{"report_id":"6904a4d8-a261-4bd9-8e26-68a330e2a893","version":0,"status":"done","tags":[],"date":"2026-07-12T20:34:13Z","url":{"schema":"http","addr":"para-dex.net","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"para-dex.net/","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"title":"Paradex - Perp \u0026 Options DEX | ZK-Encrypted Trading","dom":{"size":13983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435)","md5":"6dc38e2bb2e7a3f18dcf02b139ee9db9","sha1":"78d9d00a033f0125e48754ac841d93d76b0ef0ad","sha256":"b9ee07510f2a94fad7a161dd41e711ec5c03c8010e08092ad9d3a194094a1649","sha512":"b9c2088a40ab646621ada65a784403b7b5b2426394450e4a70124fe18bc65ba8f8878579c04598a351733fc8bb90e99a4f1685efa7d6824490f6734e2ccaeb5f","ssdeep":"192:6iZojfTNjlSzpxAnfjLrMmwOxtO08PqrgHSleQaFzIXnU:tQfZR6pxAnrHPwOx4qr0DNEXnU","tlshash":"2c52a427a3d113d5064342a6f1c09ae9fa3cc95fa31c21a9b58e428c87c1cddd6bf5a6","dom_hash":"domhasha60808271503259464e70a08a8810dee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"para-dex.net","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:34:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"para-dex.net","ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-07-10T12:41:56.058103Z","last_seen":"2026-07-10T12:41:56.058103Z","alert_count":7,"request_count":7,"received_data":138335,"sent_data":3464,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"para-dex.net/img/paradex.png","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:45.935Z","timestamp":1783888425935,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /img/paradex.png HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:46 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 20 Jun 2026 13:19:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a369359-55ca\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21962,"size_decoded":22240,"mime_type":"image/png","magic":"PNG image data, 618 x 323, 8-bit colormap, non-interlaced","md5":"168e25e3bcaa5311023cf11b424c3b32","sha1":"8309002bbdfffc8bb8efa022bc1ce7e54103492c","sha256":"12f334dd31ae3b3058deb62739df7714a5be0fc23ae6cd7f98f2122c09393122","sha512":"7e172f0fe7504470bda300d3696ccbb6dcdd9e82c869dbddd4d5dcd2a4c9e656ffcb0529b660e16658d5cb71ef636dbe39d44e270879f63b1536dc874e9e395e","ssdeep":"384:r5Be30YGqmLcYkOeAejqQWhLJa6W4I9IKTBXyjU9XjtgDCQn2rh4I5dnricb9jzt:r5ALOVEqQWhVOLcjUhh1r9dnri8Rzt","tlshash":"b3a2e1d4143e87a4af67521418443ce92e8d3b14d31e7478fa7c589e8b596eca1e2bf0","first_seen":"2026-07-10T12:41:59.994816Z","last_seen":"2026-07-12T20:34:13.717818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":135,"dns":0,"connect":144,"send":0,"wait":303,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/img/paradex-starknet.jpeg","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:45.939Z","timestamp":1783888425939,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /img/paradex-starknet.jpeg HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 20 Jun 2026 13:19:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a369370-8272\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33394,"size_decoded":33067,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 739x415, components 3","md5":"185953752c2e00d0eaecbaccf5db2628","sha1":"345562d35ed67f5d2cec6671defab4345e87137a","sha256":"ec2ed276f64bc77829dbd4a06ac1e2f9601f1b2d33824bf07a171c20355bfcb4","sha512":"9377597333055333e082cc331278eef37e6c45b64f20a0669a82e70330e06c534080ad6a0b608153b6e4467f366a624854906247887c2be570b63bf7984cd375","ssdeep":"768:ghfUOgGssIGoiB8gbkwLd58Ks2vXuqEjAr7uBhKbHI0HHzA+YFn:W8OgGsTeB8krJyKsSuvp0H5k","tlshash":"4ce2f2814c869c83ce90b4b7d53507a9f52e2648d01ce9b7d7ab115248ecde7afd0d1c","first_seen":"2026-07-10T12:41:59.996389Z","last_seen":"2026-07-12T20:34:13.719005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":134,"dns":0,"connect":146,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/img/paradex-dime.jpg","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:45.941Z","timestamp":1783888425941,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /img/paradex-dime.jpg HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:46 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 20 Jun 2026 13:20:13 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a36938d-9974\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39284,"size_decoded":36495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x480, components 3","md5":"622a8a320065e96934936bf1b6ee4786","sha1":"9a3c56c6e4aac10ad3018d3638c0d439a961938e","sha256":"9026b17677b4a07ca98fbfbd85906322f9c3ba4e0884ebdfa29fe90d1ac2f57b","sha512":"88022db86e9ef087310edb936f2df2dd688fa4d3cc06deeb21905551d09aebd5bcad2615a8f61b6af0366081b984cdd1685b0ec52b7399388adefa6646905a1c","ssdeep":"768:CUT9n4oLsq4Fy09AAuyOV5MDVy+hgx/U6kIlwcf3B0yUwQ0/:lJn4osF5AMC5MQZ5Ua6cfB0yUI","tlshash":"9603f13f7b7a54c8f8ae1ff726c46b690eb170595e9ee747991c061b3308ac496200a7","first_seen":"2026-07-10T12:41:59.997905Z","last_seen":"2026-07-12T20:34:13.720155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":134,"dns":0,"connect":145,"send":0,"wait":149,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/logo512.png","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:46.376Z","timestamp":1783888426376,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /logo512.png HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:46 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 20 Jun 2026 13:18:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a369308-5929\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22825,"size_decoded":21644,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"837591e50de28c8142d64cea7ceeda04","sha1":"4e1a8732c7ab7f5272a01cac6b0dfe4a629b171d","sha256":"85ac5b7c7c9499657d0b336b7dea39d175e43d7456452ea133d8759d2d3b5db5","sha512":"7ec5ec3e6e7cc71564b9f0b8ff35ca31a53f7b98696d1d3d9049102f5f013c1d0e82c5c5ee21f788c892022f2c200b7d6772c1dafcf5337410a73c0035e0fb2f","ssdeep":"384:wEhfgZ54cJDENLPbdlBqoAby6aaVT2iA+/B5tGKTZ4Pp0CSyccU7cy4kvzUn26:w1Zb0TbdNJi3/B5txGMpA+zX6","tlshash":"b2a2c06bcae00d3bc6304753589b1b325d75ccef5e3c2d2a0aedba124b48bde0065d69","first_seen":"2026-07-10T12:41:59.999233Z","last_seen":"2026-07-12T20:34:13.721608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/favicon.ico","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:46.378Z","timestamp":1783888426378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:46 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 20 Jun 2026 13:18:00 GMT\r\nConnection: keep-alive\r\nETag: \"6a369308-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4529,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6ec0a7b9d0cc7bd1d48b72bd6ec57c8f","sha1":"b10c3960c78e6b8fb2e228a57a1b287b80066650","sha256":"e51f6bb461b18e6db9453dc9a669af600f00e603e53f3027383bc508834ea73c","sha512":"6ac91c9ef2d7a7cc018d07a9bacf779b054e56b7c0ab66299c25e087fef998eb44f1e096a0b11a7cbdd166c72d24fc6799fa94128623751ebd4617e806e7d2f9","ssdeep":"24:sutBBBBBBBBBBBBBBBBBBBBBBBBBBHiBBBBBBBBBBBBBBBBBBBBBBBBBBBBsiBBQ:TTSUoeSCfu8xbOkuqj","tlshash":"1491c4989e0d0c7ee977b0fc8003b2dde1f11df01d47f9859907f87ea81a9696627902","first_seen":"2026-07-10T12:42:00.000499Z","last_seen":"2026-07-12T20:34:13.722729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:33:45.033Z","timestamp":1783888425033,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5005\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14000,"size_decoded":5216,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435)","md5":"f39b3eba05794c37728e3444de639da1","sha1":"f8bccdb69e81d7ec4161dbdfcaa11758e2c8dd34","sha256":"092fc1091b72a51d3f5660e1f427231e364debf29217dbe0931b3a0cd27f1eca","sha512":"a4771cf1a2bd92f19a5006298ab022b92c812295b892309876704ff00bea5ffc25f15d788640fafb0bd82b2ec9eb6e94201375809ba35bd92daf62d1b47919f4","ssdeep":"192:AiZojfTNjlSzpxAnfjLrMmwOxtO08PqrgHSleQaFzIXnU:rQfZR6pxAnrHPwOx4qr0DNEXnU","tlshash":"3e52a427a3d113d1064342a6f1c09ae9fa3dc95fa31c21a9b58e428c87c1cddd6bf5a6","first_seen":"2026-07-10T12:41:59.992585Z","last_seen":"2026-07-12T20:34:13.723713Z","times_seen":2,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":67,"connect":145,"send":0,"wait":157,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"para-dex.net/index.css","fqdn":"para-dex.net","domain":"para-dex.net","tld":"net"},"ip":{"addr":"104.168.144.192","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://para-dex.net/","date":"2026-07-12T20:33:45.930Z","timestamp":1783888425930,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"para-dex.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 23:45:27 GMT","end":"Sun, 04 Oct 2026 23:45:26 GMT"},"fingerprint":{"sha1":"1C:48:55:12:4E:AC:55:96:6C:32:7C:DC:57:7D:2F:61:30:1F:1A:01","sha256":"66:61:FA:04:5B:23:0A:65:E3:EB:4B:1C:15:9E:A1:75:B1:CF:F4:C8:42:12:7D:92:1D:DB:DA:2B:78:3A:E3:12"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: para-dex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://para-dex.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 12 Jul 2026 20:33:45 GMT\r\nContent-Type: text/css\r\nContent-Length: 891\r\nLast-Modified: Sat, 13 Jun 2026 10:46:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a2d34ed-37b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":1128,"mime_type":"text/css","magic":"ASCII text","md5":"fc292d5915cd0c5851a810304668b405","sha1":"0f0fde51f99d45a7609aa56d738b78db321e7070","sha256":"dd8804380b425f810e94763b542f6d5cc0f3d67c3fbd9d591bd00bba36c852c7","sha512":"542c7905f76fdb3810ffe9cdced9736caae34ae88de282a4959fe6f456ebebac866341bac5425468455e1abb9f2ce239fad78e6a9f6093061b20e9ceb3ba6c29","ssdeep":"","tlshash":"0d1116555ee61809c4c6805179ff91c0728f180f890ec61b7e9db308df4a22005b3a94","first_seen":"2026-07-10T12:41:59.993729Z","last_seen":"2026-07-12T20:34:13.724761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"para-dex.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}