{"report_id":"83e81882-d9d7-4d4c-ab3c-8c928befc371","version":0,"status":"done","tags":[],"date":"2026-10-08T15:31:08Z","url":{"schema":"https","addr":"parik24-official.in.ua/","fqdn":"parik24-official.in.ua","domain":"parik24-official.in.ua","tld":"in.ua"},"ip":{"addr":"104.21.89.132","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"title":"Pari24 - казино та БК","dom":{"size":1009706,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52162)","md5":"8fa8fb2f432b965dd7c3855838cbd0bc","sha1":"090beedc241882239b681a6da3d0f0e020ea8c8a","sha256":"1f9462148d7204843757e77ccbff9c68dfe63d1416c9cfb4d6648880d4b315c4","sha512":"d0e25ec819ce7348ea7df4ccda500ccbdb53fa26071da63848ecbc20e84905e83abe8745754cf61f4900c99b3dfc0c9259282a747993eb05849eccb659e744db","ssdeep":"3072:Uj8LR05eGR0kYFaCGO7She/IB4VhlLPWTNlZk7iABCdJCz6Fbwz1xAZs7HDAsh1T:y4jGR0kYFaCGO7She7ix23AZses","tlshash":"0f25826873f16631b33b46f8b9a73b192096f1d8cb0389d492f0f6e446cae67e6d0154","dom_hash":"domhasha56114ba801c97fd681eae91c9b42677","first_seen":"2026-10-08T15:31:13.33422Z","last_seen":"2026-10-08T15:31:13.33422Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"parik24-official.in.ua/","fqdn":"parik24-official.in.ua","domain":"parik24-official.in.ua","tld":"in.ua"},"ip":{"addr":"104.21.89.132","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T15:31:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-official.in.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-10-05T15:47:17.187021Z","alert_count":0,"request_count":1,"received_data":1540,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.usefathom.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-04-15","domain_rank":129518,"first_seen":"2018-08-31T10:04:23Z","last_seen":"2026-10-03T02:24:19.66483Z","alert_count":0,"request_count":2,"received_data":8220,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"parik24-official.in.ua","ip":{"addr":"104.21.89.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-07-13T23:49:49.293801Z","last_seen":"2026-10-08T15:04:45.262968Z","alert_count":1,"request_count":1,"received_data":777,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"pari24.co.ua","ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-09-18T10:10:30.317978Z","last_seen":"2026-10-08T15:04:45.273604Z","alert_count":404,"request_count":202,"received_data":3007303,"sent_data":110793,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pari24.co.ua/astra-theme-js-js-extra","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41f5e5a08752ab1a82de1946f844afaa","sha1":"afe75175c375ce73e8c807739562c26b74b597ed","sha256":"b2b3ee371e4b5c29d942fc10d0dc75e5c7437c02e148456a45d05be1c66d8379","sha512":"a61fbe5376c0a3af1672015cd50399cf2dd347837e5536fe2bd89c8a6c0ca697465c18d1a4b8777a916e806ff00ae8f3f5a463cabbb4bca08212fdb225520537","ssdeep":"","tlshash":"2c11a710c2d21d0176d78c7250118f64b0fd9190d1d4f08d9a7c454862e6a1a1668109","size":1025,"data":"","first_seen":"2025-12-16T23:13:59.030071Z","last_seen":"2026-10-08T16:09:03.79804Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","size":6981,"data":"","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-10-08T18:07:04.440235Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-08T18:44:43.353261Z","times_seen":76686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d303ee84e211b1f6e39303f9c4b8b27","sha1":"6d413188672e67f2c108336f6adf723cbfa34773","sha256":"8740d4f07c4f7a0bc54aad726f0c9bf8d22bb43991af66303560566a74bbac94","sha512":"0f748deb7c343c42e89001b8ac9e94168058d10c25136ca469f629abe004116224d6fd4578f8ad150efc4649a4bd9c254a667c957034939067dee8cc8b2bbc6d","ssdeep":"","tlshash":"7fd02b342230493713f76753c67db3872c14541b1501528b5809840c28fce8114e0982","size":259,"data":"","first_seen":"2026-09-05T19:58:22.119959Z","last_seen":"2026-10-08T16:11:04.790179Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfae1e8e774dfef11731812874e3cfc8","sha1":"1cdbd9c79f76a5aece257d2807c0f4cb9e4d52b8","sha256":"67b82abae5252e7f4fe9d20924652482ece99df3ca91ed6aa1c98a53c1f98f1d","sha512":"601334ac697853d4abf3e1e5c5706fa01c9da513b0fd045e2eee0e8b50a75f5e5ab67fd170fb54703f5a79417d8703f8b0d186801e69249a6784d923a1401e5d","ssdeep":"","tlshash":"a8c08c3f1500677824e31ee8a8f7ab903f232fa3d29e0080d8bc86569390d8b9c21dd1","size":172,"data":"","first_seen":"2026-06-03T00:16:41.164862Z","last_seen":"2026-10-08T18:27:13.991551Z","times_seen":4100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-10-08T18:30:24.582621Z","times_seen":26265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1865563ddc7858ad8f5df54bf0d4f3a1","sha1":"8a1083151ffc79be34dfadffdf09ed386708adaa","sha256":"ed40e7c01da10e3ce3b9b6781f996cc5cbe8886a730390f8d973e361815eca8e","sha512":"e847c80bd60b06853be9b227fba7dc9aaecaf1bb86c30d7acfa880ac53a6147ba9edec4cc115fafdeb6008a33e7e4a4164e13d763f8e7509d33980aac7638837","ssdeep":"","tlshash":"60d0a91002d22e0176db8ca290218fa8b0fd92a0d1d4f08daa7c464862e6a1a1a68209","size":220,"data":"","first_seen":"2025-12-06T06:58:10.775603Z","last_seen":"2026-10-08T18:29:58.898118Z","times_seen":4134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84852de936d42fb66ab99cee5e1b94b0","sha1":"51a90d0c9ce4a9d3f1eaeb487a4fd8653e575e84","sha256":"70e18474d4a5bf227150c618e15ddcbe7e36a89d968caf0df1c2018d8f254e75","sha512":"97c317b248bdb1942d174aec1cee05842dfa5b3ae1e3661f0175228f87e9890f1b9e8494d05c5c9c8af5df64f14f86862643edcc03ecd5bd8d2b553503039978","ssdeep":"","tlshash":"c2b02bb760c4813802ec45c04123e11e4003f00bc1209001d0c600e8acbc0c21c801e7","size":122,"data":"","first_seen":"2026-09-18T10:10:38.048418Z","last_seen":"2026-10-08T15:31:13.723171Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","size":25719,"data":"","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-10-08T18:27:13.922251Z","times_seen":4031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/prj4-effects-js-before","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb50af8bc7da114d8098af8db63f9c13","sha1":"280c888f54cc04ba71d872fd6aff499d2eb97466","sha256":"88a0b6e9c18779441b5e0c18a01c314f1415f78f389e0fb218f488aba4d671a7","sha512":"911d78a96411d85bfc28e95e0d0db11f86f71080b3875fe70437b91f0b00a760a9da9857ca6c747fcc8c4c19d52beddbbb998a16fab8ee7299239c709bcdbe15","ssdeep":"","tlshash":"5e112bb7f1c4813802ed45f04123e11e8003f00fc1209001d0c600e8acbc0c25cc01e7","size":932,"data":"","first_seen":"2026-09-18T10:10:38.049714Z","last_seen":"2026-10-08T15:31:13.724051Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1779802932","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc0ab4563ee0d92d8837cf8d12ddd725","sha1":"89482b62a0398687aa49cbe0a94ea0480a7c0e59","sha256":"ead19f0ceaff91c8437160ab44698647009dc865fad03610ef889de90840b381","sha512":"ec228782e91348254d814bb6edbd1294840d45d0139db4277fe32eaaba4b06e045330480f7f2d1f8a18681cd7b2fa3e718545f0fe65c7d28c444581b7fe6c56d","ssdeep":"384:UUw0IxBpHfBwxL7J3mcj4BZ6aQ7hiZ7rd8jKt3HOmvBmcdYGcf9wMvibtfc+MV6H:/wV/5wxp3mcjDkRBdMV6vy49T","tlshash":"c4132b7962bb003a4013916fc79fb74c36269077b206ca087dac5b6c2fc593897b5bd9","size":43498,"data":"","first_seen":"2026-09-18T10:10:37.965778Z","last_seen":"2026-10-08T16:09:03.762499Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-includes/js/wp-emoji-loader.min.js","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75f64db9f780e267ac2a2fc4fb78ddb9","sha1":"96ca370a35c0722559c54250edb37b82b0b01adc","sha256":"2b3c9c2ade0cd77c1ed28ace17e50e8d01123e91818750843bbbd13b09db326d","sha512":"b6e68ddf8839f71c9f7efa8d22afe7d1916d7cc68aea5c4df10afaae46e2e5e6d6f008afcc5822e11d2c81faee2b06e3a23b17612d96e0cb80d2722a7cec7ac8","ssdeep":"","tlshash":"9781a759eb7938df33fa01f3653a4d4beb614436e784d038c9ae631414b1893c375a56","size":3868,"data":"","first_seen":"2026-09-18T10:10:38.05105Z","last_seen":"2026-10-08T15:31:13.724842Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"parik24-official.in.ua/","fqdn":"parik24-official.in.ua","domain":"parik24-official.in.ua","tld":"in.ua"},"ip":{"addr":"104.21.89.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T15:30:30.182Z","timestamp":1791473430182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"parik24-official.in.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 21 Sep 2026 13:18:36 GMT","end":"Sun, 20 Dec 2026 13:18:35 GMT"},"fingerprint":{"sha1":"39:BA:CF:E4:F7:D2:EF:EA:2B:07:D3:B0:82:C5:0F:C4:60:AF:7D:3D","sha256":"32:7B:2C:57:E0:03:A5:2C:66:A4:A0:FF:49:82:66:65:6A:18:27:28:7D:34:1B:93:78:B9:56:3C:C7:D2:37:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24-official.in.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 08 Oct 2026 15:30:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUGB60ioPkBDS8o%2F2I77PUOq45jWqt%2B%2BAE%2FFmTKKtzMKEZekk%2FsH0xIg2pResL5AuBC7w4cSCKX6wUxpf2K3c9wsstNhu4eznWJp9J9GYWJGD8oHK69ZWkBUwoGMMfuw%2Fl29ex9dJxyD\"}]}\r\nlocation: https://pari24.co.ua/\r\nx-powered-by: PHP/8.3.35\r\nx-redirect-by: WordPress\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4762feb1ef20b49-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":44,"connect":25,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"parik24-official.in.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/Sidebar.fa37b0ac52fcf18be071.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.344Z","timestamp":1791473432344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /Sidebar.fa37b0ac52fcf18be071.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1585\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LjVasRydSleveAlN5rsmMK%2BnVqNBBBft6Vyod9iPDSa0GXQPkAhBdKvN8mtn8Y%2Fkh8mxS0l83ifWzFaESAuEkw9Ivh4d5rKQuVVtOnoVsG9uk0ZRtzEuUMpjaZz4i4%3D\"}]}\r\ncf-ray: a4762ff82afa56ca-OSL\r\ncontent-length: 873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2893,"size_decoded":2784,"mime_type":"text/css","magic":"ASCII text, with very long lines (2106)","md5":"be759b55b07b648bf727b0678abd433f","sha1":"002ba2fa55b48299133b9fa9669f1f178435a72c","sha256":"b595ad5d5c798b41e18b71b946693843da504222a82939ab5c8771aa357986e1","sha512":"8581345fd38b47ec3c2c15b78c32bd80bac19a842ef8926935954cb507a6cb4111a7003115e1033978426cf8f89102829b4111ee117941577f3cfa594f06f36a","ssdeep":"","tlshash":"135113a63461723cbc27c42053b85acec185d06bd52b93fe5cb67a71cad7adc297204d","first_seen":"2026-03-28T17:27:48.282331Z","last_seen":"2026-10-08T16:09:03.611176Z","times_seen":73,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1a26f1e0-32d1-4655-bc57-756e1a043f92","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.437Z","timestamp":1791473432437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1a26f1e0-32d1-4655-bc57-756e1a043f92 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept,Accept-Encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHZu6b5nm6kbTy23qxMuSXD3i%2Ba5lYEWZJOPrnVMoWgHnv1lTCWCzhL0pjGCrqieWUqgZG1ok3uuL0gnRhOALGOCspUsWjNVBURPMi%2B4O%2BDdaTLOkm8PmZEvP6tz1eM%3D\"}]}\r\ncf-ray: a4762ff8bb2c56ca-OSL\r\ncontent-length: 777\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1595,"size_decoded":2611,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2eb355fdf59bbebeaa8e8c6695a1566a","sha1":"5587368ff464732a648322493e2635fbd85fd392","sha256":"9cf9af95dc9bb2ba530918ff6f5db7082acef8ad3344f05e628c4e24873fd0ab","sha512":"0806673feedd81769f73c672947fcf08d17e915be40277b2c7ac38c7019d2e6566a173ed649c82740d5b0a6360e3568bbf96646f27b6d51cfeb0a7762fc76e77","ssdeep":"","tlshash":"453165fa7b58dbfa4b424b321920007176a6207dcf8da2e1d557fc56383d0978aadc50","first_seen":"2026-04-29T14:23:59.724724Z","last_seen":"2026-10-08T16:09:03.625371Z","times_seen":18,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/t_atp_cha","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.480Z","timestamp":1791473432480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/t_atp_cha HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IuMZhm6evP4VqLLlzNWNzbq75VsIdRxU9SNYSVLQu4SBM3Aw6hgWC%2BioD3%2F4Im58fmwbkwjJwG5cNNtvToiJIHQ%2FIJQF5FTROHCxuotr6aa45zfcN4%2B%2FK%2BOQ%2FT7WgcM%3D\"}]}\r\ncf-ray: a4762ff8fb5056ca-OSL\r\ncontent-length: 2240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2240,"size_decoded":4004,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"73b65729e0bfa915ba0caa55a0465ac1","sha1":"ccf38f96a9ef6405a19187f6698274f12b4f0783","sha256":"c2a92282a9d304389ea8ecd7c77b3b1bcd2aa0a53b31d776fb60f83b44036ba6","sha512":"18263c0a77330351c1c720a72f9f59d950f9d2839fbbd1d83598756f10b644620b44d23c70ac363324cf92e2e1784b39390355ce4b0bc0e493f395d7b8c7e7f9","ssdeep":"","tlshash":"06412c1be6112345357bbd4d477511d1c981f2053b85dd19dc135b4c677d0c63f89256","first_seen":"2026-04-29T14:23:59.95033Z","last_seen":"2026-10-08T16:09:03.563972Z","times_seen":12,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.563Z","timestamp":1791473432563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.13.6 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 18 Jul 2026 11:02:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UNfse5R9GGAzFv3%2BYKOZMRfZ72QU1fvpChYYgp9eTtFweM%2Fq24ND9O2m0o38CRZxGsH4a12alAbJP5bFtsibs6pNi%2FlSlebJjXq8BLndr9ADHj2aHZToanDAInB8LNo%3D\"}]}\r\ncf-ray: a4762ff98b8e56ca-OSL\r\ncontent-length: 5693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25719,"size_decoded":7565,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25719), with no line terminators","md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-10-08T18:27:13.922251Z","times_seen":4031,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/06707039-7167-49cb-8d8a-98344fff49a1","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.591Z","timestamp":1791473432591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/06707039-7167-49cb-8d8a-98344fff49a1 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJviux9L1urmWfgB8y83esyTHwAJn6TQFu5MtgGV7noUEnK6kaZi%2FIIS2IjRXRlI9muzew4uyE3ukINsH8PhVppLaGH10kyXUrngZTeKjfYPfaelUk7QaUNkiuzSY6U%3D\"}]}\r\ncf-ray: a4762ff9bba656ca-OSL\r\ncontent-length: 408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":408,"size_decoded":2195,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffb0f063d59dfa0949296c3e1dea03","sha1":"b8e1e7402e12323d451d4b4fc7e7219205c035e9","sha256":"2134a764714cab3004f6e5f019b8dab4bd1f1827ee1b28f80a0cd21106deb0e2","sha512":"37305139bd24610b505e7b8f8de690e4e828715708661d3f04aaffaa626febceb099864b33bc70f2161bd7dcd32dfa0a5fd78ae4a7b8656281dfb38651201737","ssdeep":"","tlshash":"fce0f12c528a1d6fda4b2a609e8c7e017fc74b1339a59e4000f016ab083d5a104b2114","first_seen":"2026-09-18T10:10:37.887896Z","last_seen":"2026-10-08T16:09:03.782133Z","times_seen":8,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/88b25c25-cfdf-40b4-ae2e-01654aa6b4c4","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.617Z","timestamp":1791473432617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/88b25c25-cfdf-40b4-ae2e-01654aa6b4c4 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IeTCi6eWCJCgCHXYrwz5vL%2FWKV%2BBVNGU9N6yFDow4f2%2BAKjd8M%2FvhYfOCtsnQgCimChXJTPZv3iq1ewB4ql3VxGreMuWj4oXCFIz1LsgwNKCvD07FfkBxkQqXKjGxE%3D\"}]}\r\ncf-ray: a4762ff9dbba56ca-OSL\r\ncontent-length: 842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":842,"size_decoded":2635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67cce8df287cc030ecdf701ab6cf2256","sha1":"1b984eaaf92ffa16a6b91485ff38c5b896d44869","sha256":"2a400a065d9c456db6368db7e81313daee209ce13ce098c09be71339dfa12587","sha512":"f56dfaf1f86ccba71fb97db9be66f84454b3ae5a265575b517ae51f7b2d501449e3ebcd6b401797c284da8ae67d4606508020b61d4a4a7fcf9ec572865b332fa","ssdeep":"","tlshash":"ff018652e1ead5534e4869b87e6d34addb07949ef52c2a2abe6880c4600cacd0a36d42","first_seen":"2026-09-18T10:10:37.844052Z","last_seen":"2026-10-08T16:09:03.739455Z","times_seen":8,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3573-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.626Z","timestamp":1791473432626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3573-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENuwUHFxFPKhbJb7bp5ceKYM2EGB8TvmEtTgePsbtBkoYsn74YYONTCsam%2BdeCjTG0cY4cWv0HgskeupaMlZoXm4b%2BKK8BYN0%2Bfb%2BWpRQkQMyxq3%2BA0h%2F4XPK8Di4sA%3D\"}]}\r\ncf-ray: a4762ff9ebc356ca-OSL\r\ncontent-length: 18222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18222,"size_decoded":19985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"265800cffa1a9977909c2f12dc2d2130","sha1":"a5e6de59921fb7bcf5e3144df34ceb44c9bf86b5","sha256":"789fe65609c179ce694b9561e725c10cfdf184df71730ef76856198aef5c12bb","sha512":"d41d858589651728bba98fb12c5368de12bb707a5393a63ce4306e44b5c29e830583ca393adcf9108aedb45f5f2e9310c12b1300d43b4ead6a48a3efa18504ea","ssdeep":"384:IAC+DfW/pEjpfCcMsfzMuP2Iy29PniawR8I5b+UIUlKg5DNzkr:IAZLjp7MHQqp+klKg/kr","tlshash":"9e82d05a60119bdc9a4e4cd7395dfccd160fe9c4d0c686a4e7c97871c9b8ae4cea2c48","first_seen":"2025-03-10T05:32:40.311807Z","last_seen":"2026-10-08T16:09:03.713751Z","times_seen":10,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/45.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.355Z","timestamp":1791473432355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/45.