{"report_id":"6e667a45-2497-4b23-a3db-73c50a188355","version":0,"status":"done","tags":[],"date":"2026-09-18T08:28:22Z","url":{"schema":"https","addr":"parik24-bonus.org/","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"parik24-bonus.org/","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"title":"- zhashkivia.com","dom":{"size":126757,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12374)","md5":"242f612af232b3e388059abeffc2a646","sha1":"a5bd08b30a2d0a0df0e2f027c6e9944fbd8e65b2","sha256":"32fb1231f59ea9814f7254c87e847c0dce4d827f8d3f416ecb3bfef51a9ce7ca","sha512":"cdba4f27dd55eed8f0e8aa35a21b077e929e67f0b84a893968d75b77f46722d246e0af1dde61bf11738fa4fc56c68f3723b3baccaa0406735761536bc329dc5f","ssdeep":"1536:kfyp/gMK28biVHJHuJYFzKIIZvTxGdgsIyrWVVuRO:kq11uJYFuIIZvTxGdgsIyrWVVuw","tlshash":"86c3e773c6d900ae7636c396d4247a1e76e4403ae7429b5872b93bbd9fc64f5023728c","dom_hash":"domhash1fd561caa89b95c2deb93a51a3bc98c0","first_seen":"2026-09-18T08:23:49.726297Z","last_seen":"2026-09-18T08:28:30.326657Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"parik24-bonus.org/","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T08:28:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":4,"received_data":136850,"sent_data":2228,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parik24-bonus.org","ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-04","domain_rank":0,"first_seen":"2026-09-18T08:23:44.923712Z","last_seen":"2026-09-18T08:23:44.923712Z","alert_count":147,"request_count":49,"received_data":1361841,"sent_data":26699,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":23024,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T01:38:26.725956Z","times_seen":1109234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-15T01:38:26.479691Z","times_seen":1012280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/floating-header.js?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"277cb867797296a7d19a5e39ba44f8b9","sha1":"6d9841ff0269c70604106c6b29a54de75c49167b","sha256":"739ab07e7a416a76e106573012a9b6d08a7da546d0f5b75eb3e1914c0a738eb8","sha512":"b819996bf376d387e111b3e95c64b2972a9a938438dff57c5bb30a8c87b18af42979f42889fc99106d840549e79f8c46b50a5b0614b603cc1d9e44f6eaff6491","ssdeep":"","tlshash":"c0e0ab09fb1be06e35bb60c9c83dca10c72720d712549091b9485c2d3b401be2671ccd","size":415,"data":"","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-10-11T22:59:15.984081Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T01:17:17.11383Z","times_seen":15177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0025d45c917e05da5a9524ecb3a0be5c","sha1":"14a3eb110606f1f21970bc3f46b722512f05ad8d","sha256":"de6a280187f35a8ed90567418aafe24eeae8e60a3a83ea0a7e18f7c4e168529f","sha512":"b910c358affa2c3d5b9911582a33e8c396e30f2df470ebbf947241744b79a460fb31aa4ac30d3a95b5ab2588950ecc85cba862cc9fdd8e83d131a2f9e2dbc457","ssdeep":"","tlshash":"9861af49b32aa05f78ffb294d53ee544db3e401bc10055a5bfbd2d9c370562c22b2a6e","size":3189,"data":"","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-10-11T22:59:15.972643Z","times_seen":450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"parik24-bonus.org/wp-includes/js/wp-emoji-loader.min.js","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96d259878a4577e26590d326c0c2e44c","sha1":"462124c9fcbfe00b35353c1d2fb68366ea5af892","sha256":"a14eed08b5b0e982e07e6f3459fae73e1b73a5a571109241742ebcaa6d158b78","sha512":"9be7b17760daa4fa3d27c865aa1e2f24be92c8ea02ab6657e7c26c5a84297aab9841dbbe189035ee57a3cbe901540d8a6f89b2b8ebb135f3cfe126e20ec3e1d7","ssdeep":"96:IrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJR:8s7NAME0+eWjQvJBk","tlshash":"3191a659eb7938db33fa01f2653a0d47eb604436e784d038c9ae631424b1893c375a46","size":4580,"data":"","first_seen":"2026-09-18T08:23:49.78972Z","last_seen":"2026-09-18T08:28:30.37555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://parik24-bonus.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"warn","text":"jQuery.Deferred exception: can't access property \"top\", $(...).offset() is undefined@https://parik24-bonus.org/wp-content/themes/mercury/js/floating-header.js?ver=3.9.11.1:6:47\ne@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:27028\nDeferred/then/l/\u003c/t\u003c@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:27330\nsetTimeout handler*Deferred/then/l/\u003c@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:27594\nc@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:25304\nfireWith@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:26053\nfire@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:26089\nc@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:25304\nfireWith@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:26053\nready@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:29112\nP@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:28884\nEventListener.handleEvent*@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:29264\n@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:220\n@https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1:2:225\nmap[type:undefined]","filename":"https://parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","line_number":2,"column_number":28648}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.151Z","timestamp":1789720062151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24-bonus.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:18 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 165384\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":24477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-10-15T01:21:23.897427Z","times_seen":13734,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":95,"dns":32,"connect":0,"send":0,"wait":108,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/dbcc1a56-abb9-4535-b821-04c573f5239d.jpg","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.374Z","timestamp":1789720061374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/dbcc1a56-abb9-4535-b821-04c573f5239d.jpg HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 15:18:34 GMT\r\netag: \"6a170b4a-cf10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEKNUazcZo1Z2o0Rt3qDy5nr2O3s2g37BTaxXZgVpZrbv4Sjv%2BUGj02t%2FsQFQpgrKUvMNMtsSzrtnoUDsjqf0FidsknXQxt2JZaVrGYxRh7cCnNl%2BqDXmdZO%2FDT3h2Di1p1LDQ%3D%3D\"}]}\r\ncf-ray: a3cef90fbf2a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53008,"size_decoded":54100,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x525, components 3","md5":"bc636da5170a1f927ff5579dac2e878c","sha1":"5197931df0902439c6bc17246569e2b65f5d9d48","sha256":"b59c09604a9c937a8e88763e50fc815171d3a181335a5662a63936800b90d3f4","sha512":"06ed546cb7d159788e068df224f3735c3529bcfc25d32815d234f08997e76773fbacad5370efe616b77a82ed1de8ec059604ad146f219898b66a49132708c54c","ssdeep":"768:Cs0zTSk2BszwCmporCfmhf3fGRNrggaVbRLVP9xIckvIkx4vqD+B:GzwBszgpoefmVORNraFL/xBAIkx8","tlshash":"8833f1a6b2235c46e796fbf982835100e40b95adcfd3fe9c4c7da87496c5bd9b271200","first_seen":"2026-09-18T08:23:49.751478Z","last_seen":"2026-09-18T08:28:30.330263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.149Z","timestamp":1789720062149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24-bonus.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:18 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 165384\r\nlast-modified: Wed, 18 Feb 2026 19:51:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":24477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"f92ee388273b5931a1b09a41d3906a3a","sha1":"d38fbadd1b1ceccffbfb43f677698f3a7112f0b4","sha256":"481dd0c01e6bbb129fd147eb5d8571016193cba141c4627ca60ceabdb5a46ea8","sha512":"a3a042b0a845b46de4c272bca16e48d5f332386dc3d4e6e8cf4ebc63238950c265d5a1b3955d257ff12fa3ced224ff11818385256786612130bd35dbd5fe2033","ssdeep":"384:GnNWef/I43MJlQUfZZgeoBpKtbPjHdLE+igeN/T67+mFirVAfPdixSNCsugG3iMF:GsCvIOUfZaeoytbZLE+i9pT67+/rVSdO","tlshash":"96b2e012e6c8bdf6e0c1093e25317ecb298fd9eba8724c624c1ab95d339257c5819d4c","first_seen":"2026-02-19T22:49:57.285177Z","last_seen":"2026-10-15T01:21:23.897427Z","times_seen":13734,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":96,"dns":34,"connect":0,"send":0,"wait":108,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/plugins/aces/css/aces-style.css?ver=3.0.7","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.124Z","timestamp":1789720061124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/plugins/aces/css/aces-style.css?ver=3.0.7 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc27-1e924\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPmqF6Ui%2BwhUTy8T4Ep%2B1Tc3ITuBemwoHhn51x5zpUFX14eyJT1by18AcpQDq4vmL2dr0pwedP%2FrghbphumU0smfgjU0FlT2PjoClJsi3SV%2Ftc2ol%2Fcrm5B430dnRKkI8Ns9jw%3D%3D\"}]}\r\ncf-ray: a3cef90e2f05569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125220,"size_decoded":13505,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"4100cc3d0c00c26a14870a43a33cb569","sha1":"75ecf358e5a6f0179f1e78b6501ba5f7ade35a0c","sha256":"7dd80c10f495dfb4b9847b8934dfc44ae2201ceee224537fbcf052ea70dabf42","sha512":"ccc9a1aed16bf9960b62d3234ff1bff4e9a75383260bad131e68b8eba4daee9fd82195d589535aec1d707d134924585806afc6c011582f87a4bf46dcaacb921c","ssdeep":"768:eEEzwQgd633F/lphg5SOpwIdHianzmXXb/7JU81CzBtOAHrVhjg6quZH33JDJ2s+:50kWEouasbmWdwey/","tlshash":"49c323fdd614028fb93baa685ff917749fb400d28e0216ecbd76260487679fc1a63349","first_seen":"2025-03-29T20:01:02.912993Z","last_seen":"2026-10-11T09:36:05.037157Z","times_seen":195,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/nolimitcity-duck-hunters.