bd73399bea98939c774995c743b","sha256":"057abdc8bfbdb1cabd84f03d07d114a0b53772099d3ac664722bb3cf19d6c8ad","sha512":"65cd3764f26851c9c328e7ad6cfc7cacbaf099992dd8a93ed23c202de5ad70231e57c652634913b2c89d8173bc42fc663608d486aa71470c4b11b7d2d8d5b46b","ssdeep":"384:Iq4u8GxLSBzaafdNi9JZT9u6h+vurYGnDFPrOpCCDQ57L92EEsfpn:B4u8LBbfdQ99+vdGn5TGDw70EEsfpn","tlshash":"9292e0698380fb85d720bc5fbdb74bd298e4509da95d7c23dd442e31c2a191ae10fd39","first_seen":"2026-09-18T10:10:37.934193Z","last_seen":"2026-10-08T16:09:03.787443Z","times_seen":8,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/83616fa2-298a-4488-b7b3-e4213f8de5bf","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.785Z","timestamp":1791475691785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/83616fa2-298a-4488-b7b3-e4213f8de5bf HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8io0A0U4SsrrX98Gyuh8BTt5WN0VoYa1RkgVI4pOAArBUOm4Lt9F8Ua6FSI%2FHSra3u8GmuvSjNX4PSSVF662g6B%2Bu%2BYGF8An4yprx%2FT3FQSFlDzKaQSRfpQg%2FayurET6Vo%2FW0rQQ908%3D\"}]}\r\ncf-ray: a4766721a8f9858f-ARN\r\ncontent-length: 790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":790,"size_decoded":2599,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa1cdb8c6d6da8ca7dd83c5f50f85175","sha1":"07407efbde64ad8d37eb784e5d2598802618159f","sha256":"7b79091741cdefaf015a7b23484296c13ef4b09b03bc720ddf44bc38c096f5cd","sha512":"7a8e52a574bc4d7a7eb5e0311b791c02f10beae05396a9aca18aa47c69b04b8b874a76e71980b694f3352a2b9e1fb2c4fd7c2b269f7b0e0de97f5293e48070af","ssdeep":"","tlshash":"8b0175dddbc464cbb64a55153153fda8e05abb097010748898b2cea25d23933f02b77d","first_seen":"2026-09-18T10:10:38.037207Z","last_seen":"2026-10-08T16:09:03.788291Z","times_seen":8,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/2152-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.866Z","timestamp":1791475691866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/2152-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heH23%2B%2FOPM2PrOHqMjtpqdPYROUNL1uWQRJU1sN2TNW3daZgK48VRfyFfc7Y8HvfMi6b5ycjm8ZPM%2BzMpJtdoc%2BwoJ4Iu7e5CcdOGGJcIHhch8KGu7LzSdpctcScAG6DNApf%2B3n3V2s%3D\"}]}\r\ncf-ray: a47667223928858f-ARN\r\ncontent-length: 7722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7722,"size_decoded":9494,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d43298e7174b3e16b0ae6f90a0646e38","sha1":"02d51025912d35545ad90638e87d834de22049b4","sha256":"e17e0972086d633f3977ef3851994441be5dd18b46ee5c362f1975edc5955997","sha512":"cf401ef308a5485a1eee800e7c354ecab00324505a38cbf9e4342690d89e22868c78bf7f87c79b13a6881d9f5ad9757af05b793363b050f10c66644179af32de","ssdeep":"96:bo58mPxnUcXadEh5UHyJBuBiJa5fZZqpyWf48/Ecjx/aSOGaGm0hemcXZJ80WTUV:tgnU8addybuFt7WT/jtaS7UPZJ8R3aeE","tlshash":"c7f1bf65030e2b63eda51aa5bd74d39e01059fc784de4d913cd728ec0ad59023f347c5","first_seen":"2026-09-18T10:10:37.865707Z","last_seen":"2026-10-08T16:09:03.789187Z","times_seen":8,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/1429563-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.919Z","timestamp":1791475691919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/1429563-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:11 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63zG3U8uL9I0XsW3zTrRnxzORFljSpiQs7ndK%2Fxb6yapl3EPJDbUjXBv0PhSSn8ktVRa9rWy%2Ba6T2bkyaeeP76d6iS0Oz9xDRTJcp%2BSTz0%2BScNXU6asrdo0HLWELJOuE3DRUKCEN5x0%3D\"}]}\r\ncf-ray: a47667228956858f-ARN\r\ncontent-length: 