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUFfEEvs%2BQq1b84uU283UKT1XZd6UWazhUDX3kJohwwe6uAeYg%2BZfhEPS%2BvFg6wdIVVmKN8HOirLv%2BtSOqMffP6prbm34LmRMu%2FYYTg2L2%2BWZg8L1lirBXCRlyCAZMI%3D\"}]}\r\ncf-ray: a4762ff83b0156ca-OSL\r\ncontent-length: 757\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2835,"size_decoded":2676,"mime_type":"text/css","magic":"ASCII text, with very long lines (1913)","md5":"865119732acb7343e26bcec97b4de3c3","sha1":"7efe08ac51e63c118dcfa9fb2b7f84d380588dc1","sha256":"e89c2a94ee7f858b5033e9143b85aaec4775a8749b1370a0199468febd776ab4","sha512":"4e979692adcb3b9819eacf0a6b23be815215ec59502460d7c2bf52c9c317f09f1ff5c4aeb93dff58c8cf1a805ebb58a68a7864d56c31188c28c7e976b2379f81","ssdeep":"","tlshash":"1751bd337a702e3cf4c7a61d164bb1990971c9a6ca721af97876db34c2d31890ed258f","first_seen":"2025-11-13T20:36:08.304773Z","last_seen":"2026-10-08T16:09:03.698897Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/deu","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.461Z","timestamp":1791473432461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/deu HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bubwLR4I932YK9P9SRWGLwSd3KZ%2F7NEFUuKR0jN16mtxfytasIw438HkR8kxJ%2Fq79sF9izO72KR%2F0qLRklGTujTPlkJphoZQaK1VKnZ%2FkUaxJjN3YJ58YudkqxyGNPk%3D\"}]}\r\ncf-ray: a4762ff8eb4456ca-OSL\r\ncontent-length: 248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":248,"size_decoded":2005,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"942da9124c5ea90291d1f15caa64c3b6","sha1":"4448efa0c614ca238520ae0377f554832e6878b2","sha256":"40e842f24749be808fcc6af2ced18f879290fa6fd38f248b6f982be125ab618f","sha512":"f495f0e3a2d77213a6abe103ead9566d5f66a0f597f5d88a3ebcd5a37c369d365f527512cd0858c0ecb431f97ccbc8491e2407aa6f0d9d4a5048a675c2447a66","ssdeep":"","tlshash":"99d09515d980104847fc35be009553740f580642d16d401003632b48dd17c6d179cf98","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-08T16:09:03.653131Z","times_seen":110,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/arg","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.522Z","timestamp":1791473432522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/arg HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzsXc6YimtwELvOcIFKUSoaXcyXzqV%2B2ufzbiHLk6Qi0WQWSUPYw91MZILT6LduB61KJz1piyWfFkDthzMRNz7RT2mebq7LO0s8m3deRdzWrA9eVdRwr4%2F%2FVPU0LJ%2BQ%3D\"}]}\r\ncf-ray: a4762ff94b7256ca-OSL\r\ncontent-length: 488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":2245,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"209baf1c11a932b828696a75e8ebcf1e","sha1":"e751abb637094c01708feb921a8fc0e5a9b15b69","sha256":"ed5619e6f99841eb6afd4cd3169db823fe1c0cd2ebdbbfef3d7848ecfcfb09f2","sha512":"d67741edf8d498faf9448e1bea5173aa384e628a36a07be182230cef872075502a927e1df0f72f25774dc6f43187689053e69da9e1581143b993218850b4afe1","ssdeep":"","tlshash":"15f054ea4e309f386f4799adfa28d7b3c54fd4fa7809f51850174160f3ba01425a6366","first_seen":"2025-06-29T08:50:22.736204Z","last_seen":"2026-10-08T16:09:03.778968Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3536-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.629Z","timestamp":1791473432629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3536-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7htEJDHQUDZOm4A9WMQQ%2Bo%2F1Eg%2FvK3XzlhaKR3WTQyyl8XJ9iOEHdaBbCBJzmPUp8MSkTEc7FvnhhPWTJLupk%2FOxf%2BdB8I%2BwTbHsU62Y7W716s8UaujI4ai%2FGuVluMI%3D\"}]}\r\ncf-ray: a4762ff9fbc556ca-OSL\r\ncontent-length: 13464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13464,"size_decoded":15229,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd9dadf0d69006a11d72a595cd450854","sha1":"223d068c3017fd8b63dd78ff94caa9085652508f","sha256":"a066f7059989b64d42f8a944fc8ee1e89b35ccf57d2465b479770cb25258b1ec","sha512":"c2147f16af943f98d49fc2a6ac316b59a768afed3e54ed0fd9dd88bffecf93c3dc38f998e85c4fe804ba6650a2d31d1da52934cee47ab21cb1b187e9e3756be6","ssdeep":"384:xh9WcmlY97Ifjbcxq7Dh04jSS+hxR5nrBV:xh9LmlTcODAPlZL","tlshash":"3852d1abd4f639a93a0e4fb1d3afc2cc3b065355f111b8d237150b9bbab10d92318915","first_seen":"2026-05-16T22:48:47.053962Z","last_seen":"2026-10-08T16:09:03.626965Z","times_seen":10,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3533-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.643Z","timestamp":1791473432643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3533-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ioNB9j5cXkqnNflmP8fIUrPoHq4ZNikyOZlGbjZlJTTbtIps%2BkW1aDeeWO1SlrX8bUY5AWVqSXz5lzRuqQnZP9wr8wRMSPpjqYMNilkJWx%2B5XmlBMc2xX%2F1ZAELaliY%3D\"}]}\r\ncf-ray: a4762ffa0bd256ca-OSL\r\ncontent-length: 12494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12494,"size_decoded":14251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c19ac7d6c76c28af7e2dd913c1655a2e","sha1":"19375034cca8b4e730d7a34d42a0e3438816bb2e","sha256":"27267124054476d63424ebe8c659a794fde5a5618a226fa5357848a621403fd1","sha512":"cd371da436a1fe8ce25bd6f4d246d88691b6aef6810d9371f98a3488bf9ca1ab78e232bdb8755e809eaf1a60a61984b3cc2abf60becfb6b0810f480ca15e6fa8","ssdeep":"384:0Mou+Jc+uD9hbMT8+M+8txJ+pdLm82/F5wv:0Mou6c+ubbwC9+PXcwv","tlshash":"0b42c0d5bd75bd51e8130b5a316701b4e0d52801c3dc2a9547c39edbf6b8c88a91b739","first_seen":"2025-03-05T01:10:53.977772Z","last_seen":"2026-10-08T16:09:03.676806Z","times_seen":13,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-great-27.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.688Z","timestamp":1791473432688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-great-27.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2BRdTSE0m%2BYRA%2BqyEyGlPNwB3I7bfdd81Md3J90v0bVNNMO0WZLKHOIDIz09CRJ9c6SxfMg1jS1cPzPnnegXF8E%2BmixQZwoubH0XYVnuhjy7P%2BR2Uci1mOPA8VoYC2g%3D\"}]}\r\ncf-ray: a4762ffa4bec56ca-OSL\r\ncontent-length: 5012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5012,"size_decoded":6883,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15cd67282939144b3d3a8f0b401b2ec2","sha1":"9afa690bb3afdadbf1ff3d4b0ae84c9e138f9031","sha256":"4cfc83d2e05f9b2503f4414007372c52cb16e114885cf521e886bfeb1edfea9a","sha512":"3f7e54af544f37397c10dddd04f7de397cf418d70b8da1529ac706b76a0148612171780873efc61f3367894c95e0256f7302ec9fc0e442f28765f02268c2cb2b","ssdeep":"96:SSIMxiTRSM72hTF2LshzCqBhouayZK3IvV60A3Gg58FN3IT594eZTbWxt:HxcKhSsheqIu3ZV6nVU3I99fZTat","tlshash":"ada16c118fc28b48224a175f45c05fde33fb649d00bae98da49b998e23b0597ba22454","first_seen":"2026-09-18T10:10:37.891136Z","last_seen":"2026-10-08T16:09:03.596122Z","times_seen":8,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/65596-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.739Z","timestamp":1791473432739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/65596-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=to0TaaFiZwb2HDZTRpFlVjKT5abi4X9xdac3tDKhcH8or9PRqCzg4nr4FNQLxjUQ82I2krwO50KA%2FrYExSSO6ex7tF0xzzPToB%2F%2BnS1SsnuVym13pfJbE87U5p%2B4wJM%3D\"}]}\r\ncf-ray: a4762ffa9c1b56ca-OSL\r\ncontent-length: 11510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11510,"size_decoded":13269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9754a3c99c2274cb9ea327a5f10a025","sha1":"3ec9879080b2b3a44e26e45db20d6481c411315d","sha256":"83991fdeb3774026f97761f28b6377ed4d717973e1f3ab03a64956f263bfdf79","sha512":"3c613aaecf754926a799266cd9de27ceda0eed962271fde1991fd35102f16dde32a5ea80204d8c43cfad71781d9812f54f659e9ee6e43351b5527190aac0943f","ssdeep":"192:L6sgzy8J8pw+NbuZcSe7BFZSsrYwpwXgFlya7zm/XVo58s+TIXQdN7Vq/z:L6sgm3pPbuWnj0sc+yclyanm/gt+sX","tlshash":"c432cfc8a5c9b126b18a322383eee3cd01525b490da7cc9df6d69f7132b4db89a4c344","first_seen":"2026-09-18T10:10:37.948566Z","last_seen":"2026-10-08T16:09:03.765763Z","times_seen":8,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/53353-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.750Z","timestamp":1791473432750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/53353-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZ7BKjvQGv0v%2FKKXX8H%2FHQ89MVgVgNoxdE5hBfhNY7327rt8xj%2B8wG5yFHMNd6PFCE4YciVPoPMwEPeC0ZrAfumkgKC2uliYVkSkFRIP3bZCeQJpKCB%2Bi%2F1TSiNdirY%3D\"}]}\r\ncf-ray: a4762ffaac2656ca-OSL\r\ncontent-length: 10196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10196,"size_decoded":11957,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2d84bc864abf10088cb792235363994","sha1":"2c8caea47bedc4e580ec3a5c0d2caec94e98871b","sha256":"2adf981b4153aafacc393bd934e14c1f8a8b6f6f870fa9ade397c8edd3195e7a","sha512":"a6a3372a25a9f7bc80d35287e4cb075af9ce54b205f334bc09c5b1af73c3fbd0988ba4dc2e3202f5deec31e718fc590befcc68176f9e9957517184bc0dfeead5","ssdeep":"192:Z6rKLf0+3AZGWwzJOWzslagxoZ/wXeLcooqxapmaUYNRiyvgCWX0X3RvFRN:vfFAZDeJOMs0uodwXegIojRLvQy3RvFH","tlshash":"0f22afe4c326f54c01d8fa30ad5434b49098be7d8419efea15f5761d1d383264eb5b0b","first_seen":"2026-09-18T10:10:37.725107Z","last_seen":"2026-10-08T16:09:03.597019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/event-center/assets/styles.04a6e15ee437eaab1e62.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.354Z","timestamp":1791473432354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /event-center/assets/styles.04a6e15ee437eaab1e62.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2F%2FxWQ3VjD7hIdq6bZ6d%2BQrhHLdAuLrNfEwSyExN8igPdbuCfVqhTPPX%2FyBQFtjHprnj0RzZ4mWuRc5%2FAkbvRlsiBYKwbI8SyHM6eVjUGk6GSUe4BigMVLLrJbfTipU%3D\"}]}\r\ncf-ray: a4762ff83b0056ca-OSL\r\ncontent-length: 9290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52778,"size_decoded":11208,"mime_type":"text/css","magic":"ASCII text, with very long lines (2579)","md5":"69a92ced4b06d260f6d34fffb0a24fbf","sha1":"814fc04589077c01574a16b388799ae7c5557384","sha256":"04a6e15ee437eaab1e629a1a668a638f0963293a1661bb43de4106e870a15de8","sha512":"b81e2759a9ef8fd611c82c2224977eba52c08d30c981e6dae57a962f0884d70c4a78b2a48e2bbbd6dfa180979d73fa460bb3133baeb0660657e045f822422c5c","ssdeep":"1536:HzyNdabXEv57G4IXrT0qh5hsIkkntkIYN0dkU6ZvmH:6eNr","tlshash":"0433e8e523d0b33cbc33e7119fe8579e9114a261da234affd991363449c7bd229b2258","first_seen":"2026-09-18T10:10:37.97362Z","last_seen":"2026-10-08T16:09:03.767237Z","times_seen":8,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/291.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.357Z","timestamp":1791473432357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/291.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FucYBkUQ0oLo%2BQNPjvcgXgFIGDkxQI%2FGLANudkkCA7MG7NeoPd9OZ%2BPoJ%2FQHmjvMeNztqUT2ftFdSPLHg37w0iwaox0r2%2BEuzroZnE72TVOCsjHpyfzT2Nd9ii519s%3D\"}]}\r\ncf-ray: a4762ff83b0256ca-OSL\r\ncontent-length: 628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1751,"size_decoded":2545,"mime_type":"text/css","magic":"ASCII text, with very long lines (636)","md5":"0b0cbeda6698eb33ed6656ca4a70f5b9","sha1":"a0299070cd0fd5a1dfcfc8d463ec14c31ae0196d","sha256":"f416926761e52cdbaaffafd574d0401cc5d94255d4d8ba3828b2cb93a315c3a6","sha512":"d591952a53da4aa1977ac5fffde488d9e99b9410679efc4183ed1764dffe11b25ce1bdd9c3545e5aacc2049d895904c8c9fa6e2a83d8469ab4fe0e94125cb117","ssdeep":"","tlshash":"ee31e03775f02a1c08abb57cb9ca51848531c425dba991b47578cb304ba718b2b3989f","first_seen":"2025-11-13T20:36:08.37541Z","last_seen":"2026-10-08T16:09:03.71129Z","times_seen":18,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/grc","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.485Z","timestamp":1791473432485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/grc HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcbTKArxiK5Rjv7PiRICH0XmTyg%2B%2BKC0qVa6dkuicpN6%2F6hlV6tUquBdhIEkUkbkI3KGE2heVsdGdei8pJECDpIuriY%2B%2Bj1hsaaUsZwD9P%2BGj8Q29FOU1NpdXn2FnNY%3D\"}]}\r\ncf-ray: a4762ff90b5456ca-OSL\r\ncontent-length: 447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":447,"size_decoded":2208,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"a430f2568122eb31b07d54600e61b9f7","sha1":"6953bb26728af2624712b5f29949d9b1e9b3a639","sha256":"995edb326257a84c925e23cd1bf597c7a26d7f0dcfebc6622df5ca66f18e45e2","sha512":"ca120d17ea3b8c7f20ce15d6b915db4ea134ea3ee7784b91a24a9119353b8096bf332e2d133999203ddfe9085d9573421258966f73e76ee006ba0b729d1e10a0","ssdeep":"","tlshash":"89f023653a3e3cb744388a2780152b19c23db030311e85f772d2e878043175fe1014eb","first_seen":"2026-06-13T01:50:07.874091Z","last_seen":"2026-10-08T16:09:03.63672Z","times_seen":9,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/nzl","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.487Z","timestamp":1791473432487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/nzl HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkIpbqE2ByLJZdpsumZGxwH7wKMZZwi5a1%2B63V3XCGIE4mCfLjSI602yhzfS6oInwbtTLtCaqRU9jnrIR2b6FjdKPdh7aZRGHLCWWveazb%2FYyuQ6wjYEzUR2Ey0D97Q%3D\"}]}\r\ncf-ray: a4762ff90b5556ca-OSL\r\ncontent-length: 1416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1416,"size_decoded":3170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e600a6ead52d772485eed990cd296d74","sha1":"2586284f8c711d3425b1fccdae5b0bec7e044ba7","sha256":"c4a20d4ed8ed22ef760c7eea0d4bd99fa32c22632fa157be9311b31c9a1130e0","sha512":"ac725e556c2483849bdda677a1edb0b16f9ea46b8dba12844f074b53033f8226ae71678766ce31031e693e80c497acb717c2b42e01b24329c8f263ef6030e580","ssdeep":"","tlshash":"8d21b9c5dec871508d94b1af298e934623152c6b674522b9960308f055f46ad4f44de7","first_seen":"2026-04-29T14:23:59.748156Z","last_seen":"2026-10-08T16:09:03.665853Z","times_seen":11,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/are","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.497Z","timestamp":1791473432497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/are HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcB%2BYpboHnWw2HqtZOR99hvHl8fhREeauye6CeBLaV%2FmrL8NMELG%2BNkoCNwzEsKdWMRc9%2FA1Jd2iunyhpHaLw5NqM89h5YH3UtE98EMhuCc1Y5vg9N3VkB2o53ppye4%3D\"}]}\r\ncf-ray: a4762ff91b5f56ca-OSL\r\ncontent-length: 396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":2153,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"811e54c6af215d8a4be2e1644ab1531c","sha1":"de9fbefa43d31bbfd5db254128e2571133e9c633","sha256":"5c083ccda4a276417097b65dc1f9a9a105a5717374db18db26dd2248525cc8c3","sha512":"9f7de0224db4a260f1154f1be4882e39ec2b9ff5da830a590d4229fa3523ecd5a8521a51e49541b49cacd83c79cd50daf144ec2aca371e473e630c1feb6e6e3d","ssdeep":"","tlshash":"52e0f1f12f957b6cd6744f5955ad02a62ed0006c31b1c180410be01a1d69a4c4f33713","first_seen":"2025-11-02T09:23:50.20841Z","last_seen":"2026-10-08T16:09:03.58785Z","times_seen":16,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/kor","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.504Z","timestamp":1791473432504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/kor HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmFOFr5dfVNK3y4P%2BRr6qC4ke0pzew5x%2FaMco9puwQCtxapIoIj%2FGviifki5Sfbzb47ApbOwb%2FSeGaMfoyrFf7xCy%2FstjQtkt1P4n7x198RhwptlIGVGg7tMoaDXJhk%3D\"}]}\r\ncf-ray: a4762ff92b6456ca-OSL\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":3140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be4c498f72ba6b8ffed1338fde2ef120","sha1":"afc4992fb630b36993544cd70a8c04985cb7cd74","sha256":"7858f8e4046033efc9ce09d10d32b3a3e9f0a181a8438cac05762ad42570c33a","sha512":"88ba67ae4336040085f1e2ea122487c62bfea609bcab52a153f2ceb5620a6a35a78b3fdacc71528d444433adaaaa12847af8f827168cab2f32f0284ca14fe63b","ssdeep":"","tlshash":"882108211bf050b080eeec54f1c062848b7c78e5c6423bdf8934ac58ce6ef7124a5ead","first_seen":"2025-03-10T19:15:00.544691Z","last_seen":"2026-10-08T16:09:03.639311Z","times_seen":14,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b0b61e4-bf5e-4ee8-a328-04d71816f48d","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.588Z","timestamp":1791473432588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b0b61e4-bf5e-4ee8-a328-04d71816f48d HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vszPIfe%2FxwV2Ubq6CxOJLfkqMr1g0HxJNsmj%2F0B%2FbLjoWsLMz%2BAAIFvqfxzpUlKgCje9Bbno3UhKe4nBW6tJ1XHRy7sLWgZoYN%2By%2FUHSgZiwxv0IL%2Bw%2FBISt8GFj7KI%3D\"}]}\r\ncf-ray: a4762ff9aba456ca-OSL\r\ncontent-length: 810\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":810,"size_decoded":2611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7c3609d9d5a37accad369f76d6f1ba8","sha1":"605d8d2bcfe93c4e87235c55a06d637e2bf89cbb","sha256":"d22877a62cea1843f6d9b0c54430907842ecdcd03ec1092dc77a0120fe9bdd77","sha512":"98704aa6ab65b777289158098112d8113309923fcdbf36b9670b20d5af5dfbefdabe985f0ed7119a878788dd14e1905376b26001bed43734ee82c6df1a1530d1","ssdeep":"","tlshash":"a1018634870bdcb898a604bb095725765cce242de99657f31b0019464d87dc405e1500","first_seen":"2026-09-18T10:10:37.808039Z","last_seen":"2026-10-08T16:09:03.674237Z","times_seen":8,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-super-sticky-piggy.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.698Z","timestamp":1791473432698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-super-sticky-piggy.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tzGL%2F00X51b7MhTCKYO8pswCKdtkEy3BMRdrl0ifhg0rTGcMytjhYnIcQosG5DcFbqRmW6QsGbOrlmY1BzqGZwdvnElCLJz%2B8S5I8W9AHK9S7kTdf%2Fi0OhicOh0hww%3D\"}]}\r\ncf-ray: a4762ffa5c0156ca-OSL\r\ncontent-length: 5676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5676,"size_decoded":7543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ea4e1622078fd69bd923306c123c455","sha1":"3b142b8ff5835787674699260b89e37e441dbb39","sha256":"66258414ade65644886661b3ba7dd7beb31f9d93d028c3d845246db1470264b4","sha512":"b9c696eb10defb8bd5df9e9561850cdfcb3e5ad7fbc5586728ec9057590ba46bad7f16624766ccd72a57f4c7ddab495dcfacea9feef375f4c2c21f62c80dac4e","ssdeep":"96:rGhpkGyKv8urZpC4t3W5vd8j4LWqe0tV0Y+PJoB/8CUoW+20ORBn/:ahuyv8o7ZK8j+1X0Y+Po0joW+20WJ/","tlshash":"5ec19e3f56ef6d849156e8c8b758c87e701a7b940f96df43324c26d1ac0ac4f966b09c","first_seen":"2026-09-18T10:10:37.832602Z","last_seen":"2026-10-08T16:09:03.6694Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d45dd58a-6609-497c-9079-80190d6ec241","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.592Z","timestamp":1791473432592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d45dd58a-6609-497c-9079-80190d6ec241 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MV5sNDLPbsa0l90eNDjwwufMgVwVJHnfSPh6f5zduMi03K5f%2F%2BcAlyaUXvJwJ1wOny2jxWGKhOs%2BL3hz%2BUQVRDWp9ZhGyc5YeUv8Nec0BzWZSuIo1xj9RdKFk%2BvWQIw%3D\"}]}\r\ncf-ray: a4762ff9bba756ca-OSL\r\ncontent-length: 1146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1146,"size_decoded":2942,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3be276653a8e6441e387c12ba230a355","sha1":"abc84f07a640cf8c58123ae652fdfc6965784000","sha256":"2af751b209d72c8dc6b78aa74a534adbdedeb1977f251b4724b95a709423b487","sha512":"32f971d932557c0ea67c25bc89bd8040eedef51c8b0edd74119bdc44ef1ae31a1121318f8e47d08bff35adbf6b3093ab6e81d12dee1888b6f5ea34bb2b100790","ssdeep":"","tlshash":"6121cabae560a5f0e452e3855cbe25c407bec8bf150d8843fd5bb4c404f2d166e220c5","first_seen":"2026-09-18T10:10:37.872758Z","last_seen":"2026-10-08T16:09:03.752442Z","times_seen":8,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/131155-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.718Z","timestamp":1791473432718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/131155-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xSmuBEd9vwRYI7N%2FlxuG5WQ4VE1qgi3wnl97ZdosKK0kGJGiqZCb0W8lpB2tK49HzKB6Ro1BvHnhc9j92mWdlc3CGKPdqqS96LUgKd9b%2FI6j5%2BlT7V8%2B1fU4hxQ6isQ%3D\"}]}\r\ncf-ray: a4762ffa7c0b56ca-OSL\r\ncontent-length: 9392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9392,"size_decoded":11150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"233103dca05ed5ff8c698aed1c943b5f","sha1":"663238fe2aca4cad25eef105a762d12d13fee2ed","sha256":"3648c8408b503417d24502edefa6fe733b6a906e59a9f7de83fc4f1b0e01e8d2","sha512":"a63ce8e6aa2671c0a416427470268db7c6e3a4bb254f2bf6199c6f1c6d648c689c2743f36b951f92aba4edd1938fe23594b2c886868751b458c477cc33004522","ssdeep":"192:SVBu9RrYH7lwjWrN4yXorO/SHjN/zytOAAyVn+x30pZT4u8G/:SVBu9Rr6RwINqpDZhAAyJ+WHT4u8G/","tlshash":"6212bf9099a04017336aac794b77abdf34050066032a1e0f6abc5dafd8985ed3423bf1","first_seen":"2026-06-18T21:04:57.694487Z","last_seen":"2026-10-08T16:09:03.770209Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/52923-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.785Z","timestamp":1791473432785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/52923-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DJjIg7ZFCKtIQlVxW1REB1VRM1MZHT8dAfjIKfsqPAWpSL9x1rjjKrwq%2Bb%2BAJGbYAvwTNsfPtJE63r0XQN3wWP7gJyssE8EBCV22u5OJcEsvOOUyVaZ9rFxq6i89C0%3D\"}]}\r\ncf-ray: a4762ffaec5856ca-OSL\r\ncontent-length: 8398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8398,"size_decoded":10152,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"beac2c220ac192c9aedd824af1899d56","sha1":"b1a10d1b1761bba0065e5d0fa2bfb8cee809ed59","sha256":"556ef85b066cc023bf42bd8cc8aaa3025ab5ad9696b02ea045bbc265ac3d689f","sha512":"f5a7f03d7db2d68149d2de05eb68375e7c8664b7cbd33cb7a45fc143790e01a5daccb8b1b2bad5ddf483ab0001e1b03c3a5f460677707d4d2d445a13a3b7ae78","ssdeep":"192:IBA6AWBJGYf5PJ/sDDlCLIAn6NOjUIxSX1hqd+atYnG:x6AaJGY9huRFKMqdSX1s7tYG","tlshash":"5d02af4adde8d89655c1b94a74e37b09a458a1bcddc052e85cede0481e433f37c4cee2","first_seen":"2026-09-18T10:10:37.786908Z","last_seen":"2026-10-08T16:09:03.597551Z","times_seen":8,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/59838-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.805Z","timestamp":1791473432805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/59838-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ciz49hXDlHhj2dPooAXnunMEQ2oJZfqMOcpRmWUZqp%2BL%2BOZIUyLCxbhnYBLDTMr2Eok77yv8oA2rdiKPdJvP1mfCjq3QirO%2Bw6MFpnpnaJtvbW3IKZ9JigsgNB82RhQ%3D\"}]}\r\ncf-ray: a4762ffb0c6756ca-OSL\r\ncontent-length: 9478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9478,"size_decoded":11234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4386cdd686753d942e1459c8daf63bf4","sha1":"35dbe362fdeee3eeaec2760c1736699037bbea8d","sha256":"531b76266dc8fbd3f79be139eed32d82bc0b3048ec5d098276005874900fef41","sha512":"b377ae6f48c98617edb558ba5fb0e3d0ac46fc392d8a7513ac33f9ae896f713d93ca5d2b75d050e299cdd815b9a2abdb6546808b15faf81937bf9fde5b464617","ssdeep":"192:e7siIJAJvQMkVse87VB5T638U0XAPwSxM+ntK4G8Bp:e7TIuvQhsD7VWMxXAoSxztCMp","tlshash":"c612aef46e1641de316db219eef05ed092867e18314bce33530536abe4867a618ae1c2","first_seen":"2025-07-06T09:15:48.832954Z","last_seen":"2026-10-08T16:09:03.742036Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-admin/admin-ajax.php","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:33.743Z","timestamp":1791473433743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 41\r\nOrigin: https://pari24.co.