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.393Z","timestamp":1789720061393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/nolimitcity-duck-hunters.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:14:54 GMT\r\netag: \"6a1742ae-32ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrQHzNrjau2yxGoFqBECQbiBna1hXdk1ZNCGDrZ4s6YCYaaQQaaGGM%2FjaM6qFFgxON1w8gDflpUQjHxyxKB2oWuHbtgMsGvDo3H4cwye59VZEDXQ5NbWPLdOsddWK4DUWC0mcg%3D%3D\"}]}\r\ncf-ray: a3cef90fdf3b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13039\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13039,"size_decoded":14124,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"fd26bcc0ef8af34f32ed73344fae9729","sha1":"98a8ddfc6520044e3dd3487e4c89a9b35a688ab9","sha256":"99651a1e0a68e55c9e16c97e59eb4eaa6405d16b2366b5612ed86516207e17eb","sha512":"146d855e1f57ee228f7aa98a18166e993231cc53e89ebc60da0af67333cdf45e911357be77ab3d49ee665befb546014fa12ec0fe026bafca134334dd119e9f51","ssdeep":"384:Hc5DhOKAKeqX9pjZWYs2MVtF02YtjFeKD9tHdt7K:chOKATqN1LCzFitBnrK","tlshash":"f542c0832a13c5ebf7792c986a24632d84c015d25b659ff29615e7e22db5b7103e824c","first_seen":"2026-09-18T08:23:49.744508Z","last_seen":"2026-09-18T08:28:30.341435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.150Z","timestamp":1789720062150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24-bonus.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79804\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T01:34:32.159626Z","times_seen":328178,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":95,"dns":33,"connect":0,"send":0,"wait":176,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/4570f0c9-42e4-4044-9725-a93024b4ae57.jpg","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.373Z","timestamp":1789720061373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/4570f0c9-42e4-4044-9725-a93024b4ae57.jpg HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 15:18:04 GMT\r\netag: \"6a170b2c-17ab0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tl4w6ng1KcreQ8zT0uoS2WUhCb3kw%2B8s%2FAkotUdUXts5m0lVxq%2BhcMulVxTz7ghnrHseWr%2BvReEIFEXHg1%2FQlHV%2Bsh2Si8Tbb5ZtGc%2F2IGg4YQSn5wSxbxkJDys3OgOtGM64FQ%3D%3D\"}]}\r\ncf-ray: a3cef90fbf29569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96944,"size_decoded":98043,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2400x1050, components 3","md5":"915bd61034e0db474179c8c88f7098ff","sha1":"1bfc670a3cf714064982d727e83c0741ea2d22cc","sha256":"8f1209135880a591707b7e16cb9be45ef434e5ffb6a26bb7c4dca25b42170e4c","sha512":"20ddf73930f19dd738b1a56dcc443c0d139d77fc0d79eb7a515b2bd7f04b297ddea8064c8e968f493acf42957ad1ff6e14bd04372fca2c48c08fa5b79cb4dca2","ssdeep":"1536:z6DcVlej9ghyjHTGHT2p2/Shz0yfeOExFwyjrqmiDt38JLW98YDN+Q15ISpgbgm2:moVlE6hFT2p2iwSeZxFNrSVUM5rpGgm2","tlshash":"c593f239bf95531ee15c9b328d83332abf6f25b6174153aeb62918747ba13013c4e361","first_seen":"2026-09-18T08:23:49.762617Z","last_seen":"2026-09-18T08:28:30.342951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/4e0ab457-125e-4a60-88f2-c1cf76c1544a.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.385Z","timestamp":1789720061385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/4e0ab457-125e-4a60-88f2-c1cf76c1544a.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:34:53 GMT\r\netag: \"6a172b3d-7c6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3foZ0c3sHhjOk7H1tkypgvLEeLKRiNv1oZW743C3Aoqx10LAPRL%2Bte3HP7SoVjmyGNQ28xV6vROGml9J6KZxkXOnWhOmYPHS%2B1xGoXnhr8jCzb6fcP0v4EwAbCNpBG0njeYNFg%3D%3D\"}]}\r\ncf-ray: a3cef90fcf33569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1990,"size_decoded":3076,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ddd34c53795ecbcc466d1ed7c7b66ac9","sha1":"5756f15d76ceab5e1a0cbba1085c29c9d8cb1af6","sha256":"c845c953a67f1079a0df7ed1dddd8d3a59dbc59179e8af51c9bf90c24bc4d9fd","sha512":"e513e8570c9fd3560bbd6baaf3ddb4cd906c62a877d90062570c55ed5a0dd9d16265ec03ae2c8156968230e1884ce588a197a26587fbc27a221e87d1a8e2c5c6","ssdeep":"","tlshash":"6441f9db7f588749eb163f3020b00b01cb65f56887caea9053c197ec050a0c28c8da87","first_seen":"2026-09-18T08:23:49.733061Z","last_seen":"2026-09-18T08:28:30.343625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/02/cropped-cropped-logo-bth-casino-192x192.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.609Z","timestamp":1789720062609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-cropped-logo-bth-casino-192x192.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 06 Feb 2026 13:49:08 GMT\r\netag: \"6985f154-45a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpOZ75NFgaetRxP1WQvKGkPpDTIXyMUo4U8y54DXFdDpQ0%2F8tTda8ATdmASb%2FIoMBMjFzEd9rFwqHZuM3TP0elXHBP42CgNmlIJdzRuCymTBNAJQP1A7oRL0GtLIvBaULl7pXA%3D%3D\"}]}\r\ncf-ray: a3cef9177ff8569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17832,"size_decoded":18922,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b3072baa5b0cc16ac716321738ae4bd4","sha1":"e438c7422092c47ce74b67fc19f6c5ea9d38f8bd","sha256":"323182017705e21f945a05f8191468ff486096bf2ecd93951b71db105af4877d","sha512":"59256af20a60171e98422d359382bc4a04774cee741d744ceb7949f24369ee07d62f8891523f54d4c847b11570d2c9245ebe59bd863367fa02533abb5178b12c","ssdeep":"384:rs/AgvTT4/Un77IQQDpuJGsJWevpvE8rW85uMTjE3svCNgrZPOWN1QF:2AgvTI27IQQDpuJGsJLBEoWtMTjgitOz","tlshash":"5c82d07287117edd995c3586f4b19dc0a02d24d90bc923e47c9233a8173ec6eb391a99","first_seen":"2026-09-18T08:23:49.779404Z","last_seen":"2026-09-18T08:28:30.344235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/plugins/aces/css/aces-media.css?ver=3.0.7","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.128Z","timestamp":1789720061128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/plugins/aces/css/aces-media.css?ver=3.0.7 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc27-e500\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VnNplLjRd3YJaIIzKu%2Bq9UKWRFHb%2BurTmeOthsHerMD0UTdv7zfES2ju6I33F2IOp2i1dtyvsPPBj6ekoPQRmCghT1qnRFMyfkEAoQHiKoTqdLFJ8Ai%2FOGxbRy13M9gbE0Nn6g%3D%3D\"}]}\r\ncf-ray: a3cef90e3f07569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3951\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58624,"size_decoded":5090,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5fb999c837859fcec08101e6740f2931","sha1":"9fc0fce001a8956e92201dd8144b33f38f705082","sha256":"65297e0cf68528194058288d5857fc15ea2be27fb186028031ea1f6a08be007f","sha512":"d9e332bd5f7cfca6c6d58430ca759383619c355d118573dbce53251fe17947abfa3d31ae94b243b8ab838c52d287c8d7ab630c79264f289f06921ede3c7386ad","ssdeep":"768:w+VJLaa++VML8HamLaa3BZ9L1HDMc0LaWZBZML2H5MRY:wQ5YQMLmnZ9LtMprZMLkMRY","tlshash":"794315e9ea99104f7639fb35afa502789fb840d68b0518f8b97931414a13dfe063378d","first_seen":"2024-08-29T17:35:27.308704Z","last_seen":"2026-10-12T21:29:16.379251Z","times_seen":229,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/parik24-logo.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.351Z","timestamp":1789720061351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/parik24-logo.