4340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4340,"size_decoded":6110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3cb7888d02bd01e92dbb7b29f6ee539b","sha1":"3863852c77b241a3de0e23a8a683212d2cf1652f","sha256":"f1e5daf1aa3ab8fe3b142733ba0d4c83b8084e566da160bfdd417951c6117ff9","sha512":"23a75033b30f429e5b9ff2ecd9705da2982342bd814f33e5e3c6ace6fb8f50be3de30f73e688c3efc2913a9d5ff3501fb60a952919a1c0ae7d1498892996a523","ssdeep":"96:XpHR8NKkr6ku8zQmD1bGFcS7QTZPHJGTQ25lr/F5ojoUG4QFjeZugfIT:Zx8NKkr6UQqbGFcS7QVHgxx5ou4QFSZQ","tlshash":"46917b2a6f1bc31e0f8d1222840f48a10c0dea015d998c1692fb34d16d6c83f86c76db","first_seen":"2025-11-25T06:07:17.913525Z","last_seen":"2026-10-08T16:09:03.790029Z","times_seen":11,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-kazino.com.ua/taxonomyicons/competitors/139099-164w","fqdn":"parik24-kazino.com.ua","domain":"parik24-kazino.com.ua","tld":"com.ua"},"ip":{"addr":"172.67.155.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:11.944Z","timestamp":1791475691944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-kazino.com.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Oct 2026 19:49:09 GMT","end":"Sun, 03 Jan 2027 20:48:52 GMT"},"fingerprint":{"sha1":"22:65:FA:DD:1C:FE:C8:64:BD:7D:99:3A:B1:B3:93:89:5A:38:49:97","sha256":"9F:C9:4F:D2:47:76:AF:42:E6:DE:13:4B:76:8F:A5:3B:9D:CE:EF:63:EA:7D:D0:96:F9:AE:BE:73:E4:CA:20:34"}}},"request":{"raw":"GET /taxonomyicons/competitors/139099-164w HTTP/1.1\r\nHost: parik24-kazino.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 16:08:12 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 05 Jun 2026 11:31:14 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrcYuLaOk2xehwSxZKNFxkaVvm9O%2BSFwaTJlDMTqSzaeolz1NIOekvixkLnbzHu4sactYVEUNttZVEKrtZZ1cI4R489RP3kukUt1U%2Fg45b1sW0NB6Xy8%2Fq6T6EBdKViu3WXqW813EK8%3D\"}]}\r\ncf-ray: a4766722b973858f-ARN\r\ncontent-length: 7548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7548,"size_decoded":9316,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a688659df9dbedb3228d2aea48cc222c","sha1":"996a7f98610998db855ec4de7b99908b5f9c5c24","sha256":"86dd7c5d8268b55e4aeab16d2704f15c27e23990d551b3cb6d54c71b7f7b7640","sha512":"65ea4c61a7004f06c7677876ea3f727910b891e499db41491688e5d333f0d46f38e4d7a831a15c718fd02bd0dc55f33a7e375393b075724818d3751fcff3232d","ssdeep":"192:9CKwc9Isfa6IMP8YcgHajnFXpoWBJYdVlfhmvVOzNjrF:dhfaZE8YcgH0eW4dVyNOb","tlshash":"2df1af3e69814a451009460abd64623ba467ad27b0cdbb0466fd16bd2ff13f07c6e706","first_seen":"2026-09-18T10:10:37.878052Z","last_seen":"2026-10-08T16:09:03.790812Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-kazino.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/?h=https%3A%2F%2Fparik24-kazino.com.ua\u0026p=%2Fuk%2F\u0026r=\u0026sid=null\u0026qs=%7B%7D\u0026cid=62041312","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-kazino.com.ua/","date":"2026-10-08T16:08:13.568Z","timestamp":1791475693568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /?h=https%3A%2F%2Fparik24-kazino.com.ua\u0026p=%2Fuk%2F\u0026r=\u0026sid=null\u0026qs=%7B%7D\u0026cid=62041312 HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-kazino.com.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 16:08:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\nx-vapor-base64-encode: True\r\ntk: N\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 16:08:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 03e6d33c756fa363e36102d9b1a7753f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":594,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-10-11T22:57:36.223753Z","times_seen":72182,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":38,"connect":4,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}