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":41,"data":"action=prj4_track_visit\u0026ref=\u0026qs=\u0026path=%2F"}},"response":{"raw":"HTTP/3 204 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\nx-powered-by: PHP/8.3.35\r\naccess-control-allow-origin: https://pari24.co.ua\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DG35pIOWD0erNj12c0XbYlLBJfb4CLtrINwXp2iVEBLbcwmsVNpx0OoUrAxzoE8lfiqsGE2H5AcrgmYWRlwncOrs7w3AiC6Qq0a7BPEPBE2GkdPnE%2BYqmRU0GFWJTk%3D\"}]}\r\ncf-ray: a4763000ee5856ca-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":2498,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T15:30:31.048Z","timestamp":1791473431048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.35\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlink: \u003chttps://pari24.co.ua/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://pari24.co.ua/wp-json/wp/v2/pages/146\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://pari24.co.ua/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78yr%2B8MD4hn3gSI0XrhqVql2DsFX3czF%2F83rBESx70iRc8jSbhV9Q5nfCqp2PMRF7qYriPmTbTjkPL6jHLs5FTe9Vv0meo9EFIcE%2BvvdrmrvW5Dv3ApKybfs33IyIs0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4762ff1693c56ca-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":1012636,"size_decoded":99019,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52162)","md5":"110cf686130e7d3bfb5fb98af75cd9ab","sha1":"1c6660a817908220840678dcfb50962c9192316e","sha256":"c35f7c000e5b170d270c7ff9f01b0b0c738687374d6b0906c11e50540b306af0","sha512":"1c55deac7ee0be0440aed8b0c5526b2ae1cc739cf6549c514628a01335fd66f474d622aa292bc8f13e28b00cde1ae72a3e8817669403ea92df6ea625232c5f97","ssdeep":"3072:6o8Lk0SeGR0kYFaCGO7She/IB4VhlLPWTNlZk7iABCd5Cn6Fbw52/zZsa0g73ZFz:D4bGR0kYFaCGO7She7ihmCzZsE5","tlshash":"7625716873f16a31b33b86f879a73b19209af1d8cb0389d491f0f6e446cad67e6d0154","first_seen":"2026-10-08T15:04:49.104967Z","last_seen":"2026-10-08T15:31:13.372612Z","times_seen":2,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":198,"connect":22,"send":0,"wait":556,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/bel","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.472Z","timestamp":1791473432472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/bel HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PN7jpKYUFPo2gXfU9bh%2FoasNET3qg7IY9AuXPxixrho0tfhWa8HHl69Hps5qsebZuZArDlQIDWX07ckSCeUAiYJ8kOcBG%2BPn%2F4ymIfi4le51pdt%2B9E84dCKJWBU9Ag%3D\"}]}\r\ncf-ray: a4762ff8fb4a56ca-OSL\r\ncontent-length: 234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":1991,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"641aaee304ff662b2fce82c9e2241f25","sha1":"e6085556ac8361c4b58cc9463d20431777372034","sha256":"bbd9ac1e8c76cc49012c3813b431f874735a5ced412b668e534508d21e95c234","sha512":"90fb076cb8b232f4b1bfee3998f357cbdf4eb9ba8f2f8465ba5a458fa7de91f2e446142778cd0e0c6e8a74bb42576c345164d93771519d2e40773cab8b856436","ssdeep":"","tlshash":"02d097208c96ee82b5c248f142b42cda003310e491d0aba7ed0884474960e108367f81","first_seen":"2026-05-01T06:40:25.239537Z","last_seen":"2026-10-08T16:09:03.561984Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_telegram.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.547Z","timestamp":1791473432547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_telegram.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMfXD5H00z3fO0P7YLyoOYga0Eukvwcqk1iB1Z6iN50QKhjzVNx9O1vXWNGuda3DiQf%2F9h0Eh7cBi9%2FvwVSr%2Brt2apihnrkueqYjS8mw2v6hl8CmHNX%2BVkasCEjY%2FSw%3D\"}]}\r\ncf-ray: a4762ff96b8456ca-OSL\r\ncontent-length: 1792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1792,"size_decoded":3663,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45afc535508ae4dae3a043abb1387db6","sha1":"7f3d8dda59dcb79c517df2807e44c10032300c8f","sha256":"0ed68b212ed2e48acf8d93e3c2b0d1527cb8e799bb0a0e65494edfeb3d1b7481","sha512":"4e8333b576deded70e031f7eadee3aba49fd94838502bcce632ff37b567ec94a0fcff9b1358fd89235896f0f2c8fe00d43ece4078102b7c153b062eecdb9220b","ssdeep":"","tlshash":"02312b1e214fddc09a053a1d46f17c7f51e231778ae415e3840b3688d26cc8d70d23ad","first_seen":"2026-03-19T22:07:43.413912Z","last_seen":"2026-10-08T16:09:03.599245Z","times_seen":24,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c49d12a9-55c3-4840-a89c-fef2d2c93125","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.570Z","timestamp":1791473432570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c49d12a9-55c3-4840-a89c-fef2d2c93125 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sraDXyLE9f%2FB8Y1xCyySG4L8S0EP6EqZeWl1PGnuj3yhmQdI73%2Bwp8KMCcPc9W%2BCt0j9Js%2FlqWXyUPVaWCXR74ExlLDU%2FHfIK%2BSaTi4h0DaSbBBTRjmXbv4GU%2FPfGkc%3D\"}]}\r\ncf-ray: a4762ff99b9556ca-OSL\r\ncontent-length: 5060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5060,"size_decoded":6860,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ec8323dbc956132ad97db380d498b91","sha1":"52da51f5a1ffc84b4254fb66d96fefc1ec13e9c8","sha256":"d4cc348114848bf55a5dc4f1e9c5ae85c4ddc39bd73733501b3f74f7f29c7cd0","sha512":"cc8405b62b0b121c63003c7d9eea274075bf4e51c2569e31fbf5f4ea94ad017d873fab57bef744956721521ddd125633135f0e4b26120b1f1ad40459ed190984","ssdeep":"96:WoT/jCUClJH8XQ7c/B//Ce0OJ8hRxNdRFB7dE/4Ql+dMOL/JJgydrRcu:1TedH1c5/qeDMxNfFB7dE/4QMBBX","tlshash":"a8a16c9884b6458db873f71c68b16969b6ed08162f570ecc1b30218d08f7ef25766016","first_seen":"2026-09-18T10:10:37.932669Z","last_seen":"2026-10-08T16:09:03.612558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/cb074165-5744-4e91-a3d6-0e3545709b35","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.589Z","timestamp":1791473432589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/cb074165-5744-4e91-a3d6-0e3545709b35 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6nKmQSbViB%2BDhMEzPQXLSrdPzoINPF2L6YeaWEI1nFa76qGus5pxGJIls7WHlXneZmT3AT5bRmay13YdzBjuDbl%2FeYSCafhFXk1MyjkzByAnUXe4SNoWSO0znA5AFA%3D\"}]}\r\ncf-ray: a4762ff9bba556ca-OSL\r\ncontent-length: 844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":844,"size_decoded":2633,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c4e89c37720dd6994954e070db1676ce","sha1":"105b034e0aff088e2a2fe61499a7c7a2e5709624","sha256":"91b6895f148ea6a4fae968acc37774f46d18c9c48ed2b3ec1b9e54416086fbef","sha512":"db7258aa97e56cee6799e37fc2b182776774b4789101ea86924246350463b8b9444de0b322e403809728c5fe320381cca5ea8c09c498ce3e6f0c7575cc3a76aa","ssdeep":"","tlshash":"2401867352c6088cd0bbd214ba6fdb2c3cddc8578881d8f66fcb467b52044166b78740","first_seen":"2026-09-18T10:10:38.03561Z","last_seen":"2026-10-08T16:09:03.667079Z","times_seen":8,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike--hold-and-win.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.670Z","timestamp":1791473432670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike--hold-and-win.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovrI0UXjqn55QoTQCArDPSAyKcwdgkYmXEn5JT1twAD63caKBf0rGU2KlhetWTxVh7ajLvpsKG5L9t54H%2B8439ooGSSNlg%2FSkL%2BpBP26z23wsmn2EfgqXsEV%2BLUYh0I%3D\"}]}\r\ncf-ray: a4762ffa3be156ca-OSL\r\ncontent-length: 5870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5870,"size_decoded":7739,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1124891b9191a7910c107d91287c7472","sha1":"e014dc8ca03ad574c84df9694b9e13c7981978ae","sha256":"d1fc327fb56d418e00d7ed1d97077e736f39bba40b393085ee5efc77825fb9aa","sha512":"baa20d7b25a4c8ccafd69f0703c8c7abbdd78fdb6b86fe3cb0f94914d74f3717be4a4339818cf93740e27d1f20b3bfad7ab2fe8fd7ed6bdd9865b8a1682a80ab","ssdeep":"96:7NGAnKHNZUqfIov3ybpFhoRZTgJXzCMhianonFLvUITkeZoT8l+6sQIva/PT1Fxm:RBnKBw03cSR5aGRdFLvUkMYxqa/5j/f2","tlshash":"d5c19ea58159bac1746386f1888d631e447ef22d4fd80dd8e3ebd3191729198b5fac23","first_seen":"2026-09-18T10:10:37.75785Z","last_seen":"2026-10-08T16:09:03.600439Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/52052-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.794Z","timestamp":1791473432794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/52052-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OryFUwvdT%2Bf%2F1o6GxrBzPVTpflP8DOGIUndu4GNzhk%2Fz4tdArQMuZN4lkSB5%2BfTXxu0lRhn2p67M05Q9FO3YkPxQq%2BW2l39D5Wch2ml2ZLRNMlrvRcWjACzSvAA0UtU%3D\"}]}\r\ncf-ray: a4762ffafc6156ca-OSL\r\ncontent-length: 9038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9038,"size_decoded":10798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d86082ecb9ea2614a0585a77fc0d513e","sha1":"1adfd2130a9efb49aee98f667b7fbeca75355cf7","sha256":"19c4bf154568da1b9fc0aebe2cfccac795e9701db92bad9ca52529f2cdad4d3c","sha512":"d1fc853bed0d1f11df66b630dbfebc420f95322d064914b51a4d5b0fb02bc95c017c50f5224e70d7c0e609c95572072917bf305a92b47810b7264d10cc60d5ca","ssdeep":"192:M3CVLiFyRbHh1Flbyl6LDmOrJ3rBi493KJaMsisrR:M3wH7zbykLDmaJdCJdc","tlshash":"0b12ae747ffcd22fc75e01b9809027b6294907a9ee8740b88aa5c8d6513268f1b43db2","first_seen":"2026-09-18T10:10:37.994746Z","last_seen":"2026-10-08T16:09:03.677898Z","times_seen":8,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/148657-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.807Z","timestamp":1791473432807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/148657-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkxn5ZI5OnNA6OW2zKdPzZW01x2bcHczote%2BPDGZsmJ%2Fvge8mH8XwKzKnepi81sse5qakwzq9Lm255m%2BM8hjXOJ8wf88DEpCDj3Rs4s6C%2FaVzMT6gLe34qLXb4aJflg%3D\"}]}\r\ncf-ray: a4762ffb0c6956ca-OSL\r\ncontent-length: 7618\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7618,"size_decoded":9376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d79d891b45e822f099c68b66c0ded01","sha1":"e837b01063d77860cb4807f4f1170924aa350720","sha256":"8c78b67866acc926dc3996b22eca56b763aff1f2c6c0e361c8f494849d2642fe","sha512":"aae345826a24f7885493dfdf21c1032384cbc0c4a48d91b3f09fd7211027e72f57f988d04f88c162028d94b968afef8b5f270bcae061f5b00aaac895e0138373","ssdeep":"96:clIOe/UYq/jJFkcfR6ENC8KR5ScLdrWSoum7pWDLOD+AGM2UVedeNSCMAwN9/6H7:QIBnq9FkcRbM5vLd6npW4+nQXu660/1j","tlshash":"3bf18dd9830b985de822b66621f660619432d88f63cd1de3bd4b0271c387ed0e4063db","first_seen":"2025-03-17T21:32:27.14789Z","last_seen":"2026-10-08T16:09:03.583475Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/nhl","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.489Z","timestamp":1791473432489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/nhl HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ln91FUOqZnk0HO%2B4szp%2F%2BqqX0bIGjygBXe5LGpsIg2XRQAYftcryoO70xAvdNOftzmVSxE1KBL4S4NuTwDVRuwrCQSNQYOR2s0NVvstJQurbwuk0xzipMB1M4wNPhJI%3D\"}]}\r\ncf-ray: a4762ff90b5956ca-OSL\r\ncontent-length: 10837\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10837,"size_decoded":12594,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c6099c5e6fce652ade44eaec7954f4c2","sha1":"9f54fd6f4c5c610cd6f70504c85d3dbd315a7a50","sha256":"9623a5bc1c0134ba10f7e32b6b3f2a3a36bc3b806451fa7db62b62bf652341c6","sha512":"eb72b715c93dc9b124ee64986137dbee28895303c19e62889c75fe9b487c017d494e165bfda35e6aa0a99f2921b017e917f197819bff88c88091f6d5b494c169","ssdeep":"192:wSzNy+E44C3vdSehboFrdClgyt9b3GM+zwCQpLdkj2z644G5ti5+01ygMP:Xz3EXC3Fjh0B0lT3V+zwCQkrDWtBT","tlshash":"7d22cfad608c6e35a7c6dfa4d20a3fb073352dbed0741a2d6b4f148fb619576d12a080","first_seen":"2024-06-03T05:20:09Z","last_seen":"2026-10-08T16:09:03.547767Z","times_seen":88,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/pol","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.516Z","timestamp":1791473432516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/pol HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUGFu778tUyE4OEwHh%2FSD9HTpZ%2FSBce%2F4z5BKPp%2Ftf5y%2B0aBsze%2FWo2%2FgmiDOcTV8aduSeeTfNNmpUdzrwK39j0KWntCIEfvLyJBkiqSqSlqtMXKC%2BXFvk7IiItpHAg%3D\"}]}\r\ncf-ray: a4762ff93b6c56ca-OSL\r\ncontent-length: 262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":262,"size_decoded":2027,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15604cfa8885a8ed774ab27f0ea8bcdf","sha1":"2bf74c04825be725995b086c444109653bb62b11","sha256":"1a25a5ea1e22091e2f1b72ee086042257b04ddad72d94cec224c83c2b182fe91","sha512":"074c49cb9fcc33c1b3401edd82d49158292cda4da226333f7a58e38facd7fb4ab0705aca238bb315c1fae11cc501fe8ce543ae7c6ce3bb1021c55e883c7a4b2c","ssdeep":"","tlshash":"a6d09517af6c18e9b939e57570cadb7551060541d0553c44d9d66753c4740b01f416ec","first_seen":"2025-03-10T19:15:00.423866Z","last_seen":"2026-10-08T16:09:03.71258Z","times_seen":63,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/srb","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.518Z","timestamp":1791473432518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/srb HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcNdaVE2fRNudlj3NG1Q3D7JPP1vqEGTsakkZG%2FOpA1rv46n44AYzoA9S%2FUpDzW9%2F%2FBd2RSPM0OVHt6l247z129sZYyM6M2H7NpMux2Xlzz3JlX8K7A2fZQhLxsPla4%3D\"}]}\r\ncf-ray: a4762ff93b6d56ca-OSL\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836,"size_decoded":2593,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b0b27df35cac20673d97414dcd42703","sha1":"1dce6210cd5b2702cbd6c0dd58e1c6ba3e12f0c2","sha256":"e72bb92af82173356ba89a7be3382584072d0deaeac5e225323c20a1851d91da","sha512":"1708dbeb944355d6499195786b71b8fb27ac1ad58249163004bf4497c42d3e4a5cf25e029e1ab6d187678d206436f32bb4ff77e3d5ef7a017410892b75ecef7d","ssdeep":"","tlshash":"930156d32b4511468cc2f182c274cb1d2ea968ae2d5785d1e5e83f622f352528f85117","first_seen":"2026-05-01T14:15:57.839495Z","last_seen":"2026-10-08T16:09:03.589473Z","times_seen":9,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/aut","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.520Z","timestamp":1791473432520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/aut HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxsmaz%2BoZEhL09sFsVWIaqjw346DRgEEAc%2FDfNZaRgA6KKlr1DWUkpdoQw7ftTIC7lM1DMQRUhwVAPeYManlsWpc4iLhOphzYoT6TKw5YLRZZFjPux2yk1Q83ZidMuA%3D\"}]}\r\ncf-ray: a4762ff94b7056ca-OSL\r\ncontent-length: 222\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":222,"size_decoded":1975,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52e2da4df98cd8b08de20a29abd8ff40","sha1":"fbf5fcee729144518f73050c871ab6900b5310d8","sha256":"d4ed90dedc8c9894b17842228f1d955024a80143cdb04a7c228d9aa405bbb7d7","sha512":"4b44cc1e87ec59dae4886c6dab054ea82d722e1f929c1c03fbd62ec8b38e7a593e8747f8c4272fac51c76dd23330b86b49cf65fac598d3e120e670e14c3500d9","ssdeep":"","tlshash":"e4d02370b74ed25a7228153630d4564b1119740f52c275d6d7767df0d9d0340a16cf5f","first_seen":"2026-09-18T10:10:37.815514Z","last_seen":"2026-10-08T16:09:03.605875Z","times_seen":8,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_instagram.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.550Z","timestamp":1791473432550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_instagram.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vPcFlbkVeSxUG8jkLUmuF9ONE0YdwJFZNG2RvmUA5brGLwsWbI4mThN3FhFDemGbpPAgwScdSDsSKJ2jB8vhDkBY2lOjY6TAaXhjDtiIPTAcv%2BJuI%2F7TCfmLsUlasM%3D\"}]}\r\ncf-ray: a4762ff97b8856ca-OSL\r\ncontent-length: 3084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3084,"size_decoded":4949,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7a1707b30f2445934bd82e242a90f09","sha1":"45046f0ed49a2fa83b2ea734f02ebaaff28d3ec5","sha256":"3e0be502c5681334ffdd86d0fa5cfa7b6e4b6bdbb310e478acd0c660708e9fa5","sha512":"791e79914db92393b8b26946c781d9733b0e96ac564edd31029e478d00b77794f4408bfc58649d82472b4dcc909c3a8b370c0235bb590cd17df7744a1cedb6aa","ssdeep":"","tlshash":"35514dea74d0cc3a32623571387f75ad4601587a0e1efe82d5e8ed0507f586ab1f29c1","first_seen":"2026-04-29T14:23:59.941095Z","last_seen":"2026-10-08T16:09:03.750015Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7bee5464-b58b-4479-a37d-09cdc92df0ed","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.573Z","timestamp":1791473432573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7bee5464-b58b-4479-a37d-09cdc92df0ed HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPF6XCduzv%2F%2FH5kTv02uM1KNFKLw4dOiLifDBw3mZHAK6S%2FlGV4tT1ypXYGZUx1tjjlTxJG%2Fv3b%2B2Mg6JGfeYLlivyxau31Gb7D%2FmrbIDi3yMqiqbq%2FyUElfL0cx2kQ%3D\"}]}\r\ncf-ray: a4762ff99b9956ca-OSL\r\ncontent-length: 10878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10878,"size_decoded":12679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9828f946e7ac48d24b5e1933056f888","sha1":"c13a723539742bad12747a73f12a3f43a0c52603","sha256":"16b166c79ed7b091c2db3b33bb1f58f232601f30cf82aaa29aa8cbe0dff41bc4","sha512":"2d3929afdb976a3742f443f1e00e2f015222da68ae697b1ff3f70c3c11a6fa75a110d94fdd4e35697cc2941607fb9be638b673538f6adede1cf1f7f730998d18","ssdeep":"192:Wp9jZf6xVLD4CqsTg5WIqzDSMK1f3ayJjcS6vM1OTaPYQ4MbxFck4ml:eY6szDSLfhPD9P+Yaa","tlshash":"0c22c0b202d46e0a2fe591ed3a31909a806ed779f17d0f763a52c376b14858472fbec4","first_seen":"2026-09-18T10:10:38.020686Z","last_seen":"2026-10-08T16:09:03.682379Z","times_seen":8,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a09b2eb8-f861-4e12-b707-6a6818711f09","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.585Z","timestamp":1791473432585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a09b2eb8-f861-4e12-b707-6a6818711f09 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9JtfnGQjyIiKctcGu7U7GwAO5mte0JGGMcX4IureDJjvoyxYqk6uiwbSyRDX9neD6QgCiVToqiQ0%2BMZZxMrhcEUJYSWtBW2q%2BiX3jhiSGsxGAZEeRwVVUAzhbfs6iw%3D\"}]}\r\ncf-ray: a4762ff9aba356ca-OSL\r\ncontent-length: 14118\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14118,"size_decoded":15909,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4eeb97f5c42f4d502a234783fdfb6e2","sha1":"fcdef3d26f1c14d53b7746ad2670a2db5f3d5aef","sha256":"85d08f1f0cefeb167ffe202746714854a836c3570e6cb6c6d50521ea35c638c5","sha512":"76f024a3073db3df0493d74ec6c629a4e27c5137cd5ffb0e0d0c1daf784d372c7fd131090258187dc549044090d86bbaf0933679a048a6f0b58d0ef55dc7dd76","ssdeep":"384:zS+RShBFXiGguCTds1t4AgabHPwaXtzpw5He2Y/6are:zS5hHnguC21t9XIatzpw5He2Y/6aa","tlshash":"7452bf6a5c9d17fa8b2555a22659a0502d8cd355d90b0caaf7d93e383c30437e1c8abf","first_seen":"2026-09-18T10:10:37.755457Z","last_seen":"2026-10-08T16:09:03.732546Z","times_seen":8,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3455-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.624Z","timestamp":1791473432624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3455-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1m%2BVsEScTv8ZbfuDv%2Bu886qD0%2BATHvMpNcRtV20x%2BPcJdIBU3KgZmgyrQgcfAN%2FhBrN%2FuzWNC9IgeWbxPtXNdTksRMqRvrlWT3Bvr64NOqIky0CfNqpJY2aKLfGjFk%3D\"}]}\r\ncf-ray: a4762ff9ebc056ca-OSL\r\ncontent-length: 15472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15472,"size_decoded":17235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b160ad9dd350655e6d909cddd328644","sha1":"81bb94e3ed679306043def155d3b54b9d38796d9","sha256":"d2194948abbf7b13236a1f64e3eddb7017986de4c7c0e5c0c8fa35ea346a1972","sha512":"c3dbd9019d5c57cfce2ab89ddc98a7ed0b7c88b8497818a6c945297ae3ae33a4f2574131f21ac160ea8ff520fca3abc766b6399c55e3dd83a3eb87517e1686e0","ssdeep":"384:a8fwmy0IYfgkAR3BpViLuvsySXmBa8S7vBYBqG5wLu:JfhKbVBpViyvs52Mu","tlshash":"5a62d0eb08a35336ea97211e68a6d7ddb0182e4594f83edc312c240335bbd9c714cad5","first_seen":"2025-03-05T01:10:53.86151Z","last_seen":"2026-10-08T16:09:03.552841Z","times_seen":13,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/19374-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.634Z","timestamp":1791473432634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/19374-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhRFOaIQ2vyWx%2B64E2Uj5fKEIY6R0zg078QgUvYnDg%2BzJ05LxxafGal4OOpJC0dpek7ZjSZjvcSLEH9rPPCYI%2FL6%2FdfR0oOEeMoVVLrSPdNzTPT1yFD1ugzctYUkZNs%3D\"}]}\r\ncf-ray: a4762ff9fbca56ca-OSL\r\ncontent-length: 6896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6896,"size_decoded":8654,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1704312ff80fd3c674324b5051ea8aae","sha1":"a4508b6350a7166d22678a9dbc8b2ddaa950315b","sha256":"3aaa5378e8b1fb3de5ca442c11091748ff1b5b40f231f318c178948ee5d23e6c","sha512":"fdbde8a0ca18c289ce8fd59d2caf30003bc919d421951c281812b05258919896ccc0b9d95534533aead550ddd5c96289ea43d6f82f849a584315483ecb7a2b06","ssdeep":"192:rxp+LntGOIp4fkXMi9YM+Ln+C45CPIEkQhLkfbA:rr+xGXp0kXMmYMOvPNBYzA","tlshash":"a2e1ad3d4de0cded98e6c52bc3d517b9aa88bf1d43b4cbae28921ca20936496348407c","first_seen":"2026-09-18T10:10:37.88929Z","last_seen":"2026-10-08T16:09:03.676209Z","times_seen":8,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/elk-pirots-4.