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 13:03:14 GMT\r\netag: \"6a16eb92-3a22\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3b9mjOJs7nZj60LHqyEbehptJboUngYkuMhoV%2FRqH3bdNJolps5mSpTfNlaAnmR5T1VyABfsJHONQd0qOiIODZ4uvK2PmLV6Ox8BTQH%2Fi8MWo2qUCsx%2BUeqJA1yNRsDiqxbT0g%3D%3D\"}]}\r\ncf-ray: a3cef90f9f25569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14882,"size_decoded":15972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34a5158772dce285a2860e2789d63714","sha1":"fc030a5f4473fe645a379755ad5bac7aad64a111","sha256":"1cb185ea07fe3de8340667b81341a85b45948c623382f92be2cb996ae181c4e7","sha512":"6b7e9e03955932aa779e2da047f7297de3f6d1bd5e08bca2d3e3715c33d72d5fe04c233c45aca3ee29cbc295b089c4e84482d820ea89948f96e6a835e7306547","ssdeep":"384:WEvUbV/VJFVgDWIIw03RnpLu8aiwlXPrHE+:WEvUZ1VmWD3RnpLSXPr","tlshash":"8862c0362fd92ccdec162b35780efbe65415c6251777e98ad09824524bba0479a0ff18","first_seen":"2026-09-18T08:23:49.775002Z","last_seen":"2026-09-18T08:28:30.345411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/3c18ad26-e14b-4342-a0d5-7ed91084524b.jpg","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.372Z","timestamp":1789720061372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/3c18ad26-e14b-4342-a0d5-7ed91084524b.jpg HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 15:17:38 GMT\r\netag: \"6a170b12-150df\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzPPjVSspeGcbQ4VmzQ2%2FlxODy2y0bRYFIo8JZPFXNwWJ0udxPrH6vlZ%2F1aQC4FnwiAj54gilBKuv3S8yvwhlpZAbiSrUSd8ScfTvjfN1aoEhp6vLBFaBByq3DkuICr9ZqzeWw%3D%3D\"}]}\r\ncf-ray: a3cef90fbf28569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 86239\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86239,"size_decoded":87328,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2400x1050, components 3","md5":"c6948210c31f1494a7ec7138558c8af1","sha1":"2fe6dd95eb371579e90c91876971d29dbf295eea","sha256":"8aed6c808d576fedfa9fae23f1ef63f30a4c5e650f7589929394e74a128da4e1","sha512":"694f4fbdac50af27ddd62bd5a416d21695f3848843697a1413db232e1097375139621fabc5390a893a716d8ff6b69ac11b1df58eae3b5eef56ffb8459396d050","ssdeep":"1536:I6h9VGnSPgv9xYUdYMq7l/06eqUzsluN359oILRr0HV8Ty1lc4gdfvsmn+Z:I6h/hPo7rq7lM6ePQU359oILW1D1lwd0","tlshash":"7883f162f7504c69de48757280a7570cbf2427a2be1375488bdf0e1ba94b76e3c2b2d4","first_seen":"2026-09-18T08:23:49.747384Z","last_seen":"2026-09-18T08:28:30.34649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pragmatic-eva-rocket-the-big-dog-house.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.398Z","timestamp":1789720061398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pragmatic-eva-rocket-the-big-dog-house.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:19:06 GMT\r\netag: \"6a19843a-37ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56i1jEbB45mKj4oSqfIV1NJ8JjXDq4yGBYan6YGJ7KYgBDQyKHRBkQ%2BTKJGSI9aFjUHW15EbT46d%2F6AnPuiObbEFGO8h4ecWbNWOx6Iu13yrAYL%2FxMpvyU8rAyg%2FDerd8%2FXbVw%3D%3D\"}]}\r\ncf-ray: a3cef90fef41569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14282\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14282,"size_decoded":15375,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"c12a5a7c0b86a25ad07ad909bf97599c","sha1":"2e9e4cc7c8063f0d0c4d8966c767063f70bef5c6","sha256":"ee25dc4381ecdec434a50606c581d5ab075db0c6093a0d8500957b1623c1a127","sha512":"aa13c8b8626877587e3296d2ac63964a7be175b93e71d571487af333eb7b50bd2476671e3fa3d9c9bf2ecd6545eb9aa13d7a498c9ee7b656789ee594d39a5c16","ssdeep":"384:GhcOJylnQqB0u8/HL1/JQxUtpwQQJq3EEFGEBqPuyXp25dul2:xNVB0u8/HL1eeXkoSZGl","tlshash":"2852c05313da05b5ff023066399b0a246f54c09d99f2bdd68cb823b40d645ceba3853a","first_seen":"2026-09-18T08:23:49.741285Z","last_seen":"2026-09-18T08:28:30.347228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/floating-header.js?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.401Z","timestamp":1789720061401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/floating-header.js?ver=3.9.11.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-19f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcPXeAlO3CkzrJJg8Y2sDHbD5Liibl2GLso%2FFk8%2FVEUs2gOrcwDEkgLA1cvfeVqA8KWUFfH%2FK41gOgsi9TEctXiNN6Iy0ySOoE2N%2FN44w32ZJ8QvWlJkMFL2jBMITUONuCf5iw%3D%3D\"}]}\r\ncf-ray: a3cef90fef43569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":415,"size_decoded":1397,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"277cb867797296a7d19a5e39ba44f8b9","sha1":"6d9841ff0269c70604106c6b29a54de75c49167b","sha256":"739ab07e7a416a76e106573012a9b6d08a7da546d0f5b75eb3e1914c0a738eb8","sha512":"b819996bf376d387e111b3e95c64b2972a9a938438dff57c5bb30a8c87b18af42979f42889fc99106d840549e79f8c46b50a5b0614b603cc1d9e44f6eaff6491","ssdeep":"","tlshash":"c0e0ab09fb1be06e35bb60c9c83dca10c72720d712549091b9485c2d3b401be2671ccd","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-10-11T22:59:15.984081Z","times_seen":353,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-vswaysdogs.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.406Z","timestamp":1789720061406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-vswaysdogs.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:22:27 GMT\r\netag: \"6a198503-34d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5UEnh2L0j7LmBfGfsLGVmVNqHazHwC6PkGNfzBanrTCgLufRdcFKCsv%2F56mOL%2BXQG93gPOPhtLasjXykHz9wijK0GUmpyKfkp1S8%2FamFWkXSkA1umz6bvT6mCMOb7S%2BTEnixQ%3D%3D\"}]}\r\ncf-ray: a3cef90fff48569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13520,"size_decoded":14611,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"d8db189915f05a9f10d6174e8508a2fc","sha1":"7631175b25890d940966a408bf627cd4bbfd21f2","sha256":"828f9a9018fddf229cf3a9eb14281b7b5d32f4afc75bc4cbd76beb33b463a50b","sha512":"3ebe6a7090b677f74ec590fad93388fee10f375c527c90fb7eeb74e215303b5f95b21d7b3c4fb7fb3f86aa4b8a99fd36603cd7162ba178a5ec1c94cbe7a9c1fa","ssdeep":"192:4BWw4IonL4MzIpfwMwa8WDnT0FhOZ8ilVqW3PoV6L34nyuBrcFXH/cIoiRLtjfl4:hwwxONqiFO6L34lBrcFPcIxRTjIHdKcB","tlshash":"9452d0bffc63844fd6434314c189b76605aa6199139b299fc8e9640e2f3ca7837ba0d0","first_seen":"2026-09-18T08:23:49.728834Z","last_seen":"2026-09-18T08:28:30.348483Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.404Z","timestamp":1789720061404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-ad3c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqmeriyjwA9cfVSYzxCrOdEEuWKq%2Fn1ecbxBjdwkeBOMbBoDQvkpNawCEd6Xy4YWa7RttpmT1xnDDJrA2or0%2B%2BuKyhgI3FUepZ7TFV5%2FsuTF2TMF35vPzrGehfJxAri%2FRGu5MA%3D%3D\"}]}\r\ncf-ray: a3cef90fef45569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44348,"size_decoded":12576,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T01:17:17.11383Z","times_seen":15177,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-sugar-rush-1000.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.398Z","timestamp":1789720061398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-sugar-rush-1000.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:16:25 GMT\r\netag: \"6a174309-30d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPSWSe7CK1613oAEEDtm%2FALVGhZxnWKNgohF4ykPccBt1Lgesvwy7HnlQzp3OeJtejVj0IJXFF1vXWeEOG6bb0xoj2MSoG02%2FA7rBYiLlUP9FHQiIUuWFRNBhhirq8mYtabbkg%3D%3D\"}]}\r\ncf-ray: a3cef90fef40569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12496,"size_decoded":13583,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"4776b81efd30a5dd77326f508906a184","sha1":"bb22368aa7db966093ab854c0ebfaa7043277964","sha256":"8408b40990ba97bc43f414a88b83985effa50986be1afdc1d5b0b4db2a4f9944","sha512":"dd2349466276d2e7c6fcae77e1727c358ac310dbe0d282f1f147a9c5c0f011f811db655e95fe0e5e00d5d42c1505ebe91c9a8a0247cd19d2078a3501f582a71c","ssdeep":"384:StsF16wTSLq5ZrinwOGimkRw7LiOx5EAFF:Is3ELqzniHwQ6","tlshash":"a242c0552fa298d274672b5484a7c788a29908acddf16939589bc4ce58b97ac03f301e","first_seen":"2026-09-18T08:23:49.776068Z","last_seen":"2026-09-18T08:28:30.349712Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/02/cropped-cropped-logo-bth-casino-32x32.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.611Z","timestamp":1789720062611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-cropped-logo-bth-casino-32x32.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 06 Feb 2026 13:49:08 GMT\r\netag: \"6985f154-5c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dx%2B25aBM%2FiHix0ntM47ze1wVS6tdg9IXQPF5D17hkSG9uNtbbUybRQgfG2Uol70%2FmeUxdZb%2FYk9hVWUGAdrtHsGdWKAWQnKf%2FR43X7jLRjAa9AJk9xSJFuaRK5QLGkZuajhjUw%3D%3D\"}]}\r\ncf-ray: a3cef9177ff9569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1479,"size_decoded":2573,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6511a7457c24575e5431717f3e6d68ce","sha1":"7cf737fe78c86dcbbe01596b13a6e902a3d21c03","sha256":"c549ac81e9b24bab21ed29280104a584219f93ab4be6e8a71ba264a2a58ba9ee","sha512":"81d697ba054ff2aa0072a88741a2f5e7358d6d9e03b2c27168f87955aa91d9356baecd0ca51ceb6deb07da16b750684b4b2046745cd8e2a5925ad7de4509f481","ssdeep":"","tlshash":"df31d7de5861d6cf92d591708a3c1a72d4fa0ab1017c0e2dba821dfb7302db767a9018","first_seen":"2026-09-18T08:23:49.755627Z","last_seen":"2026-09-18T08:28:30.350383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T08:27:40.164Z","timestamp":1789720060164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttp://parik24-bonus.