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.668Z","timestamp":1791473432668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/elk-pirots-4.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvHM54DFftGpGIu%2FFAUz%2FAPzWtP2Hg6nmwc3xL2EOZpdwo9DhXhlZ4YXUyT7Ep2TovBAXB3W0xQZuqtTljWut6C3NM0CLcUZdbBPx8ueYk839K3PnsvsbTiNQ1%2B5wFg%3D\"}]}\r\ncf-ray: a4762ffa3be056ca-OSL\r\ncontent-length: 5712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5712,"size_decoded":7579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3911f672c99ca1f2a2f35d95282cc21","sha1":"39f6db7dc8870cef0df28013382601f9c653b8f4","sha256":"b75740fe5d0638d95c44716ba9e64351119620233c801fb1e102ddd963cd633c","sha512":"195243b6dc7f2b1ae8166621b6e0aca3ce00f9f4e11d1ab68af4721aea9baa734778ebd84ecfc102761034d22ba1cb2960c522e48daadfd14add3f25047145b6","ssdeep":"96:axilfzJCiJbgsXpTvf/ClFdop+3k0rpNyO4yLsK5rzJqqAEVEyDSug7TqrAcopIA:axy1DJbgsXFwdoc3LpZsK5rz0hEVEy9+","tlshash":"fac18dba306e1fa5be79eb18766d733c808645818d0fac11f697f4b4e3875288707039","first_seen":"2026-09-18T10:10:38.042006Z","last_seen":"2026-10-08T16:09:03.664145Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike-2-hold-and-win.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.700Z","timestamp":1791473432700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-coin-strike-2-hold-and-win.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXMUQzIPg8U8LK%2BfVJmix1Fmb%2FzRvOA7pq9miM6Goue3WCs3HDam9RBnMNq2ZSpz5m4%2FS4%2FOl3TK5vSBKa%2BtUdNMrrwilEo%2BgcLunkKtieMnbiwAMcrqdMS97fY9aS8%3D\"}]}\r\ncf-ray: a4762ffa5c0256ca-OSL\r\ncontent-length: 5250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5250,"size_decoded":7123,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d46309f17ab1b34655adc72c58eba480","sha1":"854734f8f5dd059e23aa8753e7cf8e7954757333","sha256":"364aa07e05adfd93de3809b585da94db159bc084b8472fcd6cd6dc06b15f7228","sha512":"26f4db48ba88ee13deec1914b26310021d59b130eecea6bb42c754143bc4155d0bb5277eb1e49cd85832eb2560515124045bf7e7520866f18c48620c8868fa7e","ssdeep":"96:bgGyOs8hIenNbmGrvMGBj7Eywkg27OtfGC58AZwzEd444FWZHkFBxEAKjks/:pyOcebmGrvMkj7Eywk7ObV3t48HaE3kM","tlshash":"57b1904d230079ee28d7131fed7e05e34bdded86f67b052615ef6990671eb2609302a4","first_seen":"2026-09-18T10:10:37.731856Z","last_seen":"2026-10-08T16:09:03.568758Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/62548-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.722Z","timestamp":1791473432722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/62548-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyv6TSohzvyiIfyPWoypJ2fAiK685J9s1k%2BXrZSAqmWKX7UJacHUu5uNHTrLGczNJn5PiwBaY6%2FUiRhagY29Uw9YQDSbU%2FraEZ%2BVasrW4Bo7T%2FDQpV3H48G%2BlvMr4iQ%3D\"}]}\r\ncf-ray: a4762ffa8c0d56ca-OSL\r\ncontent-length: 8438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8438,"size_decoded":10200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d407acea1433dadb7f3195b996b17f55","sha1":"02387327d529864e99fe9283997c1698e31a4b1c","sha256":"881006d0ee28c4718303bc5acb0f08866dc66326c9b84ba382fb6e56e5cf690d","sha512":"8b4357b20451b3b9cc7ee0e6628ec0b469e92d9e5bf27598c5b398efb5d6b2b4f1118f961b7ec7dac45ec916aa0fc300b8e1580fc25044d202a5aeede261746a","ssdeep":"192:TU+ntrkB1+OVWaPpAY4m3ahLAqewqeyr5im4BKrtd:rtrkBcOVWgOm3eLF8b4Y","tlshash":"3e02c03b0b67646a11f123fdd4f9730598e0e86811791fcd029c06a24c7ea42eedba7d","first_seen":"2025-07-02T18:45:14.865319Z","last_seen":"2026-10-08T16:09:03.674983Z","times_seen":11,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/16770-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.758Z","timestamp":1791473432758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/16770-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YP9YmtoGQl5y8wFwZtyYOBpmEqVYN6vqRu%2BQgLBT7FSuANPIJVEbZis0w7pmYRO8U5dU2wmF03%2BISB03HQlBgL9XSylGdqmobucrL0OQgIlyNdMupE51wPopjGACAqo%3D\"}]}\r\ncf-ray: a4762ffabc3656ca-OSL\r\ncontent-length: 12866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12866,"size_decoded":14621,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a161cd08a6d453d3aa0e92e5cdcd095","sha1":"d095caebbf0f82993bd8e30e3ff088c6028b3140","sha256":"628bf1d3e71ab8c4dde1f755fafa4113e91b0e6567d7c2bb13e9b4d9c13fb352","sha512":"2fddf149f0726ce0e54916268793a206223cff12d52e36089278eb771933d25d43ca61f5221559d4fa348ee899ac72eb3ada86db1ff050e5c53843d873c9e6a3","ssdeep":"192:rHr0AiIFIoCdVZtSkhlAJ/yPnM7S+C0lJ8RcyNVIjPfEYuhF3owPZLieIJT:NnFyDtF2MItz8lujkYuL3oXJ","tlshash":"7442cedcc7b809e5924890aaeeaece728643916aed237ac7efcd4033756cd344e91510","first_seen":"2025-03-05T01:10:53.909988Z","last_seen":"2026-10-08T16:09:03.741072Z","times_seen":11,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/seo-kit/assets/8412.c6f25ce1309c4a7e443e.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.350Z","timestamp":1791473432350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /seo-kit/assets/8412.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfwzwssiGm0eQ9Lyf2u2VK412qNCVqNq7dmBOOZ02gzLiEIpGCSYslmZGNER9Kc7ib6diYSnzX85H1A1OH%2BOSpZEkr4lf5TSweS%2Fi1bcasuybtvE3x0brm58hivFZRg%3D\"}]}\r\ncf-ray: a4762ff82afd56ca-OSL\r\ncontent-length: 759\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2494,"size_decoded":2670,"mime_type":"text/css","magic":"ASCII text, with very long lines (1679)","md5":"e15c39833bdce3c94e1cb683c15ef0d4","sha1":"350bbfe74bf780e318a937793a4b0e1e87545750","sha256":"3ce9684bc51f1a1a5eb6db001d9021f1b47466daf360fe2964a0b6725401bb9c","sha512":"23e469bbb8d8044aa0f8360decb56f16b28b2bd2d9f228dce01c7ba39ff75be20f24c7ee9eb91e12615f416e559c62563303871543c749b38b3d1d6aa9019c36","ssdeep":"","tlshash":"69511f7601375f2e56bbf57c8a68f6492140d006e9fb47cdd6249b25c2e3b9c02b071a","first_seen":"2025-06-29T08:36:28.642315Z","last_seen":"2026-10-08T16:09:03.775233Z","times_seen":87,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_cs.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.446Z","timestamp":1791473432446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_cs.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0XDxnHQoSHOuNcq10MCh0V%2B6vskvJkfMbg%2BnOKM8OX2BUk8L8%2F7Kw6E3%2FQ4OpNg9u4jKDXZhBiHRa836d56C7qOBcSaTvInBtwF2Z52EJhFbUEm0aFb6pe0NvpiZiA%3D\"}]}\r\ncf-ray: a4762ff8cb3456ca-OSL\r\ncontent-length: 2762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2762,"size_decoded":4631,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b69168d6151345190c3a4fbaf7107061","sha1":"0178caf8165976cbf14696adbdfe018ad739f8a8","sha256":"35a4593d97d617fefe3789b66f14616c10a2d2d1659e9ca04dd5a58f3809b6e9","sha512":"c98339adb3335b08bdca575d19443e1bdd0401bba70fb91b13ad1317710a77a38aa50336503314e6a99b87807cf7a2a3deef22f4ac2af8499da59832c5456540","ssdeep":"","tlshash":"e7513b6c51984928bc56f494a390b82d8786ee991069cef05bd7e365d2c23c7fd50828","first_seen":"2026-04-12T22:30:48.676548Z","last_seen":"2026-10-08T16:09:03.628471Z","times_seen":28,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/ita","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.458Z","timestamp":1791473432458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/ita HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l44VQAA4A7bfNI9mJn6UWw8q%2B3Ok5EDKR307BnoaSqhONMKncWcFWJ5UjT4N6j228NoVCfPtdRRjDPs%2FwstiKUmhyBTvd%2FIjDsh3KMk%2BqTT%2F61hPylbC5qIE5bszOfA%3D\"}]}\r\ncf-ray: a4762ff8db4056ca-OSL\r\ncontent-length: 272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":272,"size_decoded":2031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5400a6392f403c8999d1aaef45ff2d1","sha1":"aaa6074f22054d68374845e23a6866f4115a21f2","sha256":"f956581c5f79e81ff93ff51d3d396c10c6163bc6088c088ec69790e95480bcdb","sha512":"1c70cc3d80a659a7a17f186248aaf33e5eeda04c8f4155209a82615c7f40340e151f353f799f7577d2c3f92e209537c4080411819a35b1b1938138c908b53188","ssdeep":"","tlshash":"6bd02b450a7d7a59bcb258b9415228143a8b4c6db703faeab6533488075c75d362861c","first_seen":"2025-03-10T19:15:00.589925Z","last_seen":"2026-10-08T16:09:03.721835Z","times_seen":109,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/ind","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.495Z","timestamp":1791473432495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/ind HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGeZW%2BlPV5aU2l%2FIMrUz22BxPCx6SNO8UmE81pJxihzED3VIFSuggYNWKTyE0f%2FKiNl76Pxxtv7RPqtb0Ddim5a8RsmBKyzPfsCzusLfQK5HuK3QCd8QyR45f8VOrck%3D\"}]}\r\ncf-ray: a4762ff91b5e56ca-OSL\r\ncontent-length: 498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498,"size_decoded":2253,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fcce2e15855ea49d9132a907a14bdee3","sha1":"9a36db16014305f622d7a08a0690e51ae28289ad","sha256":"ec6c5f8904bf7dbed0e14fa6ee1dc68acf4b7b3a426e05bcb30696d0beaaf110","sha512":"a2a55255662ab0a85768e56908140cbcc97a2e41f134b2356dc599584307951f735e28fcf439d49d40225cdcc9a1ff4f887d679a768d434577ebd85c15558f69","ssdeep":"","tlshash":"c1f054f830760d48f646302b4ef60d6b585c350d829c2be44b8fdff964404b1224181c","first_seen":"2026-04-05T09:24:15.074691Z","last_seen":"2026-10-08T16:09:03.598152Z","times_seen":15,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-3-royal-coins-hold--win.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.682Z","timestamp":1791473432682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/playson-3-royal-coins-hold--win.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4DAQ1iJEYjUYQBfMKHx2TRCjl9a3tJLDSS5zN03yrPOkvCso4w1iNmyOuviQdV%2B5QpIj1PCSJ%2BzbihEP7zCBDaUVOyqUsDRshme7%2BK62m%2FgJmh8GB6m7yUCnUC9L4Uw%3D\"}]}\r\ncf-ray: a4762ffa4be856ca-OSL\r\ncontent-length: 6410\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6410,"size_decoded":8279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"313216dab3ec62dbef0e060bb151c279","sha1":"fb05b7ec69252a7d9b8bff397ff87634844e239c","sha256":"8ac9622cd9721c393bbd8b1b24814496ebf85917d10448d207de4ab6024e8963","sha512":"f9f875025aa5c92c354c35ab2a7768bf18ed3ce2edcf174ddabba842c64e636541f08c70b69f6ecdc8eb632c5a9d5ce2899cf5d62e2eaef1d38c07b45242f9ac","ssdeep":"192:cTqdIcSXNdxEWsf79PDB7rCvv2NwV9VtKo01NEmzEkd:NIjXiWsfZAvv2NwdkSSEkd","tlshash":"9cd1afba28bbb4c54ae9d49468ac9a0cdf95c62cb1f95477c43ea8dc0d634448954cfc","first_seen":"2026-09-18T10:10:38.011035Z","last_seen":"2026-10-08T16:09:03.703856Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pgsoft-wild-bounty-showdown.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.694Z","timestamp":1791473432694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pgsoft-wild-bounty-showdown.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5yx%2FmLf5W82Pye9PfDi6Y4QA0BdP%2BKQYW9UZ3CqMfif%2FWuSWzfkofNyRc8fQAZv7IR5iSArUUxoHV47%2B%2FfHtCT91WbgUAyLUBSGNi6W8o1elVCSIIeiCvygVyl%2Bm8c%3D\"}]}\r\ncf-ray: a4762ffa5bfe56ca-OSL\r\ncontent-length: 5394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5394,"size_decoded":7267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d88da03e9bd694c703eb44843e31258c","sha1":"535de7cc14111d65b8bfe54051d4c6ed3bc13d8a","sha256":"f3bb84d9b308c71b406edfef5a31e29019462e2b4f93edc5b467c46e45931b4c","sha512":"48ce04db1e17988df7fec42c420ff03a2df48b08d1e6191d67adfa5e93acd129b9b784f59c454b146c601e1b0417b90c4f52a0b5bd9246e88605dc44b9ec4581","ssdeep":"96:bWlrVoBL2QciMj8ahD0sw8mKt3ZAAze4rvqN5NpFcrSi6QZ/IctKfMC8:ilBOL2QctIahDrcKt3KGVvq/LFgSvc/J","tlshash":"69b18e013e61b0b2a51d4bb26bef043ff7b4a443be48aedc667181520dfb41e411645e","first_seen":"2026-09-18T10:10:37.98493Z","last_seen":"2026-10-08T16:09:03.758758Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/prj_apk.svg","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.827Z","timestamp":1791473432827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/prj_apk.svg HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tkrv3z1evVoEEVxBrSjV0Q1uWEZiN2S3hzmEvkX59xPjzDsgikboO3TfIsS9V%2FwtVVkSr75oREawl5%2Fb5SMPpute7TYyH9H4ph%2Fw0g8ey9Y1qkK5sMtaGuPlxyc72y4%3D\"}]}\r\ncf-ray: a4762ffb2c7b56ca-OSL\r\ncontent-length: 3593\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9968,"size_decoded":5509,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96c49782c9efc66bc06457dc82c3a249","sha1":"2c23f84665538b21ccce28991d111b50419dda24","sha256":"254d34b781edc19d894dd067341d3917113d3070a1ecc4eb7de953d4e5131609","sha512":"d64c975259f9e6595d0f1a057a4bb3df1342cf667652f62b96280e1ceb0367dc9ed2bfb9607853cbafaf8535c0ead5632a29658761d8471c65b107fa6b2fa882","ssdeep":"192:y/vOZw0MhpapTv/9q3mYPf+Y1NH14naJ7VmK9XQ:EOZw0MGv1q3mY3n1NV/hVmKA","tlshash":"af2273d6262863dc5adbd68e9f32d850631ed0bab4b3d5c14e8f9bd8548b988f607c10","first_seen":"2025-04-13T05:38:58.917512Z","last_seen":"2026-10-08T16:09:03.743672Z","times_seen":23,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/icons/PRJ4/favicon-16x16.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.234Z","timestamp":1791473434234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/favicon-16x16.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:08 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1585\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpaZwtLu6lCKBpX%2BI1IjdN31Y22rNgf0m8ETMtIeE89o9Tr%2BopMZ62uyBdI5MKqVmUGmepUcYdt83iz%2FBz5mUxWkIwgkwitXu7TAFKL4Ha%2FAKHnLyUmczrRuWbn%2FdqI%3D\"}]}\r\ncf-ray: a4763003fee156ca-OSL\r\ncontent-length: 1733\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1733,"size_decoded":3607,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"df3892ceee8728b774e0dde8523f1505","sha1":"796ba69ce8d2c1ca4d12d17be5e328a2d6b5efd6","sha256":"7bc13f893b31ed398b87dc47bdaf12c89ea9d2b0c01ca307c141d5509bf2b822","sha512":"6de3c39e2d449f5508262e3f1ce95399f0331b074e17d4fdf2f77694293ecabeb559ed25ea2f5f68f828750244814ce7f2fadd4dc7c91e1aa602467a406dd8b2","ssdeep":"","tlshash":"1f31d8905d5094c5c28e877064c51d02d4574b43b984f542f9edc8b70f20a4a7e9f7c3","first_seen":"2026-04-29T14:23:59.646267Z","last_seen":"2026-10-08T16:09:03.608449Z","times_seen":18,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/84629552-dade-44cf-9ddc-6ed23fc43335","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.616Z","timestamp":1791473432616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/84629552-dade-44cf-9ddc-6ed23fc43335 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHq%2F%2BIoRUAZpkg4OXKzdIrNwre7yr6WsanX%2BrM6Xj9kSML2qCS9Ok25Ulhtsm9NfRmyks%2FKiyLKCWnihfvWe3Gta43Iwx5tz5SI%2B3W2roo1C2pHgXKxjPlUHxuhiAZc%3D\"}]}\r\ncf-ray: a4762ff9dbb956ca-OSL\r\ncontent-length: 324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":324,"size_decoded":2119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3bf8789f546cddf9e8503a18095e48b","sha1":"df61a9056193f35995f47457b15a220f0a72c753","sha256":"c06c0acb654c7bb7061f6ae37f7779ebb96bd77af53457725cede1ccf15e78d8","sha512":"2997c3eb8d295c59dc6bec97b88dabae15d430fc9f06e8243b2bda449ff3098eac15880470ba62de09eb21f42b27036e0a300be2a42cbc68e98f3abbeace13a8","ssdeep":"","tlshash":"66e02dbf2a0009e9fa20acb0f74610cc2ae440089f318db301c084a0181a0406c5d3e6","first_seen":"2026-09-18T10:10:38.002775Z","last_seen":"2026-10-08T16:09:03.683523Z","times_seen":8,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/Application.c9c5d172f391f5dde136.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.334Z","timestamp":1791473432334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /Application.c9c5d172f391f5dde136.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtLwfq26%2FP%2FL4K3Wfyu9%2Fw%2F%2BOVS8HhtpuKw9en7Uf638E9aebDaegeS4y7I0a4%2BUig7JKxkTh6KhRuUC8gUQgL6rCYxv5lBGAy3bZkV2xIwwd6kDG3E5F5yxMzMxxUM%3D\"}]}\r\ncf-ray: a4762ff81af456ca-OSL\r\ncontent-length: 5482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19945,"size_decoded":7402,"mime_type":"text/css","magic":"ASCII text, with very long lines (4269)","md5":"af1c5f3297e04a85e497158132978d43","sha1":"289efbe0b8deb83d8ec496685f5344b10fc33e1f","sha256":"dfcb496ce73941a2df1f8d2a0277dc5221850d467ac168d94c6ebbeedc929a6e","sha512":"5565c42542b1218d98fa1a9bcbdbf260c30e3dc92b28a73f65cad1a9ba9129cb0acb9615006a15773e992180247ca6ef09d8c59cd920bc23eb67c39d0e9df2ca","ssdeep":"384:8+VkBjYUmf3hVc4MSc27KNj1K/NTbMVz/kwYRIaO5Js9SpBmkprpvpGpHfBJOcSm:8jjm/hVc4MSc2mNjo/FMR2epwx","tlshash":"2d92e8671061732c752be81457d80b5d9254c023e527abeeee24aa34c3c7fe936f724a","first_seen":"2026-09-18T10:10:37.812302Z","last_seen":"2026-10-08T16:09:03.685272Z","times_seen":8,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_ci_promo.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.443Z","timestamp":1791473432443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ci_promo.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UprJn2le3hIAaTz6ac5MZvw6rWS3EejZJIFVKHTGqTKlSOC%2BWD%2B93LFQLD%2F1XZOp3aMvSj7WMpyY8HBn%2B%2BvCsFGqhLybf8VXNx0JeI9A5c7iOenwWU%2B0cm8rxrGd1Ds%3D\"}]}\r\ncf-ray: a4762ff8cb3156ca-OSL\r\ncontent-length: 3876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3876,"size_decoded":5749,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ce2517bc9ce1a302051d260a7d71ce6","sha1":"c1edb4784be5755f011999d01883f406b774c83d","sha256":"6011a9f8289d4fab69a8c7483ef85a01d665d507d222193d5cebc26b7c8872f0","sha512":"2de4abe3c2ea70f123f1606ee21b57214119b756b4bcdc4c0b45376678b932897ba4e011c5162c0502e2221fa8a9a2001e4d3742d5112c7fb4e348b3eb91e85c","ssdeep":"","tlshash":"fe815c082b51029606aabb1a2ad0bbdadc346094e0588cb27854f77d163021c7fdfecf","first_seen":"2026-03-28T17:27:48.277143Z","last_seen":"2026-10-08T16:09:03.651826Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/pak","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.499Z","timestamp":1791473432499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/pak HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8FX0gqjPozUrTuIzg9eWxzDV8Bk7GkJLfbuE%2FkBP5VKy4bfdtfxHzg63GH6V4DR4jIEO7nfLXzCxtFSvzDLegYBMD6G0J8MmNXVClzQzryM%2BINUUzWnjPtT3UL89l0%3D\"}]}\r\ncf-ray: a4762ff91b6056ca-OSL\r\ncontent-length: 984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":984,"size_decoded":2737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c0370bea53ae509e4a5d9e5ef67ab047","sha1":"645cbdb49859a72da5573e682967fcdb10c91dbb","sha256":"6ad4508e91d8314a9515de6b76c76619b161f812505c0854a50920898c733986","sha512":"7370336cff10dad717886cca9068c93d49ef5d621a75c4915c17f14dc34ec25e7cde9817a4360a31f7c53c4c6a969d314147827ed98c7e51f41534e4fb53ed38","ssdeep":"","tlshash":"83119876e16e7870f9d4b4c284a30ae4f8ef12ff7562ebb2065374766444321815c697","first_seen":"2026-04-05T09:22:55.037484Z","last_seen":"2026-10-08T16:09:03.653877Z","times_seen":11,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/dnk","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.501Z","timestamp":1791473432501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/dnk HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyss3Sr2tNQEedVP72IdVwQ9jdro4N%2FrtF6LuXxvq%2BekRUjH9gwbmTY2LzvpvYC%2FFKbaKHa4uhauiBC%2F6MDB05F3UYB57wCM5MwN7NiVGxoieL%2Fdu1XlKiOMm5Ta%2ByE%3D\"}]}\r\ncf-ray: a4762ff92b6256ca-OSL\r\ncontent-length: 224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":224,"size_decoded":1985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3ebbb6beb2fa8da98b12611369c80f9","sha1":"619e8e54418313606294400a56c3ccd440b4f6b2","sha256":"98fa23616dec7a5b0e0d0281424ad1d08fca78ee05a0816474840c06cad6215e","sha512":"465cc7822d8a293b1253b3e6bad342e046e7eb572ffc3a70e51aa6c7d2d531d5efa576508c5e75c3997fdbee76942478efb0eba4184ae991af9e0fc27e18702c","ssdeep":"","tlshash":"8dd023c57776952e74f4387701690e02e01415dd70c55d55304f0fa41a584105789d04","first_seen":"2026-04-29T14:23:59.755153Z","last_seen":"2026-10-08T16:09:03.62617Z","times_seen":10,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_tiktok.