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttp://parik24-bonus.org/wp-json/wp/v2/pages/8963\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttp://parik24-bonus.org/\u003e; rel=shortlink\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: public\r\nreferrer-policy: strict-origin-when-cross-origin\r\npriority: u=0,i\r\nx-cacheable: YES\r\nage: 38034\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7a8KiNF9A5gU0T9gvhvJahqmy8%2FqDjIdiimuFp5T1%2FWd%2FpesjRaXvdkyWGt2B35ELlV3LFC%2FsjQzTzGLq%2F17OUOe4BltE2n0btHKQLuiFHuXBAIHBH%2FlFIx6Fcek5Es6dkNRmA%3D%3D\"}]}\r\nx-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3cef9092eac569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":127279,"size_decoded":29417,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12374), with CRLF, LF line terminators","md5":"03c64170333447acae5335af6645e3a0","sha1":"2cb6877af27da5d84b8c64fe0300e8fef0864b7f","sha256":"f2a7619eb417714b0d5b157105a38bdb373719e709a2ca353db52ba9f70d072c","sha512":"21f0c2c957951ccd86bbb0f720d9880c2585c3d6b8af97e01b2a39938753433771f57cb29fe5f3c0adc0a57118ba7b7ca650713f9e86c2dfd419d0fd37cfbf0e","ssdeep":"1536:lfypzDMK2SbivbPnbZYD9KY4ZkTxWggsIypWVVuRh:lqlibZYDcY4ZkTxWggsIypWVVuL","tlshash":"f5c3f873c7d900ae7736c395d4247a1e76e4407aa7429b5872a83bbd9fc28f5063728c","first_seen":"2026-09-18T08:23:49.786574Z","last_seen":"2026-09-18T08:28:30.351054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1010,"timings":{"blocked":-1,"dns":93,"connect":55,"send":0,"wait":638,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/c1658721-283d-43cb-be2f-891bcf8430f6.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.380Z","timestamp":1789720061380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/c1658721-283d-43cb-be2f-891bcf8430f6.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:29:37 GMT\r\netag: \"6a172a01-84a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MT3RObLkfl0wDyE4RI916PejfCW%2BZtq24l8xsCmFmdIFXCFQ0q6s2fe%2B62C7zgvWTLpQjTALRSLco55%2BLKdHMc9dx9wVua8J7wizc%2BvluHQDTYVqbYMt84wnjbpOYzyWDFg2dQ%3D%3D\"}]}\r\ncf-ray: a3cef90fcf2e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2122,"size_decoded":3212,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca20e38cb6f4647d25fbfccbe4969433","sha1":"d1954df6cfc60733fc44f0fa43ff48fa6ba3a73c","sha256":"ba84574f4970e0b2ce21c2d269c3f18533e0a9da38d3d90286daeda15ff874de","sha512":"f5be11b4a861dbe83c5b49141d887be770ffaa50a29cdf1cbdcae18eb76f69db761670279fe75d8917516860e32013b6c7d3e5361b63295d4c5a24844c0d4a91","ssdeep":"","tlshash":"f0412a17235cc74ee9b92674a165abc753477c61c6b54009824063234f09e8f385cacf","first_seen":"2026-09-18T08:23:49.768065Z","last_seen":"2026-09-18T08:28:30.351765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/egt-supreme-hot.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.391Z","timestamp":1789720061391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/egt-supreme-hot.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:14:04 GMT\r\netag: \"6a17427c-35b3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBNrVtSj%2BmWGY4FLKmxiBeNcD3YyvEZd4r%2B8jsOAAH2K3E0Vo91Y2s83GuGsvoYXd1al9NqfrOMzWNzib7qJrvFIoHvQG5edIq5yUiDyWr%2BhbzK9djTR1z5o%2BaiRohbb2TQu1A%3D%3D\"}]}\r\ncf-ray: a3cef90fdf3a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13747,"size_decoded":14838,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"d12e0f5b804868ecc2f5f1d311dbe6e1","sha1":"1365b3335421d90c6c2b59cc32f50952347828d6","sha256":"aea782c7af248c6fada1386d570e6f749f466f3c5aff97206846938174969f5b","sha512":"3e000baed1f5556f161333134b942b0ce5beb98f9cfb5d12721e735b3e921605ad6e510f39eabee716613b8ef3a3c1374e0be8d94e1496952edb54eebff14c12","ssdeep":"384:13GUTB+csWnd/Du0kTyO6/8LfEpP/wzoN:1WUTVRJDBke0G3wEN","tlshash":"3652c08b0bf95357c0e2b5caaa7e01ba1ddb33c868e4c09876f9c46c07579d6d65009b","first_seen":"2026-09-18T08:23:49.768953Z","last_seen":"2026-09-18T08:28:30.352363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/egt-hot-deco.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.394Z","timestamp":1789720061394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/egt-hot-deco.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:15:07 GMT\r\netag: \"6a1742bb-3347\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewdN9Kk%2FhSrZ5b0dMAVn5I3HNA12FDBdcxEJJi87QWtY%2F1S%2B5gSKLyKZoKuyGC6jj665V1vUP04DsRc4cS4ZWSDs8llIrE8KIlutcKk9YJLh1pRfVKGlFhfKD2EJ%2BWsaST1ajA%3D%3D\"}]}\r\ncf-ray: a3cef90fdf3c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13127,"size_decoded":14218,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"dcdaa0daf90a1157142f8fb5263cacd5","sha1":"5b81dff9c4e6e387712f7d008088e96b2fb39d9f","sha256":"d40e1b44923fde985bc80cb74c8e9fb3cba4040e5c706d51bcc1a6ad9f576fa6","sha512":"441b79512fd736928cc31c34c0a2a4cbb844c1982c56f39bd56cf6fd4f71793ceca762770177cf1efb2d5d6abeacdefcc496e07c3ae58fc8a68691c60be5bd6e","ssdeep":"192:InElTdhmlGkXm4K+hqkVaIJE6+O94gW0DJJyBDv3XrRW0/59aAYVcpSDYxFJ5Q:F4Qmm6mI4jgJQDvrRr5QAmcpSDD","tlshash":"1842b07879a1c9fba7176969f8866839707504fe5ce28bbfab4bf9107055c1102d3181","first_seen":"2026-09-18T08:23:49.735352Z","last_seen":"2026-09-18T08:28:30.353059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pragmatic-eva-rocket-fortune-of-olympus.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.409Z","timestamp":1789720061409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pragmatic-eva-rocket-fortune-of-olympus.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 15:04:17 GMT\r\netag: \"6a19aaf1-36e1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kC7yMnHyEAvhs9MzEp10MDiYGZpLLwI1ZjokByQXOuOFdAj9HJ%2B53TZJ5ztHw0Mt3sO7FlW7T3YnOVToPYUIwhAjYd3sIbxmTRPoge3NgnRohJ6xEJaPYddTxPlUJgOl85uSPg%3D%3D\"}]}\r\ncf-ray: a3cef90fff4a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14049\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14049,"size_decoded":15134,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"9266f83f77974afa6b5cbccb45ecefc8","sha1":"fbf5215e64b77cdfcc1677ff992913cf3c910ea7","sha256":"5a25c3e7c78bd4e3af08be55fb79bbf510196c454616807a6c2c3e1ff8a16809","sha512":"d938375b76bea5877656893e6d3f2100559f3e9c778f2b3b80b05a5d2820317c1852f2caab17d3f599c71d95343fd745b25bd7a8280dbeaa9b1b70df4b7cdf28","ssdeep":"384:hUb3RfcUfnzwFOYjyGWsRG3mamtkPmuazw1+54:Q3RnzwbWsUmamtkUz94","tlshash":"6152c01215f0d902b7fad066f2aa7a2e48a947e77021d12074734813338d7a656cede6","first_seen":"2026-09-18T08:23:49.760954Z","last_seen":"2026-09-18T08:28:30.353692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-wisdom-of-athena-1000.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.410Z","timestamp":1789720061410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-wisdom-of-athena-1000.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 15:06:16 GMT\r\netag: \"6a19ab68-30eb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZ161%2B4hm9BGJQJAWZ%2B%2BTbpFECSeJtHSEKJgnbS9ZgWr%2BUGPzqbnOVLeLEipP42LIrOfuXnfg6rY%2B8O%2BasuF3Gx%2FDImmz9Igb5muPkLRsrjpsELuydD2k6Majg7ffckItpHHlQ%3D%3D\"}]}\r\ncf-ray: a3cef90fff4b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12523\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12523,"size_decoded":13620,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"7ef3a65a574be4443a8cc77290fe5897","sha1":"49616bb1114dad14a52be00ef4b9d92ba13f050c","sha256":"b0900cfcaf10df2fef194f154d61095810f81fc97167c4da1013ce137199cc03","sha512":"e32d6d63a2d7916d5c1409fe33270eb18248b76c71f14710d19d8a7ca0bb5234c7a9be4697722e43ffa3bc9087373831315832c2924fd835283c68166d7a9d39","ssdeep":"192:m9d9i7xdMfJGsijuykvOC05imSVm4eZEpq+4lzWnjnfNrFxMBpWlYXgZ5UW7ByZs:667xmRwjoOCIi8zl2TfNipqyWFtGFG","tlshash":"cd42c0f76197386626f80765c4de04da2dae16b1288268f4c569e046f03c71bc4b6b78","first_seen":"2026-09-18T08:23:49.785432Z","last_seen":"2026-09-18T08:28:30.3543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.339Z","timestamp":1789720061339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjZfDa9OwmLfb8nYOckiPI%2FgB1td44XuPqcrGXE6coYZuD12aAw%2BvHy2VnroiDRm7Ssklpy9IB4LUjrxBPc5Zf9%2F8I5%2BBXQlPGUIsAXAqiRLdug%2FEVKTQhlkwELczs77P%2Fkdlw%3D%3D\"}]}\r\ncf-ray: a3cef90f8f23569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":6031,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-15T01:38:26.479691Z","times_seen":1012280,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/f52084f3-f0f2-4857-a462-0baff7fd47db.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.388Z","timestamp":1789720061388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/f52084f3-f0f2-4857-a462-0baff7fd47db.