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.552Z","timestamp":1791473432552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_tiktok.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKd9InYgooAUWPdnjhZOLGtWxKidWVmb0ugJwt8d%2Bo03cRhjykcRATgdtddzbBIdcUP7O%2BJaOoRGurncwEvzgT7H5BHZKeQFGJIu%2FcTkqiYuJNeuwfh2i5no0T5O1yk%3D\"}]}\r\ncf-ray: a4762ff97b8956ca-OSL\r\ncontent-length: 1670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1670,"size_decoded":3537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81a0fb0b36e264e2cde0cbf84f9c7546","sha1":"33783bb7061bb173376236e9decfd28a04794938","sha256":"ee50189a822c46bcf89b67a971e7096073e3830036ee2741a1d06e11f0215404","sha512":"f69c61f3c92dc07182872e92baccc3fccf3f0c242094262cbc0b0b14ec5b67685130bb8a9bd6f2383abf4e47f0948c59adb9a69428a4e138cd866f4b3924f952","ssdeep":"","tlshash":"0f311a9cac4be558c223aca819fe89b712c611537eb41c11440e2803d23547c268d14a","first_seen":"2026-04-29T14:23:59.936266Z","last_seen":"2026-10-08T16:09:03.606519Z","times_seen":11,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/35ac9982-0023-47ef-8027-1c1881ada3c4","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.608Z","timestamp":1791473432608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/35ac9982-0023-47ef-8027-1c1881ada3c4 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCHAZTxv%2BwC7Wo6O39q7GA%2FObpW4SDWmankiFN81DRcBRyJVJkyOJgCJoa9skvqsvlyWC6gee1i1lJPSa9sgOZS6J0CjHYvaeSOJu39AS3rkV7bX3CE89VPOKPhiSHI%3D\"}]}\r\ncf-ray: a4762ff9cbb156ca-OSL\r\ncontent-length: 672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":672,"size_decoded":2461,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d540596b693baaaf9d7f6f6cd4b81792","sha1":"e3d6af30f00d38fd4be8957e1e4159dda5c6e60b","sha256":"d6ed7fac9b3f5b63516f6e13e7b3263fd763c67628dc93a099322c6b65607dba","sha512":"1bd1bcdc519730e64eff73385ad0fe2f722e0589c7bb4f7f9bb18e5b29e15aad6b8728d73a049b2b354313cd42555ae6f76a0a11a230cd007b381584140abd47","ssdeep":"","tlshash":"fd01233ac16d70a39c3d2d9865701d46f6db0c82babce60380494dfe6a0e2c32696703","first_seen":"2026-09-18T10:10:38.038528Z","last_seen":"2026-10-08T16:09:03.753295Z","times_seen":8,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/b281f48e-e1e6-44b6-ab2c-1bdcf6185634","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.611Z","timestamp":1791473432611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/b281f48e-e1e6-44b6-ab2c-1bdcf6185634 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzV8%2FeesEXiqN8gETJxAjCziV7sXGrB5%2FTjFyIKbB%2BKQwxhnNnwnRfw7jVLQi%2FwBJyzvGmVT752UYRDdQBLJyugXRTrwg7hWbucKO6ZhsJ79Qs7eRv1wNyK6RXpeexM%3D\"}]}\r\ncf-ray: a4762ff9dbb356ca-OSL\r\ncontent-length: 944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":944,"size_decoded":2737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b82e0589328501773561d9206431d5be","sha1":"2b63692a4284720fae8cb69d193a6e44bd6aaa17","sha256":"6651d83c0655443d66c79cf5cc19a8e962db21cd4bd8728500fb0969ac8c5c9d","sha512":"644de7d6b3e2811bd3ef5c917ff65b1b741f0d22ba8a6a7d5b4c6cb1c826a23a46137be5e45a313599ae88d9812be5da88a796f4b7bb4490efa1245765759de0","ssdeep":"","tlshash":"e7118426044f2c4746eca9613376278a0315ada53f9cc7b243652eb183121b2ee76e8a","first_seen":"2026-09-18T10:10:37.796154Z","last_seen":"2026-10-08T16:09:03.682959Z","times_seen":8,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.326Z","timestamp":1791473432326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.13.6 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Sat, 18 Jul 2026 11:02:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1585\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UajR7y577LGGl4d0yN7p7Ko5jp87nzLJhlpA39im%2Fouj6Nv0eRQ9gl1zjObg9HF5vXkCGo1jQyngWw9t%2BfmVI7%2BzImH7eyzEbE3DpbgjRvtxHULjM6%2FKRc4xOBMtsFo%3D\"}]}\r\ncf-ray: a4762ff81af556ca-OSL\r\ncontent-length: 8389\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44905,"size_decoded":10305,"mime_type":"text/css","magic":"ASCII text, with very long lines (42831)","md5":"59ba42eb79745cd0a1a444e6276814bc","sha1":"2cf148963a92c716b6d659fa32eb1dbeedc6180c","sha256":"84aad614f8b95ebd3a4ac6f7633e77323066d31da87afe3dafc8c14cd3d0f8fc","sha512":"688100a439b43e47261f064cf5c57963fba518c4cdd6e8b86aaf4333c368992ac59b03133c26d8e364e59804f7072ff58006c2313a90b71ae2cb16b2d1446684","ssdeep":"768:NPQOnk1rhbYollnk+FHkFYCzxdvN3bR2/WLmiyCFS7QHQtBU5WOT1enhm2a7ZAR3:x6UY+LHQtBU59TwDuaP","tlshash":"9f13f86047d035395233473efad6ba082b694313d74f66e2f8ab8768c9c57c71a72a4c","first_seen":"2026-07-01T18:27:28.299627Z","last_seen":"2026-10-08T18:29:58.888352Z","times_seen":5247,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/LeftNavigationMenu.75cb2c4fc7fdbbbd7ef8.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.339Z","timestamp":1791473432339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /LeftNavigationMenu.75cb2c4fc7fdbbbd7ef8.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Wxh8eXb6n7bDZ2SMHzlHqHnRWSXtzejs12F1pqS7yHEoegdK2DpfN9y1%2BhrvOXRoco878yr0pAb7cJYes8KRZgjYOu8iXBPToTHs9UbWW5gZoSxg1w9kwsVtFZAw%2FM%3D\"}]}\r\ncf-ray: a4762ff81af856ca-OSL\r\ncontent-length: 421\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1090,"size_decoded":2332,"mime_type":"text/css","magic":"ASCII text, with very long lines (1089)","md5":"28d7452811c6c865e5ef659a434121b9","sha1":"09cba04c27fbbf002ec84dbff31621fe6a78741d","sha256":"6d03036e73024087bf02a45ee75ecb61ccfd27a3b076bc984bb5f0019369d3d2","sha512":"45340c692e311ea77074ede94542aebc8c850f4905cf6804f7d0c5dd33ed3b70ad37f8158cde6fb66003ff3d394a17137d93c975078e516391ba69ca2efa3db0","ssdeep":"","tlshash":"c411d3b122e1325cf91fc85117904edf61c48027b27fe6bd98a53fa1c1e7b803a6a14c","first_seen":"2025-10-25T03:52:20.323741Z","last_seen":"2026-10-08T16:09:03.609539Z","times_seen":86,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/n_am","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.490Z","timestamp":1791473432490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/n_am HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FM1m9y655ffevBaBHtqOrbxhJeAI6lUKey9f6pFay0S6u1cCvO9cGA%2FTiyop3e9SZPg%2BXcHLZmTx4MwVcc8uyDoXHkj6Gy88PdGqFlwyZDDto9d1bXK%2BpXI69udVzLU%3D\"}]}\r\ncf-ray: a4762ff91b5a56ca-OSL\r\ncontent-length: 1762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1762,"size_decoded":3520,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"b3e23b74e5a16277c450ad778a88c5d9","sha1":"66baf4c0d8ddaccfd5579baffb7f73bd92e455cd","sha256":"aeeae36da30e46cdf439315b7c57f328ff841213424f07324d3324503171c5e4","sha512":"ac6923109b29381943e819c7f3fd194db821142ac4fc14615a1b68ec35fb312d945b110f2461c33761476323751e9ade966cf42af35c2dab7a29397e4ce138c7","ssdeep":"","tlshash":"0f31d897ff30099708bc2aa7c3086eca36169f712954e968cd1150051955fd0efb7367","first_seen":"2026-04-29T14:23:59.657583Z","last_seen":"2026-10-08T16:09:03.776845Z","times_seen":13,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/mlb","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.512Z","timestamp":1791473432512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/mlb HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecbSDEytXoEGtNQ2AbVFDRFeSzwshP9puYq7LCWtSlXdqsYFJ8q5%2Bu26YjgjhS2EMDD%2FMNJNfxJeT2w1dxMcgnttb%2FkDt5eWFBq0FalzPPYLyP9kBXDnPuN8iRETuCc%3D\"}]}\r\ncf-ray: a4762ff93b6a56ca-OSL\r\ncontent-length: 1979\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1979,"size_decoded":3735,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"c068789c5e67df9866d0892f448767d3","sha1":"eb0acb0114d354e543f4e671e917e153f9321529","sha256":"d5753b53ef8dc5cfae65ad3f18c6a4d2122b18881dc905bae51d7c792760a96f","sha512":"1f09f0f8ceadd1a92b54a49db00f0c64611c2bb490a8bc3f5c13a47b1a1dde43055cf4508aed7f8e13143540ee9c64be817301c3cd5a843853f2f40a464aeee4","ssdeep":"","tlshash":"80414a960e5338702a11b0d39a86e8e045d0d35a4a003e95b5cffbed6c2fb431388ae1","first_seen":"2025-06-29T08:50:22.744436Z","last_seen":"2026-10-08T16:09:03.757157Z","times_seen":27,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/97920ace-9a42-4d1f-ae19-4140852886c4","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.535Z","timestamp":1791473432535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/97920ace-9a42-4d1f-ae19-4140852886c4 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vum6ObZ%2FmKrjTY1ErY39DDMTkZElOIEdLeaRKuNNuNDo61m2ZmAEyFxTwbRtaN%2FjZYKlA5CeTmdWEPUporp4Qmp3Qm3mrqJlkvbT2QqfGAT7wP%2FC55KQp030YfwVS8%3D\"}]}\r\ncf-ray: a4762ff95b7c56ca-OSL\r\ncontent-length: 1086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1086,"size_decoded":2878,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bbdee6e00f78bee3852c281d1504cc79","sha1":"561a7c349014eba4e5473b183b450f56ef2eb50c","sha256":"8edc1801b59c2334fc87d3cb81a6d5e3435a710625fd506d200a9228187077e7","sha512":"979c25dc4688411ef438c6bdc83af7e76aca77b68686ee63ba1303b0c09a1423df834e0bf2bb0bec801bce6805c19f743c731719ab772659c56b1405ec77d100","ssdeep":"","tlshash":"4811b61a20ede20fcc26f41c36f96de4780607d420479a2c910e6db06c19d58723203e","first_seen":"2026-09-18T10:10:37.871205Z","last_seen":"2026-10-08T16:09:03.550625Z","times_seen":8,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4d518021-ff83-4082-b997-4edb7b86a7aa","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.582Z","timestamp":1791473432582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4d518021-ff83-4082-b997-4edb7b86a7aa HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfTz9Vk3w5a0D23oaXScFWoO7qCgv3MVYMKjbg3ovZNQGoYe6hQPrpBRrRqLjG%2FHl5QLQLm6OjQvxEjuU5nOfolS37%2BeBGJEPMtQADaApb8DqGVq47WEQbpPrzQTb6A%3D\"}]}\r\ncf-ray: a4762ff9aba156ca-OSL\r\ncontent-length: 38612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":38612,"size_decoded":40403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"204837e7d86a94eb029643ecd81985d9","sha1":"d24678e82c80a0d7d90cf4a43a70d56a2d4d9d6d","sha256":"34d00516dd846570ab92fb3cbed30dc53390fea9b1777acfea3bf0ee2524b7ab","sha512":"96d34093d45d31b272ca3b2460ac7ff2b254a0d8806e969b2593fba0d109b80208733bf1de75f01fe9f83057ffc6fc3cd7e2404c84e375d286ce57131a12f1e9","ssdeep":"768:xDIh6GeKj83u9oP4V0/VKIxbpDtaHOIr8FCA32kmpppz+1ozoo2U:x8hQK+uk4VqN08Fl2aSrb","tlshash":"4603023c7ca51e4bbcbca0a9e5f0115eae0d64640295c09e8fbccedbd127465d8bac50","first_seen":"2026-09-18T10:10:37.96758Z","last_seen":"2026-10-08T16:09:03.660597Z","times_seen":8,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/47aa6c10-e77f-41ab-b791-a37e8912a34e","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.614Z","timestamp":1791473432614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/47aa6c10-e77f-41ab-b791-a37e8912a34e HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2ZKE7AFu8tTARoE1ff6QqFEtafBLCW061xoPxU9SxSUMeuUgKdXrMEUGEl%2ByVaXUT9NFPQOSTozu6nXR5NlRNiQa7L%2B4Up3UZ743lId5xGupY%2FxVd7jQv0ZgPNI6z8%3D\"}]}\r\ncf-ray: a4762ff9dbb656ca-OSL\r\ncontent-length: 770\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":770,"size_decoded":2561,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5811a6f890a9f3b2fac8b41137dea32","sha1":"e6a9616ebe269e5535dcbf597a278cf1f2b851c7","sha256":"46d5a541142ffa8530e7eadc35f24bb6750a94209cabc2e7f52bf669b303064c","sha512":"0b2221fc097b93374ce91aaffc3d8feaa0c9daf9e3fb09d4d2a3e659f5dd6b55502b4cc804e041aed572ffc01c9ff997cef24a507feb706d01c1d5c48c13515d","ssdeep":"","tlshash":"8f01ba9443f442c04fe8d431f7da31d472190bc458920a065524c8a594b940337fbf9b","first_seen":"2026-09-18T10:10:37.937868Z","last_seen":"2026-10-08T16:09:03.613237Z","times_seen":8,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/5068-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.622Z","timestamp":1791473432622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/5068-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYg%2BRwxgT0kq79X852NbXRBf3oybyCFbEO6ebE6RydM8edzdwAc2XCco4E%2BYG7SdeiHKiHo6f7ETS5soLIY9f%2F7dUqLfAGagnSmbC4DCl%2BjzDgzmmFUFJurnLJ7SB0o%3D\"}]}\r\ncf-ray: a4762ff9ebbe56ca-OSL\r\ncontent-length: 10214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10214,"size_decoded":11973,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a490c482b06543f564391b9182e1b79","sha1":"0150e57a2f1479f2611a9591857dbd470cd9ce2e","sha256":"5626e923494d2b891b23edaabb02949ba71834d058b0905a6f7b880dd9b0ff59","sha512":"76c1cc79e0830a3c442eafa67e15fc80cf5230339a7a342803eaaac6f0096d441d7b9d50ddcebad7f98ba27f587b8b8df1a8aa08e0d36e6eb3180736c4edc4ba","ssdeep":"192:A0mFk3GsCV9Qr0FQpE2s9dk+GijdYQ5r77mEx/YeADXdHu4R:ik3oz00OpiSrK2Q5rNwtR","tlshash":"b122c07cf64a3e53c8604cbe78bdf67b4e2697412b68b3f0540660422295447c3aec8e","first_seen":"2025-03-05T01:10:53.881935Z","last_seen":"2026-10-08T16:09:03.781376Z","times_seen":13,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/seo-kit/assets/9833.c6f25ce1309c4a7e443e.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.347Z","timestamp":1791473432347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /seo-kit/assets/9833.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1UAPJcbtcL1mvAzqzpG%2BSuIOaS%2F6HJ%2FYVRN3eHWaLAtL0NBo3tEurufuHu4eEOvll3C%2BjU2JXSShQpqS2NMgUUtoy%2FtXoVVi494mgcMq%2FdPkMak%2FaUJIA%2FSRrFYat8%3D\"}]}\r\ncf-ray: a4762ff82afc56ca-OSL\r\ncontent-length: 176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":464,"size_decoded":2101,"mime_type":"text/css","magic":"ASCII text, with very long lines (463)","md5":"b4ee44940066a271f8575baa60e65903","sha1":"bdde2b2f8e9be34dffe963f50ea36280a3cbc6c5","sha256":"39bf0ed323fbebafdfc4d9d41b740f4c435172d63db0f269aba4904ad58b6cfa","sha512":"74dcefaf0583f2144ef175b6318e85cbf6f32ff068f7328c509af4317eec323f2450d6e986903e6f5f1a4cdd4984571a9ffa5b98525dd8220a6d7a228ac361e8","ssdeep":"","tlshash":"0af089d0c9f5d0ba27fb727d054cb2252b447145cda68bdcf95a167450c83bc0096f88","first_seen":"2025-04-27T18:41:41.60946Z","last_seen":"2026-10-08T16:09:03.754902Z","times_seen":249,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/fra","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.460Z","timestamp":1791473432460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/fra HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4ROgSGecPifmjf1boUPkRj%2FrW3t71FGnHILlSlrA05%2Ft9FoEqopBxCvSOwH9oK6Rn9lhAqujR0hpf2XA6HJbNkd5EdBoF%2BNKHrUKp5Ub0iMHVoAayhUqChVYR%2BgIKU%3D\"}]}\r\ncf-ray: a4762ff8db4156ca-OSL\r\ncontent-length: 270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":2027,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df7abc0495deaba1f82bcec7ab184190","sha1":"6c8a14592b8530f22a0bfd62016bb9618ec20574","sha256":"cb57b155d387d64e3edcce78f799549de27ffc57281bdec18e37e9bb33f2efd5","sha512":"7d9fbe7deb62f5fa6fcdab39a78e9d93ea6af1429dac890d576c67ee168ca3e0d8bded466e29be61b3a79f66f0e787220bdafe93b0daf74556d3b4e158fd5a6f","ssdeep":"","tlshash":"b2d0eb29a0b76c2401e24a1163420b8b1768ac9660a27a65226124b2c6ee9e23398b17","first_seen":"2025-03-10T19:15:00.507549Z","last_seen":"2026-10-08T16:09:03.545335Z","times_seen":95,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/tur","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.471Z","timestamp":1791473432471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/tur HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvCIfTFowpbkVQl17OVPbsKcJlzEVDMH5UYnnO%2FLeyUvFDnmnKE4mjXF18AbpwrSBfIfxq3wmUCjQbqLyPgYnsNM%2FADllc8jdesvOPOkcnCbU%2BilIESDjBBy1auSawU%3D\"}]}\r\ncf-ray: a4762ff8fb4956ca-OSL\r\ncontent-length: 726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":2481,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c18b8afd1a531b413e2b9239325d736","sha1":"02957d77cd2f00d8e2b41fb34076d9dd85f16c08","sha256":"3a9f1dadd4ad6ea4bc60465febc1733776166e650501fda7b10385b0d121ae37","sha512":"93dcbf987893c92ee4673596623b13261475d78e11269d92639ce60a406d7ee5c604b96e841f173929585658729fb0a127a44265e72824e96755a0ed55a0672b","ssdeep":"","tlshash":"d5019900d3e3a364147c0e87e92d2d1c696f6d0499006184337789d0e775720e528f83","first_seen":"2026-02-13T05:54:01.269561Z","last_seen":"2026-10-08T16:09:03.776051Z","times_seen":21,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/fin","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.492Z","timestamp":1791473432492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/fin HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vygfaGDCiqXCzWsNZN9wD0dCaLp1rp6OcB3rhw4Ikp4csUEgWe0sudxuoiWdAp6%2Fdd4apB2dHyuVozACynPhdRxLOO4B%2BN8uibL7xGKHLjngEG6q4pnoIS8sCt9cPnc%3D\"}]}\r\ncf-ray: a4762ff91b5b56ca-OSL\r\ncontent-length: 230\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230,"size_decoded":1983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8a9d2ee3b0cf348805e3365e3f80aeb","sha1":"30de7c49ca8b2b388b077c9c860fb6b3f4932982","sha256":"7a305c0741e079f529c6f646e2ee105534c6a018fe29e1dac979985b59d33bd9","sha512":"1de45d4a78f4b357e00581ed3503332b9210db87a3f774d6cee29aa890198203804f7248eb3aebde96477ca3883a730f282daa95ed640ecf2428ab510778bb68","ssdeep":"","tlshash":"3ed0976a8f054388389aae000a638eeb808e48080a1968d023034d8c742008513b4c62","first_seen":"2026-04-29T14:23:59.604301Z","last_seen":"2026-10-08T16:09:03.756387Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/503bff46-e1dd-4a18-9783-857f93993c58","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.537Z","timestamp":1791473432537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/503bff46-e1dd-4a18-9783-857f93993c58 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bd35pntVVl4Z9QCpUyXl%2BrfVjvFu3lIIGZX6srUO4sWEdIj%2FuwFP4ZqLwValyyP5J%2BMiFBEFL31YaJuO5Pzk6jSDjz2zLx%2B6%2FPtEFCYbZuxwUpMVQYzmwNTk75eMYQo%3D\"}]}\r\ncf-ray: a4762ff95b7d56ca-OSL\r\ncontent-length: 1240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1240,"size_decoded":3036,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6c8619367c7a60ca5e9deaf8ce9fa9b","sha1":"d99db489b45dbac7a9141176a891649343421b6b","sha256":"4dc83c663c3f3a9e897fb47454876e71488759ab9729732c51d3ab0c63cd6fbd","sha512":"b4e3a89032278e7a8460d16cf6cdfd5d1600b6b77772e65e3b3de8ef4a2a22d25e92cddc02a405e73552f3240cfdc810b50423c42a1616ed1a74914e7129b96c","ssdeep":"","tlshash":"fe21953b50df15d3a6ac1450e3ca7764652d2b43c6804e685607b54e8482089d9f9a2b","first_seen":"2026-09-18T10:10:37.81696Z","last_seen":"2026-10-08T16:09:03.779859Z","times_seen":8,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/54239-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.726Z","timestamp":1791473432726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/54239-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhxCUM4BjMaSuUP7il8UqnFxrh33AqhwfCako9MaPFUTgs9Yg5nnWmL0GkW%2FBr6DMkFOG8M1Nf886uZZEFc5Bt0l%2B5CAyoOc15N%2FqtXUiaxw6iiNoNe3Et3nLabxj80%3D\"}]}\r\ncf-ray: a4762ffa8c1056ca-OSL\r\ncontent-length: 6042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6042,"size_decoded":7798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"493b248471829630953d345a1a8ad5e8","sha1":"80409a73e8877b74d10237cfcc73f0e00493ab1b","sha256":"30eff514f3beeeebc00d5f19c4673b4fe9cbcbaf4519eba09bef6b9379260b1c","sha512":"7c54b5b367b5a1d7e973041f44b42a3b810aa441c034461091fe5cb83910d976c50f5d886f853438ba6d8f95e975c8d8f24f7f186514fb5e627b6ba819262fd3","ssdeep":"96:rbG82hubu79Q8RMSTO7Vsjs0f+W2v+gBtqQnM1AkIxxs97ym4H0MaY97uZypBgRO:rehM0+STO7VsjUWw5E1A/QyBDamuUpeI","tlshash":"4dc19e9f3a883e43b938a4aefa74b5e1c17dd19c04fb801f88e22a048d75169364cf81","first_seen":"2026-06-18T21:04:57.836645Z","last_seen":"2026-10-08T16:09:03.582436Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/64985-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.771Z","timestamp":1791473432771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/64985-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zmr41cr3fUJUCID9O2marNhKwpgQTTEAwdDU0i0OUtz3Yk8NS7ch%2BTTuHlxufAboFdxIri%2BFYss%2BiLAWI6fbD2cgwX75wmy7br8Lju7zl61tgHdyukWkiDfxYRdb7B4%3D\"}]}\r\ncf-ray: a4762ffadc4456ca-OSL\r\ncontent-length: 12680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12680,"size_decoded":14437,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8bf45d926b783367da43f0c376d27a58","sha1":"b520632d368beb4ed4d51b67120c755673ec50fc","sha256":"d9d93ae0dbc5e4e35da8bf13c48e4ba415e805cf947df0a4e6794f0266367694","sha512":"7e9590060a8f04312ceb43ac1e5124277d5d7acdb96f974f02d1c3d52cb07ee317759005b58956517005e3aa139290692e267b4f39835e59a4772be64409ba27","ssdeep":"384:2LLOlwKJYJokYjJOggMfAR4i+CQL6musC/z+:23OlwKOJ7Yj+IdT6muj+","tlshash":"b142bf1cbde303d92bb765b1f51dd52b7b6220e6d8038ed36a044f5fa4462c183a651a","first_seen":"2025-03-10T19:15:00.52492Z","last_seen":"2026-10-08T16:09:03.677337Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/62358-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.778Z","timestamp":1791473432778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/62358-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSG54At1UT55OA2beshcyh00bEET9kaqeI%2Bx%2BHqpn6ALz82W7QdsOSklt74ccZy%2FtN0sm6DT4Kc217w4CC4WuvKiUYSGhB2GW6riOZFQ7ahmoxU8IKXqv3Ag6wIeoDQ%3D\"}]}\r\ncf-ray: a4762ffadc5456ca-OSL\r\ncontent-length: 9858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9858,"size_decoded":11614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19a8a8d1aa9a43592cf046e0618c50b5","sha1":"481fd231189b7ddfd351ba6f7561651042571a89","sha256":"b0a6563dba6f16bae40f5c8ab8ebeb6db159f307efba0dd39f36dde274746f85","sha512":"b0b501d77f257bf1bc7ccff4fd4f8adf1bf0004a56acb6cf475240fdb16f1ac518969a8d0ff98b214edf2e427ebd18d41d7b3d6e43fde2248cb3e7af33e1d77f","ssdeep":"192:VNKzjtDWEsLcRdTABiTOPW9abEcQAPK0Veqwpm9RL0JEPKtE/8A+mK:VkhcLUdTABWO/bnQAonpmLQJEbEA5K","tlshash":"3212cf4049613bbc3e13d4bfd65eb631e0bac6887d488621396f18f1e42afd58c5d8b8","first_seen":"2025-10-04T04:16:50.015902Z","last_seen":"2026-10-08T16:09:03.717112Z","times_seen":9,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/eng","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.453Z","timestamp":1791473432453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/eng HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jFtilV414vwI1uNJEjR%2FlIIxYCMozdwpwlTYoVkRGmn%2BqlRv6kRzE8FBmUT1Lx1rHIwA1F6M6aFd2JqU505%2F0oAWgeZrbUfV1Y83jTywFZCuPU7P060J%2F6wxjdp1C8%3D\"}]}\r\ncf-ray: a4762ff8db3d56ca-OSL\r\ncontent-length: 2025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2025,"size_decoded":3783,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"28192fde72ee7804eb6b985625a2d269","sha1":"21ce6e4e5774d0e6fe823fc574ce301d961411fd","sha256":"9a36d225b59eaaeffbdc8bbb5c3a59d2005b19967d2138b25557ec3de1763f57","sha512":"6eb0933824656a8b4fab2ed849bdb265a48b1cd12fc71350972a0928bc0d345b205dff3d22d6ed0da4734805d06b4d0f5391b346440f20f780cf82bd684b4946","ssdeep":"","tlshash":"3941eabeea1e28f805c4ac05b034e111062cdfba3787306d8915f9d8ba7dc6d1b92495","first_seen":"2025-03-09T08:50:28.596159Z","last_seen":"2026-10-08T16:09:03.657218Z","times_seen":112,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5c036eb5-7a1f-4907-adbe-d54430e2dd45","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.554Z","timestamp":1791473432554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5c036eb5-7a1f-4907-adbe-d54430e2dd45 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kH%2FNj9kL6Et9PBwHaxIvauCyBmitjKb76vp7qArINaeBkXToKjlNEERHTlUbEJVCRMqwTJI%2BfQolOiebrk%2Fdb5x8Z6iikoq9YSfXw3th7Lk%2FVJzFFrjfgMZFvUDfAG0%3D\"}]}\r\ncf-ray: a4762ff97b8a56ca-OSL\r\ncontent-length: 13510\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13510,"size_decoded":15305,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cc5355b5bb7020cabdbbf602c6d5617a","sha1":"1a084343b1738b7933a35704134bd95dbbc3c7a8","sha256":"dba54ca89bb4d7a7e84d227d6e690f6b3871bc7793d4b2093531b4f44ee97ad4","sha512":"151010c895d980cf5c1179bcf07d8c58d5bcff40cbd070be8a5fd89f5c26e6fdd2ddf806f40294aac918976e4fe2676d568267dc8f1ea6e8291b9db8b0dccca7","ssdeep":"384:72fE13pMlO/1F6HzibaLTzifpul00U88+LfH6hnM:i03ilO/1sHWWLwpulbz7H6FM","tlshash":"fd52cf18a2d90b5a9134f68bb6be51263383342a5613be6c7fec3382e798145255322b","first_seen":"2026-09-18T10:10:37.80617Z","last_seen":"2026-10-08T16:09:03.675668Z","times_seen":8,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1779802932","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.564Z","timestamp":1791473432564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/plugins/prj4-control/assets/prj4-effects.js?ver=1779802932 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8g8ow43qMzrZrKICip2duRDjMLIidoVIid3ZWnT7cqEnbj3GztSDpuAFctgaOIm7X7Q05MotRDmKOka%2FKOAM9VNqMaqWPZVk1KI31b%2BAFpYC2DFnJfjXjU1FM8k513I%3D\"}]}\r\ncf-ray: a4762ff98b8f56ca-OSL\r\ncontent-length: 12704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43833,"size_decoded":14575,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (519)","md5":"dc0ab4563ee0d92d8837cf8d12ddd725","sha1":"89482b62a0398687aa49cbe0a94ea0480a7c0e59","sha256":"ead19f0ceaff91c8437160ab44698647009dc865fad03610ef889de90840b381","sha512":"ec228782e91348254d814bb6edbd1294840d45d0139db4277fe32eaaba4b06e045330480f7f2d1f8a18681cd7b2fa3e718545f0fe65c7d28c444581b7fe6c56d","ssdeep":"384:UUw0IxBpHfBwxL7J3mcj4BZ6aQ7hiZ7rd8jKt3HOmvBmcdYGcf9wMvibtfc+MV6H:/wV/5wxp3mcjDkRBdMV6vy49T","tlshash":"c4132b7962bb003a4013916fc79fb74c36269077b206ca087dac5b6c2fc593897b5bd9","first_seen":"2026-09-18T10:10:37.965778Z","last_seen":"2026-10-08T16:09:03.762499Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/5353-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.623Z","timestamp":1791473432623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/5353-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLtvjcYz4L60mJxVR2xe3qHsep3S3ldpULqxAfjOaMHBBsoG5IlJZzyeatvz%2FZOmR5Qyumfz7P09rZk%2FYKRHK5bAXEBUS68VcZlSAfhMVCiGerMWNiO%2F56vLoMS%2BNOQ%3D\"}]}\r\ncf-ray: a4762ff9ebbf56ca-OSL\r\ncontent-length: 10008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10008,"size_decoded":11767,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"319ef3f0439d7d4504ce5ac2eefaa4e9","sha1":"77c08526995f4b7bf597fc209b091c30067fd97d","sha256":"9cdb827c7e51d6e08774cd3cec8c45cca71b16a63bf34b8b0ddbd8e7af1a9125","sha512":"0fd6b0fc1ea1d3334073801f972f39314576f47eaa5d4a93a5028931b390644c1c3f30c99d2d4386462bd2684ff6ecf73fd7b3ac7aeb24aaf017c16fd48aaca4","ssdeep":"192:QtAULnvX57kgHo7k3KLzb2Qxign2w/CIdSZ8if9K9gLEmtwNq3hwvcb:A1f55Qk3IzqBgpR/kK2EmMK","tlshash":"dc22bf2b1e736f2594086cbe2416c962f0951f9c72610f3b4bf8696d21a9fd3331a891","first_seen":"2026-09-18T10:10:37.818248Z","last_seen":"2026-10-08T16:09:03.74025Z","times_seen":8,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-gates-of-olympus-super-scatter.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.672Z","timestamp":1791473432672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-gates-of-olympus-super-scatter.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygTrH9AAYIuuQ9o7NLg6nuL6UliztlDypL3yBDCjoWDd5e5vG9eNHxdCD7LCUJBo6hyaDA0PusaiR2qClPBhl1RiIuJE2%2Bp%2F1Xju2HCHy58bwZPi8nWQV8LwJtkwGL8%3D\"}]}\r\ncf-ray: a4762ffa3be356ca-OSL\r\ncontent-length: 6120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6120,"size_decoded":7985,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8aba3412bc0a163634a5cd582f03561e","sha1":"70f5ea36b867111d6bb59783ff19d511e11a359d","sha256":"119313877312b87fcea8dcef9936231a2ab035afc234fec9b48e0f01006d50f9","sha512":"f271f316d452a4b39651ba53c01f43771de4e866b77f5266964075a595c2494ea515c07fe3ec2bc1d00dbf6bf9c9f5a26041f7be8f33725988eef66499741e45","ssdeep":"96:7Xy96vccwYkhPqAaVj6SOEfKvhHM+QRTAdxXy0WU+TY4MbYbWikjwOko62gUSZH7:+9ZLYIo6SffohHMHcW5U+TY4MEbWiukT","tlshash":"6dc19e3262482b046f79523b9806d528b44d1e4b917f4bdbeb9529576c01bc2b5b72c2","first_seen":"2026-09-18T10:10:37.93913Z","last_seen":"2026-10-08T16:09:03.630689Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/1429563-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.717Z","timestamp":1791473432717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/1429563-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5lxu8KaKNRVeobzkvrDulHlRY3O3iBSLSlwTR4Wiz5oYTMA0Z0O%2Blci7KIr1aX1CipqEvwkCwV6C6eRkRtrhi4EKWMLNgv%2FfVIq644BEdQr0u7qoVyIWaPGORysrEc%3D\"}]}\r\ncf-ray: a4762ffa7c0a56ca-OSL\r\ncontent-length: 4340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4340,"size_decoded":6094,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3cb7888d02bd01e92dbb7b29f6ee539b","sha1":"3863852c77b241a3de0e23a8a683212d2cf1652f","sha256":"f1e5daf1aa3ab8fe3b142733ba0d4c83b8084e566da160bfdd417951c6117ff9","sha512":"23a75033b30f429e5b9ff2ecd9705da2982342bd814f33e5e3c6ace6fb8f50be3de30f73e688c3efc2913a9d5ff3501fb60a952919a1c0ae7d1498892996a523","ssdeep":"96:XpHR8NKkr6ku8zQmD1bGFcS7QTZPHJGTQ25lr/F5ojoUG4QFjeZugfIT:Zx8NKkr6UQqbGFcS7QVHgxx5ou4QFSZQ","tlshash":"46917b2a6f1bc31e0f8d1222840f48a10c0dea015d998c1692fb34d16d6c83f86c76db","first_seen":"2025-11-25T06:07:17.913525Z","last_seen":"2026-10-08T16:09:03.790029Z","times_seen":11,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/1435575-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.751Z","timestamp":1791473432751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/1435575-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xopszuBZiGGEqt3IVGEL1yi2qdp09P9KvfoLxFkwc7p%2FdxNMe321BqJp4xAdbiJGmpO9okQPnUR90ipD1EqX8JhoK7pm6mf49%2F06S5mgbQRpPOI%2FFfUYU6vJYDDaUw%3D\"}]}\r\ncf-ray: a4762ffabc2956ca-OSL\r\ncontent-length: 6078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6078,"size_decoded":7834,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b21aca6fc212af379d937ac299536985","sha1":"50d0f913ce414221299ca57f3a7178f1c64982ff","sha256":"e2c5cd9931d2c0c3fc8e599b9c46c5e620019f9e34b2515fbeb5372df08e8fde","sha512":"c00e4d0f1fea1c5295242ae0038ec900a1a35e8a4fdcda20c200cadcbe689a2b98b0b0f5d98776fcf0e94da419a59342a99ace84132063846b9a961c2b3b8f9d","ssdeep":"96:WsDqY9bNqGIJ7d5EsACAbuFY+Vt61OgAiDmMpKc7KbHhQDGrHFF6xAyha8mB:0Y9pqlrEsD561OgAiVKcmBQDGrF+28y","tlshash":"48c19e9abed3f2c99d05180e24005e6b1875fce7202ddfd86b99722b75f6894843738d","first_seen":"2026-09-18T10:10:37.892771Z","last_seen":"2026-10-08T16:09:03.613896Z","times_seen":8,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/1421329-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.823Z","timestamp":1791473432823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/1421329-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:30:32 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\npriority: u=5,i\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlrumP0I9mZZw%2FiOGKmcIf%2B1XJ8LVyZKwDZ2B3C3mgSMZAIqyp%2B%2BIQgsheRTnPx68RoAf39XgVEX6JVl%2Bdx5es26o7q543tPbh2N08lOYMo2tkeUU%2BYOsIqokLxt9BQ%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4762ffb2c7856ca-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285,"size_decoded":2050,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fee0cc2f258c97da0c1ba0fbc2aa63b9","sha1":"33a19abbf16364ae9d89d629de02d69d3b6e8045","sha256":"96ab528e80fab35cfe4747f07c03f0f4cfdf5ced2b611755596ac814931f88d0","sha512":"3d167634981a58f8905639df73244e0b7e429a4d449af3b8a7fd5c0bf3e732d52e86326ae03270be31760d0a5df5e85d94fe0106647a54c701e519557d8d7ba7","ssdeep":"","tlshash":"0ed02bb4321cec1a4640c206032ff40a21abf0e69b85c354f8d17d3566062f7bf5d7a8","first_seen":"2026-09-18T10:10:37.956889Z","last_seen":"2026-10-08T16:09:03.573069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/735.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.370Z","timestamp":1791473432370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/735.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZFe2F1TPwbfa0mGU%2Fcn7LS3XvWp0FJZcAhkBqtgFrRVDXgiAud3nb6s55wJz2XUv0T7k%2FeT3T0MVNldX0vlbx2L6ZMl3cuWUblHeDIvWADJmELCRtNj%2B%2F7VvFDAx3M%3D\"}]}\r\ncf-ray: a4762ff84b0d56ca-OSL\r\ncontent-length: 956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4197,"size_decoded":2871,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"69907d3a92a34578d3fe6d59c2cb4790","sha1":"773fc95c95337cac53eefeb5bf5b6e104a81147d","sha256":"4701b9a3236af4bb0ce808f4bcb0972a4808d7d9bc47035d5b2fd9e4238fee38","sha512":"a68980947229a68c5dac195be39da3bb9f778b472366d294703fcd1c455d18c968468e1c36a7f7f0def42e00f72366304cb18f8e36482bfc6d63fd1539c3eeaa","ssdeep":"48:H1F2U4jTp36S0WOfpO3SX9ffioJDv+aNEj8pFPR3lmrV1bHSjqIq:H3s/RCfUSXRfZRv9NQ8pFPRUY/q","tlshash":"5a8103733ab2760d8863bc7daf8a15cf7070c022d66696e855a69b35439b18d0ee105f","first_seen":"2025-11-13T20:36:08.358561Z","last_seen":"2026-10-08T16:09:03.671183Z","times_seen":18,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/83616fa2-298a-4488-b7b3-e4213f8de5bf","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.593Z","timestamp":1791473432593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/83616fa2-298a-4488-b7b3-e4213f8de5bf HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDv%2FoB6Pe2PHYU%2BnIemIH4N5pmpAHj6PphAPAj0j7P3WF8%2F2VHiHIM4rL3f0c4S%2BRz8VwZlLLPhYhzjjd%2FOjcg5LMSTyrLTJXh83eHZRYEs%2FXlSim3etHo%2B23ubGWtc%3D\"}]}\r\ncf-ray: a4762ff9bba856ca-OSL\r\ncontent-length: 790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":790,"size_decoded":2589,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa1cdb8c6d6da8ca7dd83c5f50f85175","sha1":"07407efbde64ad8d37eb784e5d2598802618159f","sha256":"7b79091741cdefaf015a7b23484296c13ef4b09b03bc720ddf44bc38c096f5cd","sha512":"7a8e52a574bc4d7a7eb5e0311b791c02f10beae05396a9aca18aa47c69b04b8b874a76e71980b694f3352a2b9e1fb2c4fd7c2b269f7b0e0de97f5293e48070af","ssdeep":"","tlshash":"8b0175dddbc464cbb64a55153153fda8e05abb097010748898b2cea25d23933f02b77d","first_seen":"2026-09-18T10:10:38.037207Z","last_seen":"2026-10-08T16:09:03.788291Z","times_seen":8,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/amatic-hot-fruits-20.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.690Z","timestamp":1791473432690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/amatic-hot-fruits-20.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BoJfdTCxWPQFpC2tKsefGBOBBf6396C8n%2BDz3soS0n%2B9rq2OBrpq2TEXbiKC5ssPgM4z%2BUo6kqcj%2BHQNXBbNDske2VYfAunGw5vpnfUtDtWLqyUVpw1ApLoQZyFe70%3D\"}]}\r\ncf-ray: a4762ffa5bef56ca-OSL\r\ncontent-length: 6014\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6014,"size_decoded":7885,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8a230f60f117cf71629caed15182148","sha1":"f662f756c2dd340861c00a8c8cb56b8c5c8ca241","sha256":"bd347fa454f422b91422a20cc67ad9b0f8a0e8c2f0bb794f06c76be97e0ac49c","sha512":"9b2caea979e1ea0c44d2055da5b126c79934ad4723846e490090e4d19f2cd3a529c7353cd46324b534c736b5a540f15e2376826925c7849e6a811906e1deb3c9","ssdeep":"96:/aNwMf0vWctHMRUWrZhS5HiF47KneB7nzkMPsfjZORWobnrXNKLwor4YFWfpN8Ov:qdatsuWrZhS4exS7mVCwPpN8GQYr","tlshash":"cfc1b0a0928129a8ef45be4617e5571bd8185af4a50f6bb105f6b7d7347f90a73c4c00","first_seen":"2026-09-18T10:10:37.821303Z","last_seen":"2026-10-08T16:09:03.610371Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/61114-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.747Z","timestamp":1791473432747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/61114-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZMdmaUYeTn%2BVdBpHnGWepI3lp30cyw0DSuKrl%2F1RrWQ3Hw14FEV9r8P2fZOrz%2Bfb5jfkm5Qr0C%2FOL17YSGqdFcoDW887VdQBspeX2LAf7P7CRelQqYecUbJc7s4%2FdI%3D\"}]}\r\ncf-ray: a4762ffaac2456ca-OSL\r\ncontent-length: 21464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21464,"size_decoded":23225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a578a9f0085d0569533aade63975938","sha1":"a3070e3f336f25a0014f14116e249eb37e5af13a","sha256":"9bd5e45f2820121534061024f785903c0ce946025d9edd5fba75e6d0e0a458d3","sha512":"7c4d48bf468e96027d4d4a77605a85c717d254a2c91f559b97857ada2c6132441f4d4a95fbf70ca1e66294abff11167b579e9f92e24330196d33bca47a945e90","ssdeep":"384:R7BpC8JcP1yJaU7PiSoOTQC5DcDZ9lGtya+f1pCSU0pf1gInofFfjdMSHt:R7BuZUWgTQmwTlGtyagfrJLgIn8jdMSN","tlshash":"5fa2e11349d48917e034c26cbfc280ebaadcc6fbd6356c40953a9b6235dba57fe12e14","first_seen":"2026-09-18T10:10:37.723754Z","last_seen":"2026-10-08T16:09:03.571194Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/60924-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.759Z","timestamp":1791473432759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/60924-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yob2mqdbOyppPnrzzZCbpsfvFTJmqcz4kJNXMIJ1hgC3llJfyWuRRJXeQmQTXkYlPC8ENE7o38fhrw14g%2FZ%2FnQUSckaYFhfh1P%2F8zv4AWBKR9VX3%2FvW99T8EGxqlx8%3D\"}]}\r\ncf-ray: a4762ffabc3956ca-OSL\r\ncontent-length: 5040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5040,"size_decoded":6798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1af10958285bbe9cc191a51cae37c003","sha1":"71980814007cdcdd755a7b22599dbdf0c5fb5120","sha256":"19df4a3680e424921a963cab3ed288847020f093646c8c131ecc7328b1dbb337","sha512":"84f5ee4b6e1107e4895fb0f862da575a9cabe91283612b71da8aafa35c5d9196740b1a54b9c8637b883cd2c789994e7f05a9f5da72ea484299fe9c29a7c172bf","ssdeep":"96:Ulh/WcXIoj+YY/rmAGGSJ2DG2fnWJ8DoRZASxp2PmxW/q1nGMuWjcH/:yYcX0BrmAGGb6yvEgtmW/qJGMuW+/","tlshash":"3ea19e3e7248784ad5bda939191618959643120abc663a032b0e5dc2d323660f5f37fc","first_seen":"2026-09-18T10:10:37.907593Z","last_seen":"2026-10-08T16:09:03.773618Z","times_seen":8,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/243073-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.819Z","timestamp":1791473432819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/243073-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFHpfoZNYSZtC6L4dODLf08hjqeDtTOpb9fWTMo%2BLRSvD5SeTeMrMWaDFpzVbWXvVvyrdWMUG73a%2FdNBexXDWf6yrUf3wxH1JxW3FjD634btJ3jlxYNRobZdNBn6lKg%3D\"}]}\r\ncf-ray: a4762ffb1c7456ca-OSL\r\ncontent-length: 10164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10164,"size_decoded":11919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f051d7a47c9eb45da07e0bf99f212e57","sha1":"9a68d24d2e82a256c37c486444fc2a0d05d0a8fa","sha256":"71b9e25e9c3967f4f2964b2f2fa511304bdcc323e28b90bfc11194970fd13bc2","sha512":"e0a1d1f67f8e0d5c5a6716542888731a41bc09b3909f6bde8e196244b47f807179df9b5dfa77dd262c9bd18b07a4de4c4ed79731111e2d314b7f557adf1e41a7","ssdeep":"192:+ltYpBcOh/SEKHkWgHIj6cEYU1wppEkMjSWvn5mYvzFMyUaY:+ltS9h/jKeoj3E20Sqsgz2b","tlshash":"2b22bf5af29f103aad91b0d964770e7ef631256ce98435970083ce9d1ef1b7920ed688","first_seen":"2026-09-18T10:10:37.822627Z","last_seen":"2026-10-08T16:09:03.759566Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/icons/PRJ4/yt_logo_foot.svg","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.840Z","timestamp":1791473432840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/yt_logo_foot.svg HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ9id2ZTcnLM2209cAUGXlYLZk%2B7s8P6aG5Ss3RfGjAxRsj1rnJV4s4C7iXMFYURC2xF1J3QRvIo3drpp6JOpnhb3q0UNaEl4iNEjZPD3w0jR3YjzCIMNH0SQTbW6Ek%3D\"}]}\r\ncf-ray: a4762ffb4c8356ca-OSL\r\ncontent-length: 5613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7970,"size_decoded":7525,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4cd28fcb9c93329a4fa153c1e333bd02","sha1":"cf961f477dedb714f6e3274a8ce0d9fcf02887fc","sha256":"80b418d89b02e19c0a952d86d467a5e7bb135d9ea16296b0b07c097612b3bb17","sha512":"0a47f973c1aeb915662304d1692128f92172029adc0fef20aef2be098fe8895f2d851db2931d5194d445b4d45957d4dc6c5e1538ef497e7c86c869ad27bdf36b","ssdeep":"192:F9wxrgzL9QClaInCeR6HM/H6y9gNiw6Qw2DsWzro1Bqj:4xrsL9paHeRlHOR6PMswsQ","tlshash":"e7f18e3fd73fe02d68987231c4a79cbf8c5565862a24ca03491cb3dd78099623c513e9","first_seen":"2026-09-18T10:10:37.879642Z","last_seen":"2026-10-08T16:09:03.644557Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/uploads/2026/05/cropped-fav-1-192x192.