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:36:43 GMT\r\netag: \"6a172bab-82e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buz2yeJCi0maw9aj4HIeh6kpRTvWyVLHn0N6DUUARJ6o4s478sbnJi5InKmQkRBTNOhuzynXcdbsufIsC%2F0uqKRZadLO3LQx%2BQOwJxHIYTOrC6fTZqhQ9miDr6yUh1HKeSAlNQ%3D%3D\"}]}\r\ncf-ray: a3cef90fdf36569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2094,"size_decoded":3180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac2671886f41bbf6ea857d141f8a86b8","sha1":"f96c821ad51d0c3e9739b6c1fdd106841cd33e7c","sha256":"dc3c116bdcf14b101e5931a09c34ebf6bd4fb7ab9858bf4af42f2b428f3f21ee","sha512":"bfe1c4785193fd4c2cf7e0e0679f0f1f5861bbcfe83dfcf5e80e8772b46f3e594badeccc1c0feee492abe60f33d28a68102dee136852106d5e549afff468a49e","ssdeep":"","tlshash":"72412aa3637f922fed5137fc34e00323a7bb6b1ac564d28093c146204a545e214ed30a","first_seen":"2026-09-18T08:23:49.765535Z","last_seen":"2026-09-18T08:28:30.355547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/3oaks-lucky-penny-2.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.389Z","timestamp":1789720061389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/3oaks-lucky-penny-2.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:13:41 GMT\r\netag: \"6a174265-2ff9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdZ6myLqwJYkeAEmYCswZjFlY%2BNEh5xroDnQwCb4I5cN9%2BFwh7k1mL5fHxyw77UB4RwcS5ov4fsySr%2Fwjj3bY%2BzUtrzB25bBOufTD8uFwi8Hl0auL%2BwGhTAKuAkwZzTPrA7alQ%3D%3D\"}]}\r\ncf-ray: a3cef90fdf38569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12281\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12281,"size_decoded":13374,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"c7fda58b23fdf06413ee3790463573e5","sha1":"1058ad3bbc1259de6c84b7348cb5925923064942","sha256":"5337fb1b0a15f09ba55a77b143c3b513b42098579b85a9d94b1a0cea1bd76a9e","sha512":"549e3a886ab0211f25b9b4e073736fd486da8ba6ae635fb1d09ded2afb14f877442593c4c9cf611c434e0185f2d765758d42b5885d82b0875cb5068b03b1dce9","ssdeep":"192:jiQq0gB8eOtjTBkkcEJdOkna3zPcSpSXeETJdDQqSBM/ki7faKLu+9VYQII/q6wH:jiJ0E8rjGSda3zPckS2QZaKLu+96+bwH","tlshash":"2142cfc99914681dfcc0f6325c13429e4a66ef598ef0e03389bbce58e45221496e6c3c","first_seen":"2026-09-18T08:23:49.778196Z","last_seen":"2026-09-18T08:28:30.356201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-gates-of-olympus-super-scatter.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.392Z","timestamp":1789720061392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-gates-of-olympus-super-scatter.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:14:30 GMT\r\netag: \"6a174296-343f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szd52QbCHjjx3mg1EehzqtNX1UAolzqfqpE8wsvopowAT7PxFn1Y%2FoT9Jw0UrxYNN6WRx9nZ2gNrGYIlfrklM6Ao%2Fx%2FG9pIQWG03Qq7LsoIAzDp%2BS4mGZm6GsdmE%2B7NkQ2KbMg%3D%3D\"}]}\r\ncf-ray: a3cef90fdf39569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13375,"size_decoded":14468,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"ec4547e90876c03d9acdf8e7d0926cae","sha1":"0dd6b6fecb6f93f33ae85a7f529918915ba8c20c","sha256":"ec0017cf252449f3b6cb60f99127672963621f4864b6f35683a8bc3c7e9a12de","sha512":"afb42566b5ad9b496a9aa046ddec8f7d5644ec96adb37dcfee15975711f8e2f981670ada3b60433f414813460fccf633f706d5e5af96bcdbe9306e547ac98d75","ssdeep":"384:02Xfrek9PjWwAUipzQJv/fI7XDpuqXXw5xqm/gzNsJ:bjekVjWwO0v/fauqXo9/MNS","tlshash":"3a52d0a7fd4b642aef314174b212cb41e794ac77f6110b8caddfb86e8608b4979e4048","first_seen":"2026-09-18T08:23:49.782308Z","last_seen":"2026-09-18T08:28:30.357004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.330Z","timestamp":1789720061330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/fontawesome/css/all.min.css?ver=6.6.0 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-17906\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7LcDsfwPk%2Bh9rNNmsDc9aA5eog2ZdK%2B7CTbBS0iuzDot05iH3wHBx3IZadFmWDn2pLqneeuAEgfrxp0ZenmkSAYptItjT5yosjXIPQvCp7Su%2BhqPCcfoHAvblUXMQGGsRx7KQ%3D%3D\"}]}\r\ncf-ray: a3cef90f7f1d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22351\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96518,"size_decoded":23492,"mime_type":"text/css","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-10-15T01:06:39.545792Z","times_seen":17934,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/9b0b61e4-bf5e-4ee8-a328-04d71816f48d.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.375Z","timestamp":1789720061375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/9b0b61e4-bf5e-4ee8-a328-04d71816f48d.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:28:07 GMT\r\netag: \"6a1729a7-7d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XF%2BrFH5JVan1dKBFVeRmiNqeHmN9I4c1NIx7fxwXSA6X0NFdTwZ7X7NPxfVJQGGks5qmeLoqx1V8dptSNBNIjYD8qbE8%2F5DY3Nx2wrgO5KpAh9V8xUeKlqUjyoPrJ%2BS0nFqDbw%3D%3D\"}]}\r\ncf-ray: a3cef90fcf2b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2006,"size_decoded":3094,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85ca27c5b388863e27404e2eea3f34e5","sha1":"d3dbc366a9f90000ebfeb789d7e3686c27bc472c","sha256":"b6fe9c809c161a315015bebfb577511a05678ecd7907ecdfe5b5af66a64b0c05","sha512":"bb664ebc67c115ef01a4c5333966491c8a32af60135e8154f2a06a36fe9b282b2fdcc2d5c4662207587653e555901aadd5a80c8dc9b74852340e64c16ea4b0d2","ssdeep":"","tlshash":"3f41c865231e6da4fb0d07b44dc00781f989fa73ca360216a78593255b84bd6926c5cb","first_seen":"2026-09-18T08:23:49.777207Z","last_seen":"2026-09-18T08:28:30.358265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/7dfac737-a1e7-4b53-b472-caf2aacc9e6f.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.383Z","timestamp":1789720061383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/7dfac737-a1e7-4b53-b472-caf2aacc9e6f.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:32:13 GMT\r\netag: \"6a172a9d-764\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWclMc7cWQAZvPQsl86kwYQkRiwqEyxtWUr18nicYOqccgSfxQyPqwb%2B9VJd896vtwphsGDmc4oRF4FROej0zqNyxdTKifYiyrAQaAWjQUT4sr8Gr6SRTB5vJs%2FPpKNxJXR0Aw%3D%3D\"}]}\r\ncf-ray: a3cef90fcf31569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1892,"size_decoded":2978,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"555f38ca12b3a93d7731359135c9095b","sha1":"9d729dbaa3dde670643cf58f5933022c0a992294","sha256":"e56f695313beadd4b2276bfb4cf611c1bb63ef70d309467906edb504454303cb","sha512":"e0250519f5267d9d09c0afe2effb7f8cc3da640018e602bbc032a581564c1447d6ea9e8aabff83403d9e4bb18df1641632ba920c0d3d107634d4b54aee6e73a4","ssdeep":"","tlshash":"1441db74f3355f59ee619af464a91751d370e53807c0959fe388017f4f091c55a581cb","first_seen":"2026-09-18T08:23:49.772428Z","last_seen":"2026-09-18T08:28:30.359058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/32d2a847-c4c9-4aaf-a7f1-cb016163f8c1.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.386Z","timestamp":1789720061386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/32d2a847-c4c9-4aaf-a7f1-cb016163f8c1.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:34:35 GMT\r\netag: \"6a172b2b-7fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgfDtxU0XByyGSn71CsIFs5h9mOyDYhEnishHWuAZHOvHu3sLyXAQdiQ6ryrYqUOsAXcW5TSiAGhVjs8fCQuqU3fn%2BgkC5t%2FLtyNBnR%2BXY94aCa6t0uh9lujDg6lgFgmhf3ghg%3D%3D\"}]}\r\ncf-ray: a3cef90fdf34569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2042,"size_decoded":3130,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f07e90d811d5f38fb4be03a338896969","sha1":"ec2481d82bfae8b40f32e5a04490f8487b5c6ef6","sha256":"bd63be06a257af6db89366592b13cd9141ab39a8908e69088ab866324c70463d","sha512":"a2448a6bb1c69320e7e7839e4c309c155378bdac91f979f378b0fafd937d18e0dd57a4259bf0e664723588371792bced742dd9de453a5cc5ab82a82611416dc8","ssdeep":"","tlshash":"dc41081b23650b28c419cdf03d6a3741ab9e782612572254c3815766b3148d6acdd35f","first_seen":"2026-09-18T08:23:49.739111Z","last_seen":"2026-09-18T08:28:30.359732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-vs20fruitsw.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.389Z","timestamp":1789720061389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-vs20fruitsw.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:13:26 GMT\r\netag: \"6a174256-2bff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0SfbFOnom8sx308k1APGqY3SPvlF8nNigAOshW%2FPgY1xvGuPuICUqCyff93YNKcIy2H5htkegmmNzPEiwLPFBEKkdIyjeVLe7qTWIBlT4sUP%2FfzvT5J2sB%2Fbl7Mzq6G68GlLQ%3D%3D\"}]}\r\ncf-ray: a3cef90fdf37569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11263\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11263,"size_decoded":12352,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"ab53dba157662f9707125654483b989c","sha1":"25da61b316e068744edf0d4691347d0e460dac6d","sha256":"a1a2b33cc241b4e82460e599af6bee460bbcd342cdf1866cbe09889d99794c9f","sha512":"36bf03952de41bac1cfcddbd8f6184a335050aeca747057f5f0c7d2c2d10de1e5a14721ca08bdd18328dfbccee3ab2b2baf99aced88d12744f74df6f9fb40118","ssdeep":"192:gcXYrj8jqcoAygzlgocdwCGxrLvrTEYeqznz9XWrDi6KJp70013nBeTOY11Qw/:5XYrj8jqck3w1xrLM2zRXWrDi6yp700+","tlshash":"0432cfb1d2aa0038a6b74f701f9559a372bb9369a917a86d71f07490a10d253f1f8f2c","first_seen":"2026-09-18T08:23:49.773696Z","last_seen":"2026-09-18T08:28:30.360306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-gates-of-olympus-1000.