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:33.738Z","timestamp":1791473433738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/cropped-fav-1-192x192.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:30:33 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5Pvs9EXFldt0jTzfI39t8fOcFGIt%2Fo4vjwAu7hSMqutZyp0KMxSwPD1PqteVtmOLuktUY4yby6hZ0p%2BR5Mq33592Coj3ZZnT8676OIw8TAeLSkmqnycrRwRjPQUQbY%3D\"}]}\r\ncf-ray: a4763000de5656ca-OSL\r\ncontent-length: 18399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18399,"size_decoded":20258,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"14968534fabb1bd977ac992837acdc56","sha1":"eb637a9b868a3d861adada4ceef37fa65dfb94f7","sha256":"ef04a404de8e244e8968555aa5540e037a283140bcf80f08e7caa2eaa2ecf1ef","sha512":"bd2f420ad104b546d1803347dd40100a9982e3aa0dd7c37e0b2800a47ce77608e9a59d49976dc8a395a6bfb8dc080f2040460170bb050b718a2a32e7a951a058","ssdeep":"384:jim4dDxceNl+wBHEVMrhcBRMJJ6TDQAyTsZpTU4pRYzV3ZGBcvtLK3z+xJNm:jWQ+OVMrCBRMGTDQAyTsLWNQotLKj+tm","tlshash":"4f82e13b4c40ab2e00db448b603ec3f95f157766536bd338902591763968ad14ba1fb6","first_seen":"2026-10-08T15:31:13.51374Z","last_seen":"2026-10-08T16:09:03.607732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/prt","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.463Z","timestamp":1791473432463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/prt HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgxpRjZgztBE%2FjKF8lEfvkcGWAuJ0vKI2pyAnDwTuh50Pye4BeH32hiOEp5lb9q%2BUT73BMK6WDpNI8zALABuyn%2FwfeFdgTxqGRDBzu7PVOi4miNAO0FCu97iTyljORI%3D\"}]}\r\ncf-ray: a4762ff8eb4556ca-OSL\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1084,"size_decoded":2840,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"5040bec2f80f884d8efaee776f556ec0","sha1":"caa760d0bec1ead36c722ea2adfa908b766b10ef","sha256":"ccc3a79768c3aeed45567ffd7b305d774d53b3d843903c661aa18b08517a91a5","sha512":"c4ac1ad0725dad8c021296fec6405b949145acbeafac631083150c2d70c863b35f94f1bf23828fe12617b6ff3e9ff1b33df2385f337d8efcc18bbb16b8126382","ssdeep":"","tlshash":"2f118687ddd4ac3d42b7541c9c419494df5612ca30157e814e4ab0536f6b39da8712bd","first_seen":"2026-04-29T14:23:59.915055Z","last_seen":"2026-10-08T16:09:03.746916Z","times_seen":13,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3545-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.631Z","timestamp":1791473432631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3545-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Om5Hpeyz6lu7CxZokpwRVEX51GWT6WovhYrtZnHUu2YmZEz4EE0eVp5sWs2cFcBL3jl7Cv5igmIEhIy6gsIdB471NhhMa%2Bxp41BrMSr8OOc%2BN%2BprZDvDi5V%2BldNWd90%3D\"}]}\r\ncf-ray: a4762ff9fbc756ca-OSL\r\ncontent-length: 6168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6168,"size_decoded":7926,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b96b18cf6873a65524b4faa0e961d377","sha1":"096e34f8469b344ab36ab7fbef19382389bc056a","sha256":"ff8bcbd77f121502ffb06d907a53aa8ed081b9f202fe7908f697ec4eefb1de80","sha512":"77a2e51691c382af8af870879d84097f46e96dad65f27722dbfb381bd4271b6def9165719ee541b7ac6c97a6a3fbc4b0510b253994b896f9c7610ef0149f6170","ssdeep":"96:emD06QBZ8NlFdZ9Yi4B8zkN1ap7aXx56WyJiDsvNzysSNctzvdlROzVRiiDOhMIr:86VDZT4B8kN1rXTkwOJysXzbo1O/stNs","tlshash":"2cd1a06960dde0c2762b1fe507481c0a1dc6d79b974ad21e959bb112a008c6cbb3e31b","first_seen":"2026-05-01T08:24:01.755299Z","last_seen":"2026-10-08T16:09:03.733814Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-lucky-penny-2.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.677Z","timestamp":1791473432677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-lucky-penny-2.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8ohv43tU8EDzr9%2Fr7%2Bfe4Que1MIJ0eC%2BQVRf8IRDUAauSJueXVuRi0xOMlHDvrgCU0GVLDqf1mH%2FrAVO6zyE4wnrhYoGBayl%2BpNEi5juxdAirbuUxPR3YMQNlUJ%2Fd8%3D\"}]}\r\ncf-ray: a4762ffa3be556ca-OSL\r\ncontent-length: 5942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5942,"size_decoded":7815,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adb694d07b405a442662d8c9c628be2f","sha1":"fcdf9aca7ecc63ffaa2191139784be88451a41b5","sha256":"e38c7d6bf074e0a54643149c6450afd90dc56d4f1918c138f6c19b485c714536","sha512":"9162c3dd598ac2ea5c60b8f5f92607784b02468b9884924b1e533beb100c30fa88a3150307a23002753e8786de44a1645a98e8b1fabf3571537efaf1c048115a","ssdeep":"96:S8k2XCRa5/nF/qJWOrPtQ0ALd3DS/zR8ghc+QeM8vceDT0shvMxpkWMqlJFR2:9Xia5/NqRe71m/zRHhcWTUeMshvapLne","tlshash":"bcc1bf6c81f61c0acfa39c00931bc24243ee9a1de96646906149ef4df77929cee6cdc3","first_seen":"2026-09-18T10:10:37.847103Z","last_seen":"2026-10-08T16:09:03.783594Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/1327864-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.733Z","timestamp":1791473432733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/1327864-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bi7WfKqBrBan4CUr2lVMZjHLLKGCihl7PVW8ICU0bpc2OAXHelW3%2BkgkzULZZQ5nTAcD2v0vhcrjVMCm8k58lRoKvA0VQ9ltDZUwKZatb6hqkkNtHXOkTwQTIEdNDvA%3D\"}]}\r\ncf-ray: a4762ffa9c1656ca-OSL\r\ncontent-length: 9446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9446,"size_decoded":11198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a901bacddde1f9b78a095c27b0358c77","sha1":"5135398448e1f77d3cdfb238772631390ca8a5b6","sha256":"c3dd36d47953be7489756341ebf317e486fd27b14689e68b42f77a7745b0dcd5","sha512":"a012b0d9f882c4abf4af4155a763c91c321a9ff421f5ed0770814ef437917aa03328ce64ed7790834e9bd73d5d743f8419f3ab56c402de558b0f16e89a1feea5","ssdeep":"192:8NKHPnhDvF10twsfSbLq21YXdudiz+BEP6GO:X/hDvktwsfUETSBE4","tlshash":"7912b0bf792c3b0c4ba9d051992ad5cdc9de25438d0425ff5d282e4f6ef48849833d2a","first_seen":"2026-06-18T21:04:57.762057Z","last_seen":"2026-10-08T16:09:03.735078Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/65372-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.796Z","timestamp":1791473432796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/65372-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUwXlblO37CCDbnDFirU%2FlWD8D%2FZA4dhLJhKjk9Y5qfN5TRnKOrtBrm96kmosfsS0KGPQa0SxHWzu6UFIWTyzce3hC1%2BZkVg7aNhzZ5Z3ulV5v34fyBc3n1H3vcVOPM%3D\"}]}\r\ncf-ray: a4762ffafc6356ca-OSL\r\ncontent-length: 9936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9936,"size_decoded":11692,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe35bf50fc4ade1f5e937d83e811fc70","sha1":"66e51487b60b67264bd186670e5c99b6ab64f020","sha256":"b5a67e05ad48884c5d2605063f75e55af323eaa094e3f95b47147eba931ba03f","sha512":"8877f12dd85c84490ef177f5cd8deb8d743be3509bfc1b6afa67f751c0b196d3a766bddf38c20ab6ad1a95f5fab2933903382e069e477ac46b2c8b6149e16665","ssdeep":"192:14bxhx2ypdtNk5zCL8xOFuGOqfg07jZSpU5KwrDUtaJqn0KWs4e:14bdnv7F4xuu4hSgTrD5JbTs3","tlshash":"a922afb523a3d59201617fbcf12fbf1c9612219ea2c19ad239de050c6977be66433940","first_seen":"2026-09-18T10:10:37.73368Z","last_seen":"2026-10-08T16:09:03.771074Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/254010-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.817Z","timestamp":1791473432817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/254010-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWvAw7FqtzQ5zL%2F3uz%2BVlsBepVbur05xLKGjB9gDICIR3GRfNnXHM2LSA%2BjfEb%2BhXeub%2FTf4iMnQpuwlRdMXSgYYJ4Verq2gbJBauRFVINLpsqc4H%2F76U4a%2FNKe736Y%3D\"}]}\r\ncf-ray: a4762ffb1c7356ca-OSL\r\ncontent-length: 7548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7548,"size_decoded":9312,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0953e03f55f66bfec28a31c31c8a7774","sha1":"66b71cdc3223b1285d17789fdb2749e4bbbe5721","sha256":"d8dd01cb419a6789ea73ec9b3637399bc850de0c4a6c33bba5a8caf0023ff67f","sha512":"9befbc284ff74da1898136f7bc85746635ebe98f2e7a991a7b8d69c35754c47847f4871c01abb07cd89c1335b973ccd884d66a318d7328539695359e3cb18ddb","ssdeep":"192:H4+8BjKxbufPwwt3cIcjpVCA4goG+bwUQJsfwTTgNlCWrMd61:HX8BjKorgpVDewUss9XCWrM0","tlshash":"bcf1cf421eab4b55114e5d93e87cb55e0fc130961457869511dff02df08cf0abdb8a5d","first_seen":"2026-09-18T10:10:37.735356Z","last_seen":"2026-10-08T16:09:03.785811Z","times_seen":8,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/59517-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.821Z","timestamp":1791473432821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/59517-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkuLN1tofYXIX8KmxAq%2BQT0sun6K2uVxu9y8tQZMN0VtEKwAQnpUv%2BmzwPphJrQCzL2iHUxnRW4%2BhuYk88lB%2BLNYLE2eqDgVMZ8r4l93EsDp3trBVGFU41uhl%2FXBj4w%3D\"}]}\r\ncf-ray: a4762ffb2c7656ca-OSL\r\ncontent-length: 11420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11420,"size_decoded":13181,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9454d735179e30be91c240f1a838d214","sha1":"ea63e118c3a2cc1552b0e1eb1a88f0b537b4a62e","sha256":"d6780e785c50b4cc49dcc403b8cbcf81bb73bab2e288788cc1706dc53ecf54f6","sha512":"420f9ce748afed2c6b028b2531cb493ee2cc87a46863c7c61887673fe57e5928ea840eb10877fbd57c2d9b667d19d5068d227ea239b2e4b551cb46779493f1a4","ssdeep":"192:f1dstVrWIsN4KrS5v6feTRnpnVbm0uGYqJlsRlpcs1bwXpuUyaTblWH04MDHLIBe:fGrWITTQ0NYqJMCsB3aTblWH2DHLoG","tlshash":"9132c087f49a1076d5e4ad71f676b3a4472a53a7e4f166bd5fcdc80a8e00086b08cb9c","first_seen":"2026-09-18T10:10:37.911541Z","last_seen":"2026-10-08T16:09:03.684708Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/tiktok_8525c5de4d_9504b2f594.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.834Z","timestamp":1791473432834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/tiktok_8525c5de4d_9504b2f594.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XepFzKVYRHNawQ8DssyaCRmEosDSxmAPGO3ogFZ77hHIOPWEHfZVrDukegyp75AktP4LcBiN5sZzGCK21x6MSDMjygVD2CHjk%2BJhKN%2B4n4JoP8S9eCg0hTHIPfSWBaM%3D\"}]}\r\ncf-ray: a4762ffb3c7f56ca-OSL\r\ncontent-length: 1047\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047,"size_decoded":2912,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"b3d7faeb62c602a326108554d9adf0c6","sha1":"00d40973ae7bd47162236415b0cc5c617918520c","sha256":"481c958c9967e492fec360a4b08a57ce9033091eb5787815c5d3db595fc76750","sha512":"2e625b1fd9e148919ea6caf7b1e1f3128659afc3f411167b9ebd110f8cd1bce73793a4394ff8628042bebbb890e1f2f00c55c2094c284f2e1fc6c0e2b913d6d3","ssdeep":"","tlshash":"df11b96e4b809c89449905310462de969035905f83e2e508cdae0912a417776891efc3","first_seen":"2024-08-19T20:57:32.270777Z","last_seen":"2026-10-08T16:09:03.555111Z","times_seen":23,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/cs_cs","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.475Z","timestamp":1791473432475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/cs_cs HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC0QMkwBXJ8cAbr87xavTDvyuA%2Fkyjrm8skLguD6VTDOgV0tgIsgnRo4Nk4rz4WxaaEB7g3jirT7ImXKs5H1VXiZDsrtqBsrzAQvEj6HVW7v0JFKMbl9Q%2BwuaaklYys%3D\"}]}\r\ncf-ray: a4762ff8fb4d56ca-OSL\r\ncontent-length: 2515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2515,"size_decoded":4269,"mime_type":"image/png","magic":"PNG image data, 128 x 96, 8-bit/color RGBA, non-interlaced","md5":"e78c42f934d201cca99a4c3ab5f81267","sha1":"cb49c1851cde80d693a51d9155b8d462d1fa30c3","sha256":"9a71c7f43ecc3f8ce79335ab3cdca1e8d3e047e21351d02e600b3f9f56683beb","sha512":"132718215d1790b2f0d17dc125d08d918a8c26999866c1250f7fb04420fa1100bd28540a4b960354e259f2d573746698f06b13e357c8463bdcc9ca09773646ed","ssdeep":"","tlshash":"93515cc3c6ef7ee4920c8a78b15a46352444ecbf5f5d5bc998b49f110e0bc76215a053","first_seen":"2024-08-19T17:56:08.328387Z","last_seen":"2026-10-08T16:09:03.647401Z","times_seen":76,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a055890a-744c-4f96-8f07-6a8febb13741","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.526Z","timestamp":1791473432526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/a055890a-744c-4f96-8f07-6a8febb13741 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYJFnZsWbTHHFvCZJ%2Fy%2F5t%2BZ8LNm33eOffHH8K8WDs2UtymaGSC2tmmMwyt4v7uTt8uvTya%2FcNxk2Au0xSICqI9xD74wSIohKlfT3Cljtva48k9xVLD%2B5%2BPxt18Fnm8%3D\"}]}\r\ncf-ray: a4762ff94b7456ca-OSL\r\ncontent-length: 1838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1838,"size_decoded":3636,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0bc7da6331eec1675ced58da768c84ca","sha1":"d7390df58b944fe690852955e67a58ddda019f53","sha256":"7c54e64a832477cbfe2b8c4dfa9df192581413a0cdc588736f22dcbcf12949be","sha512":"79464708f91e011b8e1bec70fa9d4c8b78f26ff5e51c694a70bcbf9ffb957b83b2c4249dafa3b7428e75601fe0292e75781645220cd4faaa49c1c3b4991a23b3","ssdeep":"","tlshash":"e4310988f3d49bd9eb2ded39327f5a27d80534ec6ac1790894c1504393e5991b0021be","first_seen":"2026-09-18T10:10:38.009435Z","last_seen":"2026-10-08T16:09:03.671747Z","times_seen":8,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/5040-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.644Z","timestamp":1791473432644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/5040-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lk%2BJNeQ12KoN58nwvHOEAlwTzLQwT5dGYNjBIU3WVhMMhf0Vsm3hxe%2BJjo6bZFvhMP1O6%2FKv1RePbJp6BBsL3ghtv8rg4oDBcseryPv8x089rSwDOxgS678ppwzGRY%3D\"}]}\r\ncf-ray: a4762ffa0bd356ca-OSL\r\ncontent-length: 5650\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5650,"size_decoded":7406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f31f45af85a9d8e7871d3fe8d4a43ef1","sha1":"d4e27b1490c7cb4cf42d46e02ca514d1b09ab1b6","sha256":"b17d309adfd2b3a985dc2e819f996509197880cd4c744e0fb7c2b1fb775539c7","sha512":"699497f92bede0745fac55b2d403d023ae2a18efb21a4f62aeaaa4a622c465451bf836bfc543c0b4306b2e6d5490643dda2c8a8b0461297942bbd0599df4e01d","ssdeep":"96:L+fsnsQgPG7XQ5kEe2fHUy8Zo5xzqNSGrthajaWzVvCWELLNhKL+E6BGbyZw:6fsVU5kuvUixzqTrthunVGuSeD","tlshash":"f0c18e35903b4bec736307d8431ec7d535c2169b42ee07bb9b21be27e920d6e1869961","first_seen":"2025-03-10T23:12:12.209252Z","last_seen":"2026-10-08T16:09:03.709123Z","times_seen":11,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/139099-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.777Z","timestamp":1791473432777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/139099-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLhaYFStPRKwXy0qgfQDrvAQVARMvhWiMZ5yTwcQbqAzAe9zk9OheZVgEKuUzbucYS802HLBTHfWXoAHBxUgUBltkHvJLQN2KGZMraY33LKeF9x%2FqCt6%2FknBSYfaWi0%3D\"}]}\r\ncf-ray: a4762ffadc5356ca-OSL\r\ncontent-length: 7548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7548,"size_decoded":9302,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a688659df9dbedb3228d2aea48cc222c","sha1":"996a7f98610998db855ec4de7b99908b5f9c5c24","sha256":"86dd7c5d8268b55e4aeab16d2704f15c27e23990d551b3cb6d54c71b7f7b7640","sha512":"65ea4c61a7004f06c7677876ea3f727910b891e499db41491688e5d333f0d46f38e4d7a831a15c718fd02bd0dc55f33a7e375393b075724818d3751fcff3232d","ssdeep":"192:9CKwc9Isfa6IMP8YcgHajnFXpoWBJYdVlfhmvVOzNjrF:dhfaZE8YcgH0eW4dVyNOb","tlshash":"2df1af3e69814a451009460abd64623ba467ad27b0cdbb0466fd16bd2ff13f07c6e706","first_seen":"2026-09-18T10:10:37.878052Z","last_seen":"2026-10-08T16:09:03.790812Z","times_seen":8,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/57470-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.798Z","timestamp":1791473432798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/57470-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIZozbPrSXMNUPOmEYDqrGaBiU%2FUAJhw%2BzxT2%2BA9D%2FbBXKGny4y5Wnl7FpeAb3szt6%2BQNNv06i%2B0RZ%2B%2FYTKnZwEJZFZTT5qo12ZV6Fzc0n6vfXDhQ5cSOxKXrLNK4Jw%3D\"}]}\r\ncf-ray: a4762ffafc6456ca-OSL\r\ncontent-length: 8612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8612,"size_decoded":10378,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b9e3293146204246e797c2e814c7d21","sha1":"14af1bee3eafb23592bbd95ebc789fa6c7134b4f","sha256":"c9f4b46de7bba0fc9dfe144a1f5c6c71180525c81e45e26228eb42163fb2a00c","sha512":"85c2f5babcb2b2bfaa7ce18126d7859bb672a4682e55c8ae8100f489cf73fe98d0e9b81c1104160b385c6e33e1d02fe293bc204ace49c16c6c860925e3c0bc8b","ssdeep":"192:hSwgw8YNWRf2+hyc1RzPMZfz5lZo38ZQwIcn7FVClN/0FOAr:qoWRkcHjMx76oze2oAr","tlshash":"f802be53b248c3525a6c7d30388cf25471b23aeed630dbbfbb92354879189e4368c229","first_seen":"2026-09-18T10:10:37.95254Z","last_seen":"2026-10-08T16:09:03.736254Z","times_seen":8,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/Viber_logo_2018_without_text_svg_8b744f1aff.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.838Z","timestamp":1791473432838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/Viber_logo_2018_without_text_svg_8b744f1aff.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4FM8Xi%2FfPVK4W4DIMySCBMgiwvW70OLKNYu86kx8KpDCzKP7axPro3S2D2TuKBbyNgkW%2BgaD2g7RwijHxV%2BWNx5n7uha%2BfBz7oRathyBbflIPwdEao3%2Be2q8utrWX0%3D\"}]}\r\ncf-ray: a4762ffb3c8256ca-OSL\r\ncontent-length: 5772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5772,"size_decoded":7643,"mime_type":"image/png","magic":"PNG image data, 192 x 203, 8-bit colormap, non-interlaced","md5":"b12261b746d15da78eba43ea24b540db","sha1":"b69932f2e29b6d5b791043489cefd0fffc7b9a60","sha256":"bdfcc8bad8b5179d088c9e5634be58ad36ec761ad9beab0b153846de51a79ede","sha512":"5c9214fc570fb8879937aeb51b17f15b6e720eccef7a44ace2d2fdc68bb78e3d05aec6c1dc4219f6f2f6988fc5f88de659cace063b5630e8157f2d011369d514","ssdeep":"96:NxIJAPos4adFnicGhS+Qcc7ITSLY5peyTNwHZqTXSQI63zTBYPTeqzA:Nx+AjFilGccZLYvTJI6BeTeqc","tlshash":"bfc14a223af1ca6ab9fc8570557f734dbe9178e2b2ccb55525508d92c5903ca30fe306","first_seen":"2026-05-02T08:32:39.44056Z","last_seen":"2026-10-08T16:09:03.710183Z","times_seen":14,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.543Z","timestamp":1791473434543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 18 Jul 2026 11:03:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1585\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jw6NggZVZL4EEKO%2BUOt%2Fer5sJycWR0vfA5JO2BMXBPU6WiTco%2B7P5NKnz1ukMSfXOh5Nlt5TQDOQLZQNWL5JW0ca3KSnQHY%2Bz%2Bg1uQl2r42p11hfX%2F8RmW3BegY071Y%3D\"}]}\r\ncf-ray: a4763005ef3b56ca-OSL\r\ncontent-length: 4974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":6852,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-08T18:44:43.353261Z","times_seen":76686,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/react/1_104_3-index.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.338Z","timestamp":1791473432338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/react/1_104_3-index.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5Dig2TS7WhTVNxI1RHi%2FJGjPqN%2BSG%2FBVeVM0fRF4gHX%2BdFwAyuYaiqRp9jPtUsFSLQrw%2FktWsdEF9R6HjZMwDPHbqzZXR8GPuhRaptaWS2hnkfT0ZAQcreL9BH%2FX8Q%3D\"}]}\r\ncf-ray: a4762ff81af756ca-OSL\r\ncontent-length: 266651\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T19:41:04.001676Z","times_seen":18949877,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/618.