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.395Z","timestamp":1789720061395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-gates-of-olympus-1000.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:15:27 GMT\r\netag: \"6a1742cf-35f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYQQL4ob2SQkyoNUj6B2Dh8kHf%2BmEWbjXx9ger6hvPgy7piZbr%2BplninfovJHDSDk2M%2BNBZsdfQ%2BP1NCGeC90%2FY5GlNPpZefxrfRVccogZ67bRM5sHofZwnsBsiJmnfJPQmsNw%3D%3D\"}]}\r\ncf-ray: a3cef90fdf3d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13810\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13810,"size_decoded":14903,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"4f6b080b6deec47825ca4b61e6b3bf01","sha1":"6d940bc7324b1951dd0977dfc447b41a6620ab7a","sha256":"3a41213a933a4efbe4e7db19a497af6ea95226ec0f6ad2475be9b9c370844ab6","sha512":"9e793efa78b93dff427327ee9c9d026bb1cca6af2bf1fff3390c72e9789e0e2b615cc388c7c7321a3af131c70ccf5e8b098b4a2de91ae8c8375cbc288c894bc3","ssdeep":"192:ge9CRr/Ep1os+OBrcvhJaOlUEUQef0yGXmrOyW3ETLxemVMyYESqL5T:geIRr/Mys+CcOE/zlyRLEnwlT","tlshash":"f152c091758316e6972719e2cf2dbc6f45bb341061f88af5a0260ac9f7b920674c2e84","first_seen":"2026-09-18T08:23:49.783456Z","last_seen":"2026-09-18T08:28:30.36127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pg-rocket-sweet-bonanza-1000.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.405Z","timestamp":1789720061405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pg-rocket-sweet-bonanza-1000.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:21:36 GMT\r\netag: \"6a1984d0-3090\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAUsn1y88qxlqkbwiSklGb3qEsjtEuNiYpltsVcPDHoZJY47k2q9hzv8zftVrg7SldEWCnbPv4AGm%2BEck0bh4u9EZ27els5szJZgVKmLHrU8lQC7DpWL8Vkz5805pw%2B2XvFmIg%3D%3D\"}]}\r\ncf-ray: a3cef90fff46569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12432,"size_decoded":13519,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"ccd6a9004841729e0f2db1e89a99c1c9","sha1":"b0dfad24b5eb9cee74685c0171052b0af6572629","sha256":"6d88d8d763d7b41f86c301adb70bf72d77d4fcd02f05e4737e5d3c7e66c4833b","sha512":"094edbe2d1a8a4c29a4cb60f74a340f12dc4db1d8eb17812abb53bfa99a19ac5f8b2a03b8a0a798104f33c92e1b16ab6d9800e4373ea1775e2d99140e9496794","ssdeep":"384:+YhtO2pTfgeTiQCLkJGR34raUWyoMiUjHLcm/:QyToeTidbR34BWuiUvcs","tlshash":"f142df55b7df277ee80d795e00328eec382058306a024ab706184bbb0bdef90a5c7cd5","first_seen":"2026-09-18T08:23:49.784523Z","last_seen":"2026-09-18T08:28:30.362158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.328Z","timestamp":1789720061328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 18 Sep 2026 08:27:41 GMT\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":2448,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"27a050b49594c14a19427eeece93bf8a","sha1":"3f9c32422fa589dd8024b1097d773641aaa63aa0","sha256":"145c17213da75e9570b37ad643420c5f00b705c7e30010b3cd0aaec5605c2335","sha512":"30170931e51db91978e6bcb4af370ffa484e53e617a536897e52ba0356fe74f20ba9fc5bad4bb98c55cd7096268d3031fe8e79b48e8377d8a174cc9eae4c43ac","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/I:pDS99YURRuWDyjooYhREHPWP2ZZYQRVq","tlshash":"9da21091041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-20T18:18:53.243459Z","last_seen":"2026-10-05T20:31:40.494116Z","times_seen":1338,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":35,"connect":49,"send":0,"wait":120,"receive":0,"ssl":478},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.406Z","timestamp":1789720061406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/js/scripts.js?ver=3.9.11.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-c75\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgnN3q%2B34XGTVGp36F0lIWYumAKqWyl%2FebWiUM56oADIKVekAxm%2BCiyNs71ByQyUcRbSmIKbVDmIvqazWHTNbOgSW3Wz936HQTi0Dj2kr5kR1jz8%2BNF32Db296AQqnL7PV2ayQ%3D%3D\"}]}\r\ncf-ray: a3cef90fff47569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3189,"size_decoded":2006,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0025d45c917e05da5a9524ecb3a0be5c","sha1":"14a3eb110606f1f21970bc3f46b722512f05ad8d","sha256":"de6a280187f35a8ed90567418aafe24eeae8e60a3a83ea0a7e18f7c4e168529f","sha512":"b910c358affa2c3d5b9911582a33e8c396e30f2df470ebbf947241744b79a460fb31aa4ac30d3a95b5ab2588950ecc85cba862cc9fdd8e83d131a2f9e2dbc457","ssdeep":"","tlshash":"9861af49b32aa05f78ffb294d53ee544db3e401bc10055a5bfbd2d9c370562c22b2a6e","first_seen":"2023-03-07T12:27:39Z","last_seen":"2026-10-11T22:59:15.972643Z","times_seen":450,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/css/animate.css?ver=2.3.4","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.333Z","timestamp":1789720061333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/animate.css?ver=2.3.4 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-11d45\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2FtWR7zcYmhnn1rTDQkHNfoa2PqAuGDFpUYjPcILT9kpB46gBIovYaIhRIigfQIKt0ZIRrA3Dt2bWHrcX%2B%2BRWAuVSt%2BE0%2BMKvWizMAfc69QLQMGcFA1WBEg3Mxmmw%2BsBq9SWQg%3D%3D\"}]}\r\ncf-ray: a3cef90f7f1f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73029,"size_decoded":6269,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"c5b24615265e8e28d747bd885e62a617","sha1":"0209ea07e50fbfddf574b39db7d15b5e58b86c33","sha256":"486f43cd21e94ca1c6aad2f6e1f1c273176747e0c3cda01534e6f9c0cf2a2d9b","sha512":"b871dda71a97d77e531998a84ce60f2146624961bff8f86fb658550d952f4e226f9b21baf644db2d1f926fcd11844bc436b7db8ab8a65f99296bae47ba0a36ea","ssdeep":"192:CDvQHnFHQvFpjIBz+a+pjRfBV7lucqBJm7YfPZBWgQc95YKm/0kLyJgprWXhOX87:CbW5TT","tlshash":"1163d9661c91114457720b25d7de4f6cea3ca17318226efab3c2588b8f71bac13cda5b","first_seen":"2023-04-09T10:56:04Z","last_seen":"2026-10-12T21:29:16.401879Z","times_seen":1335,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/style.css?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.334Z","timestamp":1789720061334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/style.css?ver=3.9.11.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-199e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfQRI1bL57gcXPdpfPXdEG4sFSa35yr8D4W51l5daJqyU8hpHjYL1B3%2B410bYCNljN89GWe7RcMxeOxvIQoA2bMMuYB5vawXaIROr431ds4cCLXzwEOwWoMgkjU6X5PCt3Tt5w%3D%3D\"}]}\r\ncf-ray: a3cef90f8f20569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104933,"size_decoded":15408,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"2f50348ad61e7353ee7af8c24473001a","sha1":"ddfd0e0c9d0410a6b403f5fbf558994a7c009fcf","sha256":"cea5770c5a2ed4df6a08fb6a3d0bf1a5955a558af71d6f5f83fa053834ba85c4","sha512":"19d63386a5ae2497315544f734c8d76b1c3e0bf85be57309a34783d03b710c606ab0e6a04c4e9f02346ecd8a8aafb32a539d9b4b8f651ee4ceebabf1ec3f0bba","ssdeep":"768:GFmisevFZ5Npv9P8zy5DULtBUjggx0bLTXkECHj4LSFOQse8A1xv83MqsJZGMBD8:GEQkUDGyU5gOJ","tlshash":"25a36678d645108d653eeb64bbfa5b349f980096cb0702ecb7913e14979a9fc183338e","first_seen":"2025-03-29T20:01:02.920081Z","last_seen":"2026-10-04T14:51:28.204645Z","times_seen":85,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/css/media.css?ver=3.9.11.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.336Z","timestamp":1789720061336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/media.css?ver=3.9.11.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-b53e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BN1XdpKmBaZWpRlyrihLHNMPp1%2FRyrEWCrXtBHrErzw%2BhhiEogwcd6gcp7P67OyhgIiOpLJ5KwE%2FywpuR87DYOLCcH1C0h7BYM9v6TihjoTa5vUdN5svCehQzeV6nt0opldR2g%3D%3D\"}]}\r\ncf-ray: a3cef90f8f21569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3963\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46398,"size_decoded":5104,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6dea934c5ab37fa73e19929087862f2a","sha1":"539040af8c7e0050b8c6b2f77f7c16d3d2f72bd1","sha256":"05f1cb175ebb3a77a2bf79c4f5b113c442e0c2220f33a74be05ee8bcf79ca441","sha512":"5d004eff447d3f637aa6fa4c0a05527483aef367877ed937138032238fecab70f5173527048be39fd454371428d128a6887f7886ff86e47d0ab4a2ce0e73a16a","ssdeep":"768:SYhwaemFaqiUbabLthCeqUabLDRXLqtEuMlXGoVoJfGUp8bLjC:oh9DCeqhLfK","tlshash":"0023bca9e146308e5b3deb50bbf913319fc420ee9a4604c97b543d05a25aefe442778f","first_seen":"2025-02-23T08:46:47.020568Z","last_seen":"2026-10-11T22:59:15.963931Z","times_seen":266,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.337Z","timestamp":1789720061337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQTPRu4um12u5KKR3MSp6Wx1Oqrw%2F2lTW6rd0Dwgr5i3QcBZvNfoNpREyQ1FUOdnxicvzMxQDaYEqmru8v9neE8kqc30YuUr4hSAVow5Yx4bzR0Balc0XAbR6u3gYSc0577xfA%3D%3D\"}]}\r\ncf-ray: a3cef90f8f22569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30419\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31570,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T01:38:26.725956Z","times_seen":1109234,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/dark_img_ua.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.370Z","timestamp":1789720061370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/dark_img_ua.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 13:18:01 GMT\r\netag: \"6a16ef09-126\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGVI5ffI8hfym5mrLq14SmPlGEhalkASENkHUzfELpd70RQQ%2F%2FsMtteWKhz3ND6tZSeAeiQvztk91SBE0MVo6b%2Bbi8bnh%2B3JL2AAB6Hj1Yd841TYAHVHoXAsCP1goe6KgjO0Ig%3D%3D\"}]}\r\ncf-ray: a3cef90fbf27569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 294\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":1383,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a80a80ee99fabe8cceb37276d6306cf","sha1":"12f60b61e7c4a43cf63e71c0609936e86ddd678a","sha256":"542837302689d988c782202e7640cc515f39ff395b5d82a053ee0e2f970a12c5","sha512":"5b6c3719af4fe0ca953d96740a6c8dac3193cf1e2dc8212354bba0f1b2166b8ceeb42e1b5655fb521bf000c2c550cb1725b82035f91c890584018a1816a5171c","ssdeep":"","tlshash":"efe07d3ea0907484c704adb717986c00654a0905907adf40359e6e2415295801812e94","first_seen":"2026-02-09T23:34:23.656027Z","last_seen":"2026-10-08T16:09:03.768036Z","times_seen":30,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/6b79fe82-cd8e-4365-9492-12eaab29102d.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.379Z","timestamp":1789720061379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/6b79fe82-cd8e-4365-9492-12eaab29102d.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:28:40 GMT\r\netag: \"6a1729c8-742\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKXZ%2FGGfRWo%2BUR5DCKOnLXqJ9dxJTVlVI%2BD%2BwKblGYbBr4fpF6ypMPhzQp6LUsY7vupjsagijnFkn9utdtse0Y53vD5yLQjsq8W0v23aunWRe6U4%2FebEBmw8Da5QW2j47qppjA%3D%3D\"}]}\r\ncf-ray: a3cef90fcf2c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1858,"size_decoded":2950,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98206250418651330782c8063765fce6","sha1":"e5cbcef351f41d19d2d4944c7f0222971e708063","sha256":"7fa70129c7dcaf9ac1b7741ece0f598be086ca29a4b23fdfd2e7c1c8db978a1a","sha512":"ebffb1673806c5aafadf25e0a456272447f7a07a399d7d2bbc60c0c4259f6f980cd66714270006f18166dbfbb0ea0b5bb35297d89e60c40fd4a6c0de7b6bebd4","ssdeep":"","tlshash":"4c31d82a3f59039ce4043e7990215e43ff287df3a15a978ea3c186122f121867b19f4b","first_seen":"2026-09-18T08:23:49.746541Z","last_seen":"2026-09-18T08:28:30.36799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/3oaks-super-sticky-piggy.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.396Z","timestamp":1789720061396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/3oaks-super-sticky-piggy.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:15:46 GMT\r\netag: \"6a1742e2-2f71\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vgx7ujpe6t3ATE5X%2FqDQqVmwQcI8FVcJxPytgSKu4sC6N6UmqrnwZE%2BPR57rv8Z4cDiabldeLL6KlX76PQCa5oLjK8AeQ0VYxnSi2kC1gQp%2FdahKxseImn8%2BjVtkZ4v1nOYAg%3D%3D\"}]}\r\ncf-ray: a3cef90fef3e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12145\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12145,"size_decoded":13236,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"40f7ded6a6828718e5c0efb09f0f7fcb","sha1":"f9748d5cfa6788bb8d9cfbe37b828c6b296d05fb","sha256":"3361e3489d1ff20eb44db8702ae922bbe5a6c4c18af6b0af0f190a1f2f4ecf1f","sha512":"2ec8eff4370c6959c4fc263b8b56b2be7f78dc8657b81a20e756bd3f622acf36704f9eb81697f402322d4e68bf5f6640833de16dee57ec4ca314130a859e8c00","ssdeep":"192:PA8J9jyYFamKG+q6Q4mU6bUw7Ci8dBVQefA1CQ4y2lCUokD0NGyrRZME5nUELKPN:PA8J9jlgrGEHL6R7IdBJA1CQF2lCUL0I","tlshash":"ba42d08775d142a053565adba89ad95b56c2393c7c7fba4f97813fd2c1202c32cb8dc0","first_seen":"2026-09-18T08:23:49.736426Z","last_seen":"2026-09-18T08:28:30.368659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/86cae23e-e73a-4066-b269-ebaf0cbfaa43.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.381Z","timestamp":1789720061381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/86cae23e-e73a-4066-b269-ebaf0cbfaa43.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:30:26 GMT\r\netag: \"6a172a32-78e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wALtHtKrQTOH8aMCKO7EejjAQkfNprLptMKAWBsYmkJDVMMRMqcM0vP41D7QZANe5lMXrbO5WRF%2BctSIudDCEAN%2Br2BfpH66mCwJb%2BekbngllEmy8lM6zStN6tamsYz1n%2FiSQ%3D%3D\"}]}\r\ncf-ray: a3cef90fcf2f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1934\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1934,"size_decoded":3024,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"092a437cd18142f280fc984611edc869","sha1":"2de45abb823fcb9d3e4ce334477491416d0029ec","sha256":"fa4573106a01d167d4d2dd68b067161ec4a40c06fedbaac22214b5e6ba0ed330","sha512":"934c4d37490d4fc0fb27b20d9e9e84f015e12c3dcaa55d728fa15413d236c405f37b26c32b3bc0b29d156209a947387617f84f00240fcfe1826a311a74531e28","ssdeep":"","tlshash":"2941e732b3051b5de76a39f030706b81faa9f8611b9cbe22c008761187643cd784d2d3","first_seen":"2026-09-18T08:23:49.771109Z","last_seen":"2026-09-18T08:28:30.369239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/1692f257-3354-43d5-bca4-887f6a3e441a.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.382Z","timestamp":1789720061382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/1692f257-3354-43d5-bca4-887f6a3e441a.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:31:21 GMT\r\netag: \"6a172a69-870\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lpSo7r1WFKVVVHHrbm2s6mxj0p88sOr2%2BBqv1FCxtiKfVGfr7Noh3sserHT8tw2NYpVVDXVZtZG0yptDi6XzNZsYfByaOtIxt%2FYzCwBaZxawB3YNDD19BLTwfuMFobhcya4IA%3D%3D\"}]}\r\ncf-ray: a3cef90fcf30569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2160,"size_decoded":3246,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c604f6329e5b7a4fbbc2d561a297b363","sha1":"08713211d998b9d186153f5af5c56cacd363616b","sha256":"0bdc41dae2c71234662b7f514eb7cdc0cc8233f92653b81e7d355fca94804ac3","sha512":"8e34b88867d07a6444b3fa72b5a712870695e3c3aa3224f249b7b5f56bcd0d16ad8d6988415b3b776e3326776ed1f17e913131e7934a10e9a31de7fd91d84be9","ssdeep":"","tlshash":"28410c57c3724b18c06279b45d848fb3f395bd09e52b3f25d25017d647a4094da7c16e","first_seen":"2026-09-18T08:23:49.753386Z","last_seen":"2026-09-18T08:28:30.3699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/8ddf6e4a-0956-4837-afcd-431c29de9c22.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.387Z","timestamp":1789720061387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/8ddf6e4a-0956-4837-afcd-431c29de9c22.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:35:37 GMT\r\netag: \"6a172b69-68a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK6Ot%2FfvXIizLbP20GLUWK2BE7SqmqIkDELO9RmTqkZxRIIHNBldBl3PQZuCvh%2FPXd2ZkwDmIodxIl0BpFsZx0yX5tG5ahna8wULUugZ44v4IJVGMpO%2Ba%2BsWWrB7DXJy%2BJ6n%2FA%3D%3D\"}]}\r\ncf-ray: a3cef90fdf35569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1674\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":2768,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e510498f8045fe7523ff8d8e39b1de38","sha1":"e60bfbbbc43bddbfc11f12835a82d7a84628cc67","sha256":"e83258a30615bec713046144de7f94539d6ccbce18096091107dacb0858c4ca9","sha512":"7c5c565cb7a555f0abd11b8209fae3a43211cab31f64a6a76574875bb6a18d35e6219bed4d3d711d1ffb3665f94e378ac712dcda826c2d0ba63f22e4a574c851","ssdeep":"","tlshash":"c131d737b33c1358e84626f166a10b42d728fd63e90d4259c55003395a149c11fbc21f","first_seen":"2026-09-18T08:23:49.781267Z","last_seen":"2026-09-18T08:28:30.370496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pragmatic-eva-rocket-big-bass-football-bonanza.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.400Z","timestamp":1789720061400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pragmatic-eva-rocket-big-bass-football-bonanza.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:19:29 GMT\r\netag: \"6a198451-2ec0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRUYfF61UH9pj%2BVJUSPdmpvnzKT6eLtriIFO1JR2oyiX5DjYote5Jq5iFKyXO%2BREI731QKWF6yYgsZm3%2FhtHukTxuo4fHvV5AxdWZxBxg7infzj4%2BRthpX6CJCqymNdBd0VNNA%3D%3D\"}]}\r\ncf-ray: a3cef90fef42569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11968,"size_decoded":13059,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"502ddaac5692d99713d871722cf92aac","sha1":"5080a9d6c2e404e3ac2a504c734fb8e8edf56cd4","sha256":"17ceef69c3aae0cd0a45a9fd9e86498ab412a2d786c3631b39bf984edb51d8b3","sha512":"4acfcf640362efddc882a06bb6167dbc11bd8b5ce6ee66e2217a3b4992ec4fa4ed92906d8edcf31d076463373e521311d9fae18c5de535493f37d4c0d19e4725","ssdeep":"192:xVY2fENgYOnY8c3CAPft7rvEGizvRVOwp97a1hxK4E9ExRPRlVJ9psZGNKlvGv7j:xVzEh8SCAlrMhzvRVOy7cbKT98RPJXJh","tlshash":"2132c078ea4ad5532b2be0e5496126568bb793e134384c3587c2238658073567dcfcc6","first_seen":"2026-09-18T08:23:49.764091Z","last_seen":"2026-09-18T08:28:30.371073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pragmatic-eva-rocket-sweet-bonanza-2500.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.402Z","timestamp":1789720061402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pragmatic-eva-rocket-sweet-bonanza-2500.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:20:09 GMT\r\netag: \"6a198479-33cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2f1q%2BxtAqUAgrNAw5tzg54klMQMVVPIwvuHulKYmn8MO%2BCn8CIUJ4fjfp4aN2%2FkktglFIEYoPzgtVcNsCGNw0w1LHcIgIotNRw2Dl7GSOkL03H2tgP0vQ2tm%2BOgvDEwtzfeOw%3D%3D\"}]}\r\ncf-ray: a3cef90fef44569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13260,"size_decoded":14351,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"b3fa57bdbc9a321f39a2337f02e451d6","sha1":"ba8574d16b5789a023223137564b0cbd7c5c496f","sha256":"bcd6e69b8e4b45581e903282513382754b91cc2fe5daef6bb481bfcfa6670540","sha512":"82a300a4fa4e1eee4fd5197d72d23f87910e921745354a9516a24765c6b92890f10f56f5565e074e669c0325976a33b06609141813f3b4e7617e5404066e8fa1","ssdeep":"384:iQqkKZW5LB0XXKG7hyZeKkZRRSkYsyzCpfSBYe:0Hg5t0Xa0hyAKkXRSnak","tlshash":"4d52b02ba3b6286a7e07279dd2d8550f30bc604a2083a7e5ff765b8712d2d347872d24","first_seen":"2026-09-18T08:23:49.742427Z","last_seen":"2026-09-18T08:28:30.371693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/pragmatic-eva-rocket-sugar-rush-super-scatter.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.408Z","timestamp":1789720061408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pragmatic-eva-rocket-sugar-rush-super-scatter.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 12:24:55 GMT\r\netag: \"6a198597-2ff1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnSMPnf3Kmr0VhPwLZzt%2F910Pa8m3pr6n2IIhZuzqtpsdE2ed3bRPtg5SBIWRG9bfa%2BMWna955WFbZ7T%2FjM7AWQOyedxbOBkVwlyxY0OyzDBWZKiLXEATXe87kP%2FCP777hwWmg%3D%3D\"}]}\r\ncf-ray: a3cef90fff49569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12273,"size_decoded":13366,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"07635ca0420f1c12ed94af36ec0c92af","sha1":"e2481ad45fda4a04d8c23482df97e15d02ee1b0c","sha256":"c95a22ba20ae79bebcd2e9b50f6566d29e9be98491725f6f209e597150e1931d","sha512":"3dfd00e7029beff9d319c34309bdc32afb9da6b1131907c74c8724ba132491bcfc4b938fefaf5878314455d5baa04861b8c4ba1a44260351ae83d2fdf4847c43","ssdeep":"192:SVjFtZwLkYtiyz8IkhCCvSg8UhSW+YW/X3HqTfRw0RlDvmLTbaHEkMF:SXwLkYaIPCf82yfXe+vfr","tlshash":"e742c0ebe5f80fc68e9d01e0b7824fa1c3d8a007da1628e9b6175c4c3552f3f10968da","first_seen":"2026-09-18T08:23:49.740246Z","last_seen":"2026-09-18T08:28:30.37234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:42.147Z","timestamp":1789720062147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24-bonus.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 17 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79804\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-10-15T01:34:32.159626Z","times_seen":328178,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":36,"connect":63,"send":0,"wait":108,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/themes/mercury/css/owl.carousel.min.css?ver=2.3.4","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.332Z","timestamp":1789720061332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/themes/mercury/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 11:10:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6985cc17-d1c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\ncontent-encoding: gzip\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nserver-timing: cfExtPri\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFciOw1a4ziINxGGD9fn1Hcm4%2FrHt4av0j6X%2F%2F6AJoJR9F%2BHyJ%2BEzuH%2BLTBAuTftixs52qYqk0KFe%2FSd70pffheI%2FI6DrGflFdVtxtCxPEtoj00cmATAJ2L4eYSy6DkLaVnYkA%3D%3D\"}]}\r\ncf-ray: a3cef90f7f1e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3356,"size_decoded":2220,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184), with CRLF line terminators","md5":"b9755c9c2613c455154caf065bd1a94d","sha1":"aa3c316b4e2ab55bcb3d8e3d186677739b0cfd64","sha256":"062368677bcefd9495e8b320e0cf22c4faca9f1bc04666efeb9cd5307cd591a4","sha512":"dc35560a766631f3b508d0e280fb95f746d9940b48565487932ea6c1ac97f5436d0ecf3b59ebc2ba2c4f21f7c5b963b4671a7f3e56745860cd1244d207fbcc6a","ssdeep":"","tlshash":"a361cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T17:13:40Z","last_seen":"2026-10-15T01:17:16.930389Z","times_seen":7953,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/fa21f3b9-dac0-45aa-ac18-b05f67b698ca.webp","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.384Z","timestamp":1789720061384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/fa21f3b9-dac0-45aa-ac18-b05f67b698ca.webp HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 17:32:56 GMT\r\netag: \"6a172ac8-828\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQZyzpTp13TPWCNQfMRSG7cArR7GxnTlkqgfIoC54LN46UHh2tLaDvM3WjeI8dBTCnXjxKaeb0AgUlCUkJiICbPNVoUuVCf9V4RwQyReea39sm1A%2Fi1iNRQoJT0Tya6lEe3K0w%3D%3D\"}]}\r\ncf-ray: a3cef90fcf32569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2088,"size_decoded":3172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4070f2a7ed30c8033e9291872456120f","sha1":"ad55662f8b1c9808999d76f5b24f503ce732801c","sha256":"83ba78dfc440f8be9c01fd57507aa8ad11252ccc65fb558f50338aad5e1853c5","sha512":"865b77d7fecf50d9fe4bc8cfad0e1ddf18c52a86ed85f53b342647b608ea90c40cb3dd2044671653f8d3084623d5237cf665d0ffa10713af1e1bc2b1247b64bc","ssdeep":"","tlshash":"3f41ea543712038af0544f7e73e477f5d6bc29212eb6570b52400ae50701dd9094e99b","first_seen":"2026-09-18T08:23:49.759202Z","last_seen":"2026-09-18T08:28:30.373779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24-bonus.org/wp-content/uploads/2026/05/egt-27-wins.png","fqdn":"parik24-bonus.org","domain":"parik24-bonus.org","tld":"org"},"ip":{"addr":"104.21.86.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24-bonus.org/","date":"2026-09-18T08:27:41.397Z","timestamp":1789720061397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-bonus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 15:14:45 GMT","end":"Sat, 31 Oct 2026 16:14:42 GMT"},"fingerprint":{"sha1":"5D:00:9E:7D:01:FB:D9:83:DC:CC:84:A8:62:F2:04:55:B3:AA:E6:39","sha256":"00:D4:01:3E:DE:12:BD:79:C0:6A:9A:B2:6F:29:F6:7D:7B:C1:A1:52:F5:C9:4B:95:1C:F4:1F:B1:BD:C8:59:84"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/egt-27-wins.png HTTP/1.1\r\nHost: parik24-bonus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24-bonus.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 18 Sep 2026 08:27:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 27 May 2026 19:16:02 GMT\r\netag: \"6a1742f2-2b97\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: User-Agent,Keep-Alive,Content-Type\r\nx-cacheable: YES\r\nage: 274\r\naccept-ranges: bytes\r\nx-cache: HIT\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmfO9nSdvum4UFUCrgkIi9WYWH95W0Fk6y1NCdlsxfSOa%2BxtL62E4QBj8XNr%2FEW4Y%2FoQskm6k0JlKxpVJ10XdkDkhio4v3vetjE1MxUOK7l9GVVUzrQkifIdaXGHrLJ2e6kENQ%3D%3D\"}]}\r\ncf-ray: a3cef90fef3f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11159\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11159,"size_decoded":12248,"mime_type":"image/png","magic":"PNG image data, 125 x 125, 8-bit colormap, non-interlaced","md5":"9ea1fde341b37561b84c1db5fb0585cf","sha1":"52f7c3ceeff87dd4db83f129912c74f1dc5b7721","sha256":"08ba2921c5b1e9625d1df683a0fd4912338a62e0fea3bb9a1b039d13478b015b","sha512":"60784982acbc79f523e8a9196b92bd22106be307f0420698981e216719ac0d7b7b1216346d71723990ffdee208a47a12a957cde9f6b3eaeea9df907b3dad76d7","ssdeep":"192:FebiUfUtVwgz1Te/R6AOUObUDtBzAYbhB5oqvHWXkKnJ6giTZWRqgndjSRsSqPwo:0bifve/Rv7DDUYbHHWXkMYTARqYdjSyV","tlshash":"6032bf54aa7bc40a20d9547056abe29c0e81c0e4776f03c07e476a9c757f98b4acf79a","first_seen":"2026-09-18T08:23:49.788477Z","last_seen":"2026-09-18T08:28:30.374646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-18","alert":"Sinkholed","trigger":"parik24-bonus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}