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.366Z","timestamp":1791473432366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/618.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo1zipUXirS1XMJkh%2BEcy%2BL6zZur0stTnKKieysoJUVsmCjyD6N1MJV4gVNg7dLmB1MqKSl%2Fw9ytDgP0zeF%2BA4Vsce0I59FsnU3BAU60N7g4nOgOvzi%2F%2B6BUqFLp6Zs%3D\"}]}\r\ncf-ray: a4762ff84b0956ca-OSL\r\ncontent-length: 390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":997,"size_decoded":2309,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"d8559b77fcf20cd2d90d5f6b95915c08","sha1":"0301a6c562e923a070a75c94db5ebefe10fd5c3d","sha256":"7d48ff5e3ff3a10b58003933f8f0a4122c45ad47bb44e8d20960d302b4bd9d05","sha512":"37816338164d28160826897a1335064852a3a2bf1705eeefbfe3e2ba65cf981fd9d6bf97b94ee61337e4107e29c65e5f1af703e8f5b259a549917dd09c87d0e5","ssdeep":"","tlshash":"7411af3230a2b50d1823fd553b9a56cdd076d475da21a7b86476db21c3cf19b09a0b8f","first_seen":"2025-11-13T20:36:08.391259Z","last_seen":"2026-10-08T16:09:03.705658Z","times_seen":12,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/227ec483-6a2f-462b-99e6-f08cf16fafd9","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.541Z","timestamp":1791473432541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/227ec483-6a2f-462b-99e6-f08cf16fafd9 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2eufU4mSLOXkRx1HVf3n0QqobXuG1%2BzId9QFZ7UHmnBw55pkqov0Kaow9NYWAb1R1IllKzSx8pJ0AdQ5jQYx9PA60T1PO5EhP7h7a1OikLJdgqrOcFqHGsKk6u7aa0%3D\"}]}\r\ncf-ray: a4762ff96b8256ca-OSL\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1084,"size_decoded":2872,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d9d0611bbedb937996be4ccaeca640b","sha1":"7a385130a79676dabec77c14b15f8254cf1103e8","sha256":"a86a41e27c3e88378ea3713b31d7400ac62ff8295cb02e11e5634ba87271d65b","sha512":"300ed9e16a7bb4056cf2eaefc76db4de4dc90d6a11dfd563f8217eb48d8e2e720fb46d29e384723b88d71c37f755698fe4b1ab914e9e3383eb250b1b5029ed61","ssdeep":"","tlshash":"a911b91f51b5e897fb0e49c5f6a16b33d19b01a8c94e9e89e0b277a68259f00b448911","first_seen":"2026-09-18T10:10:37.978809Z","last_seen":"2026-10-08T16:09:03.780625Z","times_seen":8,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5f0e6c6d-3e2d-44e0-bbfe-e9b1725eeb28","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.584Z","timestamp":1791473432584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/5f0e6c6d-3e2d-44e0-bbfe-e9b1725eeb28 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCzOrpKIgkRrKVqA2aTpsTg0%2FTRh4csSkDYlZUUs1Yi%2BCUE2NGLb8l9odVWajOLdcrX41e72sgJWnwqJqQQqr2cqBGnjz1yoWjhYm0hoMqPg3MjEJ2ZcAGfve6aRDjA%3D\"}]}\r\ncf-ray: a4762ff9aba256ca-OSL\r\ncontent-length: 10710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10710,"size_decoded":12501,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48b6aa331bb1ccc65df3e61f30f929b0","sha1":"cbfd05a9a09af57c867233a1c8d8aada9a8cf3ae","sha256":"5565ba8a5c65c73cd316bfd686fdcbbbf2212690ccd3ea096bf4bc72a3c6df55","sha512":"49da873f682c08b46a40dfe4cd006e94b0b10ca6af7de199e05b3b15b2beafd78a94a4c9469323b13fe3339944a8dd94ba831eb4c132669e1da15bdbe80d7c05","ssdeep":"192:y5eYZq80JATkKg0N+Vjl0gl5aj3qknzCQu7oF4SsSnfEFgFDtgf8id:e50llKg0NojOR3FzCQuq4SPnfcgFDmks","tlshash":"9722c07f0919ff10638070158fd7f2bd82b141e9da3460b0af916842b4368eb64fa837","first_seen":"2026-09-18T10:10:37.852523Z","last_seen":"2026-10-08T16:09:03.629222Z","times_seen":8,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/uploads/2026/05/cropped-fav-1-32x32.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:33.740Z","timestamp":1791473433740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/cropped-fav-1-32x32.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:30:33 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=so39p0b1ShQEq02m06UtWzY4OmRmRMrzA25HOouTp4X3SZeQFLpBDskSa71pwbjb4Tqcw0YPoCO3Pc2zAdqGO7OYtEpaFnZ7gTXiiSlNeKHctA5uLq6Y9uius8XRSqE%3D\"}]}\r\ncf-ray: a4763000de5756ca-OSL\r\ncontent-length: 1253\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1253,"size_decoded":3107,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9dbf0c96387f8b2d14e23e727b540d26","sha1":"7668af9436247e18e530b69c0483a28167d8d5d9","sha256":"dd9b269c7f0d648807ebfbdcafe44f390f007a5d6582a5d0f0f2ba89bf1b6fb3","sha512":"7c26877c88df21527905353410d552842ea06e4569eaadd5df1bc7ea93d0b8c12a9f5e0dc9db968beab82e6a345c8659465683b22cd4082ebca996a3a0fc2438","ssdeep":"","tlshash":"4621e7e7a568ed48d57446b01a90b88dc7c79b1f009a634dc363accf4fa9b61195c31b","first_seen":"2026-10-08T15:31:13.540554Z","last_seen":"2026-10-08T16:09:03.602297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_ua.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.439Z","timestamp":1791473432439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ua.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwBMlkTq2vx9JO2D%2BXRQvmFOoQontYG01CqffaCOvVi2D9kWJNr%2Fz1pox8QRFyG6SvHzFvPvuS9Ezp7G4UugST3dFhvSAoUFIX%2Bv8gVSC75tLKkzq46rOHfi%2FNWMcBg%3D\"}]}\r\ncf-ray: a4762ff8bb2d56ca-OSL\r\ncontent-length: 294\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":2162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a80a80ee99fabe8cceb37276d6306cf","sha1":"12f60b61e7c4a43cf63e71c0609936e86ddd678a","sha256":"542837302689d988c782202e7640cc515f39ff395b5d82a053ee0e2f970a12c5","sha512":"5b6c3719af4fe0ca953d96740a6c8dac3193cf1e2dc8212354bba0f1b2166b8ceeb42e1b5655fb521bf000c2c550cb1725b82035f91c890584018a1816a5171c","ssdeep":"","tlshash":"efe07d3ea0907484c704adb717986c00654a0905907adf40359e6e2415295801812e94","first_seen":"2026-02-09T23:34:23.656027Z","last_seen":"2026-10-08T16:09:03.768036Z","times_seen":30,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_top.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.440Z","timestamp":1791473432440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_top.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TisVmOedLOhZU7rjXUkwK8dDWrvKpZzAs0uAuy0rz9oxXwADmIU5%2BjnZq68mQHte7k86E2jXQcuYRDKDYo9sZ7YdKID9XVe229T%2FR4G80yaTH%2Bg0BEKJz6ENLEy6blU%3D\"}]}\r\ncf-ray: a4762ff8bb2f56ca-OSL\r\ncontent-length: 2642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2642,"size_decoded":4509,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22476c5ea8b5bb349cb9b413f702aa85","sha1":"ad586528f7589f3a406cc2a65a5ce4c269e72bbe","sha256":"f5a86b0782c4de70ad4b43c0db9d1e32cd7e9525bfbedecf3640411be4ae5c63","sha512":"dcc420be948563739febf9b718a9a7cd6014e3a99bb05f9bc8a4cd421ab03d7246b2d4901c4cff1697a2153448222da51a930a306d0b15623d3fc77bc6ce62e6","ssdeep":"","tlshash":"65513cd416fdcd35066dd41d2e1441e962f25a85e6c052bdc1f0457b4db9de120ba84e","first_seen":"2026-03-28T17:27:48.333818Z","last_seen":"2026-10-08T16:09:03.769324Z","times_seen":43,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/t_atp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.478Z","timestamp":1791473432478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/t_atp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHM9BmZkK0xlTpu4mIdsgiOcP1inIuqtKRbW6yHAjRUlDoaFmgjU3xgB2UTgxRd3PX9pWfHCaMALxb3MIGED%2Fy6t7PLWkyDJSTwaEBg230nd5zmI0C%2BHwiE6BtbnwVE%3D\"}]}\r\ncf-ray: a4762ff8fb4e56ca-OSL\r\ncontent-length: 3001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3001,"size_decoded":4755,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"cfde675325fb2a05abffc229b2b0dbb2","sha1":"db747cf1e725524d5bcd6d8e44e33915f3459bac","sha256":"e8f0492954309e96324f4e558e16c2ff7e492145a768c3de1ad98ab7f64c7226","sha512":"f13f96e2f25b0751991567bf5361f5c33b34fb1c0d45482c1f384bfe11879addd4076bf298e5719da346d031a88591055eb4cb51cc593b23a02717aadb0d133a","ssdeep":"","tlshash":"f2515c66a8f563d97f24ab57637b3c212897a06aa9711b5e2337b113af0034c4f1234c","first_seen":"2025-03-09T08:50:28.744325Z","last_seen":"2026-10-08T16:09:03.594488Z","times_seen":81,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/t_wta","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.479Z","timestamp":1791473432479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/t_wta HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Emy07x6YBQDsKnXCvL7r4%2BMQgeopgIPxe1Qn7qw6sm1NamU1WpY%2BoU7Mct8Tc5sIBNacLUxRLeQ%2FnsW48Ud83JIAaLU9PM2Tul%2FQ6o1qx%2BKWBK61t4PC%2FEgmuwRSWMU%3D\"}]}\r\ncf-ray: a4762ff8fb4f56ca-OSL\r\ncontent-length: 8416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8416,"size_decoded":10178,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"7ae5c20ab409b05522e5d04128d6e772","sha1":"837da192ea6773661b830746e1f1692268167c8c","sha256":"f5d41b55a5e77cd0f1b02c8d49e1f71cdb755fa7cf766b391822044923b48914","sha512":"34b3d6985b91d7a470a1a7676afe117d13418a2ae2087b4a1948c3a8ca2aa3d9d3f7ca102614957de83bf86191a8a15daa97495cd168f154cc7d161530efba10","ssdeep":"192:8NDC/IkeYYG7poBD0bslxH/9Fgd4cuAEK19PANTgOw7BEkEe:8Nm5e3mYD04y4cuRK1ygOw7KkEe","tlshash":"7e02bfb23e96963dae7179f690c1018cf93073b94000ada6d1a3f8b7932eb5c350f560","first_seen":"2025-03-09T08:50:28.717421Z","last_seen":"2026-10-08T16:09:03.760409Z","times_seen":67,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1596fc4b-5fc6-46eb-92a2-00c14db990dd","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.542Z","timestamp":1791473432542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/1596fc4b-5fc6-46eb-92a2-00c14db990dd HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSB1bYsiz%2BMdC7lbUQx0oEPz%2Fxaggx4hlLhMS8asJXBJGE3tHThrpWS7PJvAL70lzncvuPpVQPp36eSmGTJvdJC97bgGDvtKVt9kkEnUXYvAt9k2drIQYQ7S2%2F6CsAM%3D\"}]}\r\ncf-ray: a4762ff96b8356ca-OSL\r\ncontent-length: 1262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1262,"size_decoded":3054,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"337e17844d83b68f9825525bd632819a","sha1":"801bfd2981c1ed174af790b512e9c497e65fc611","sha256":"32f3e9efe2106d9a4a784977c8ddb81e49536a7d3f701c64787d1abd79c3ccef","sha512":"49bf43b25f54ecdb2e90238d76a8b2812c34b6f0155813e0935cb84c3c94b6bce9ad280029274e5fad52526cda971f69dab905a5a534042a99e06870c752f625","ssdeep":"","tlshash":"a021ea0b35e44c05f721855676f73a6e4e95589a880ff030e3cd65fa4edd104a3570d5","first_seen":"2026-09-18T10:10:37.742613Z","last_seen":"2026-10-08T16:09:03.748527Z","times_seen":8,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/484b2a81-db26-4b76-a8d2-de06b44bddd6","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.605Z","timestamp":1791473432605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/484b2a81-db26-4b76-a8d2-de06b44bddd6 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AjuBNf2LM7f89D%2BysT66POLpBZyKhOxArgrY6KfpLPRClc1Xo6kUVq6JdwHw8qWparsnWeNZD%2Bc2zURZPHAKScy0zPO0gv9Xwx5J1n%2FVsRY%2F50t%2BeLSpcWrXTGgcfyo%3D\"}]}\r\ncf-ray: a4762ff9cbac56ca-OSL\r\ncontent-length: 830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":2625,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"767c016cdd11c35678f60538c8841165","sha1":"6ef46a7670b297dece7afc24b6bc43eeb48bd790","sha256":"f5a41a73447bc1c94e174c71ab1fea983e569ddfc5902ab2123a88f743cfc155","sha512":"8f394b28aec876e0dd0a64fd5e74a2545f914b67c56f0a5d9605df55b41e43cd976aeaf428fa9eb64ad2a242720d0f42093d825ff5ca4f9a76d81aacec31c11f","ssdeep":"","tlshash":"25018639c9f140018b2970759f45be9470aa0e56577bec3e83d2a18c0c4af633e3bb48","first_seen":"2026-09-18T10:10:37.886368Z","last_seen":"2026-10-08T16:09:03.76426Z","times_seen":8,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-sugar-rush-1000.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.681Z","timestamp":1791473432681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-sugar-rush-1000.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sp0UvCavEGHeZf4oC1e7jTxt3eA0RtWc3LE4Z17WXY%2Bm22Q3fKIibaggYbSGPis5YpYVFjHNzHjXp0apinS6zDqhfLl11yVQF4c%2FklM6O4PApIL0aEGFVN6kayK0Rc%3D\"}]}\r\ncf-ray: a4762ffa4be756ca-OSL\r\ncontent-length: 6126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6126,"size_decoded":7991,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6b298db40685c727ad35af37228facc5","sha1":"f6de361205bb4de47af1dd243db52997f90ad7f0","sha256":"f9f5361c2240deb32423a7a50885f04019865b0834676caffc37223ef905586c","sha512":"75f455ce5a26c22d8a4bea0e7d385d2fc791224686ff8708943ab8a2e26f7feb21b2a32e70b85205aff48171d45e31946885a65407823db26a3ef1d25c3248d8","ssdeep":"96:EY5UrkGBHRsTJOe5+4yQeac5v6HyNChhJaMm+IIC9jXN6fBCc9vCtbdoel5BONoO:EPkGNRsTJOe5+aeaC6U6YMANjXNULvCY","tlshash":"43c19e0a91c47a5dfeaa336355b0591c1bd253b6f613b60f4e684b2ed091099bc8f28f","first_seen":"2026-09-18T10:10:37.785442Z","last_seen":"2026-10-08T16:09:03.58052Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/3fb24fb9-265d-463d-8218-43aa9818eda9","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.532Z","timestamp":1791473432532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/3fb24fb9-265d-463d-8218-43aa9818eda9 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=015p%2BvAbTtJNjOtvKkFBRCoEvQIJ4f%2B5jotJiG0Erb94o5LgvrnUWQMsCkYy0q3IkPThTLs1L42cl0q0Qw%2FkDtjBkB0Xf0hJY6nm86cH60VOqeASx%2BCKJc0pdcK13FI%3D\"}]}\r\ncf-ray: a4762ff95b7a56ca-OSL\r\ncontent-length: 1606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1606,"size_decoded":3400,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2f051c201dd3c667038918d9eb832b","sha1":"f7b7d67c6ca773f8221036259221902515e8a6b4","sha256":"3381148b4455c3640c97d291c4a9ff183691628a115385a83e9b85dd8ac9ac0f","sha512":"54f45b0c0a02fee56ffa70e3ec7eab1c53d9c8662f4459b9cae8f639fe85d7e3e7b680b7be18507a5a5a33722e7585f111cb3d4d850d13a347ab43882cfd2b5f","ssdeep":"","tlshash":"f731cadcf6e741ffc988171640bf1509933855bf9425eda9d210db98228751196026dc","first_seen":"2026-09-18T10:10:37.72865Z","last_seen":"2026-10-08T16:09:03.598737Z","times_seen":8,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/11dd9cc7-c721-47c2-9a95-19f116134e26","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.534Z","timestamp":1791473432534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/11dd9cc7-c721-47c2-9a95-19f116134e26 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cp5alQjBBDyMQucvtr8p31ixBJWCkFGn0X1TWhWwhNSIL7hndZTBhV1jlP%2BxEKmzoCRwvRgzTtemIYFdpkTyd1qNHnrU%2F1tz3Y3BFg18v5W1XFDT4LT7hLZHJaKoCUA%3D\"}]}\r\ncf-ray: a4762ff95b7b56ca-OSL\r\ncontent-length: 1170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1170,"size_decoded":2960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dfad7a629f997d3d3e85457f61859701","sha1":"174de64e2f8446cf5cca25efd591927f7f9ab222","sha256":"324c54eaac421558c4545a76dfd80a8b534e4a63109c53185aec65aee19d5077","sha512":"02e5a77a1b9058925ead7f82fb3d45aebfd835396238914e7e62367f5f8bf84959aac7483d5a56acc26c48b8c80a8e728feafd83464d535a098f4c55b2630657","ssdeep":"","tlshash":"5e210a91c9c082f7ac261c4d33e4f470863411c766fbbf60a1ba6d2a28127d13bc9559","first_seen":"2026-09-18T10:10:37.762556Z","last_seen":"2026-10-08T16:09:03.672323Z","times_seen":8,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/60963-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.761Z","timestamp":1791473432761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/60963-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJxe%2BBz%2FHOF4XAtH45L4AvpPITwqzSWyoYS%2BErtI5aqizArC%2BddS8MJILqENBsGbnzlMl8IyFNsqUwTCgEa3jC4Or%2FyEcfiJpSMVgN%2B%2FJxGxUeIH6%2BdHXIlabjKFRE4%3D\"}]}\r\ncf-ray: a4762ffacc3c56ca-OSL\r\ncontent-length: 6198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6198,"size_decoded":7964,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e89a1a542d3b22422760364b6af0883a","sha1":"1ea332c6f7a8c3512ecdaae5aca8028827f1ed6f","sha256":"f4920d5966018f3b6d106aaed489a4d3f27b4ec8535d17b59fbfff5132b94dbb","sha512":"5064c03c1f04c45b5ab2baad17f6c5fdc096f229ad2397580ee61fb0c08c31712cd448b2570d5ec745db71ead2bb1ba2ab15f1b8b7c4610288bfa74d8d3d145e","ssdeep":"192:ws40/Xk/J5J+1fybzA5ZKgstN66JQO9ElRB:wdiIYI3iZKggQ5lRB","tlshash":"42d17d8b60d942c73119adb537204ba02a01f52356fdabb9245f9fd286e412a3e0e7c4","first_seen":"2025-03-10T05:32:40.364238Z","last_seen":"2026-10-08T16:09:03.715972Z","times_seen":12,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3af.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.599Z","timestamp":1791473434599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3af.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 08 Oct 2026 15:30:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 14\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1029,"size_decoded":1006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90eb8387713284f854d84ae86a5ff811","sha1":"61b30d8748b949a6feeb744f34b454c21e972f43","sha256":"e6c11ef16f86c3c06a36ce4e3af7bd3ec27b7a8f1791f510b0e7a1638edbfca2","sha512":"c83efe74ecfd341c188248756fc31c417aff228cc93ae66ca4316c996ad136b341b2caac893c3f86487e6ed48d86179d663b516584e2f708bdbf0635b4cca269","ssdeep":"","tlshash":"6711a2d6123ce0ca4d8bceac9d5bbc51208950ef472e5bc431d459049c6a6df7662e34","first_seen":"2023-05-23T23:57:14Z","last_seen":"2026-10-08T18:50:47.922637Z","times_seen":2318,"resource_available":false,"data":null}},"time_used":3299,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.328Z","timestamp":1791473432328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"EWBSpTW+p9MGvh5hBlVzyw==\"\r\nlast-modified: Wed, 09 Sep 2026 18:52:02 GMT\r\nx-vapor-base64-encode: True\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2026 04:50:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 565bad09d8ff8aa18f40821919aaeaa4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6981,"size_decoded":2928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6981), with no line terminators","md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-10-08T18:07:04.440235Z","times_seen":639,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":20,"connect":15,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/rg_l","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.510Z","timestamp":1791473432510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/rg_l HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmmX6v8mBdOiV8vHEKpR2sMD2Hzi4HKkn2ahQsrwtCrtqRDmpetffII4xHjAn6FKRK%2FhiZNdp9gfE7GPqX4VHNhdb083QgX22msiZTYHQpc2MOGq9nEyZPUp42nJ7ek%3D\"}]}\r\ncf-ray: a4762ff92b6856ca-OSL\r\ncontent-length: 2602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2602,"size_decoded":4354,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit/color RGBA, non-interlaced","md5":"06ba3562fb42b608fe9c12ce972f3529","sha1":"0644e278cd4e7668b812befb0c03d896f21576ac","sha256":"39ea2bae26a94349948282e43354d624a75f946fb101bf810a49fc3a2b655c2a","sha512":"c0cc1594aab23fcdaf61fd0fafd3d3fa25b48d64bcf2e2e48ab4dd1f58c77a2a39feadff293870eda3c0792307e02fc4b999822b0677a8f9f8628749ce58a5b3","ssdeep":"","tlshash":"27516dd514456033fb9f4525849d89851b37f1c5312d8a36583bfc263778e8050e3db2","first_seen":"2026-04-29T14:23:59.82116Z","last_seen":"2026-10-08T16:09:03.659883Z","times_seen":11,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3490-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.625Z","timestamp":1791473432625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3490-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G80bgMC2pzf4CFWemvlpX4A9zLw%2F75QNsOox13cBPDlSRVspe3nZeEQcsYXuOYiwD3UfdzaLaA94dqeQAaLsBvwku%2FHtjjvUq2bJvIlOgpH6twdTDyPO9ElWRKZq4tg%3D\"}]}\r\ncf-ray: a4762ff9ebc256ca-OSL\r\ncontent-length: 10982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10982,"size_decoded":12737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9333151a86780420e2d28970f1630bb","sha1":"82bd1bea52e9c63036d7fd67249aecc470256dd3","sha256":"6e03f4eacbe3ec71f642019475c9d106c74a9a38ec3f617dc86b95eb59a93908","sha512":"1f08f92472d66da6498c992161c7eb97ad5c9d23ce08000839b2a715f25869cbb9f2a8a0841c090c3b7939922c4fb659e20aef609cfebe1bb41d607f89225b5a","ssdeep":"192:O3jW7GndHU8IenLjRnAcX0EK3GckJZ6HcvAwWSqBSk+xv+pi8JjdRQOs+8:6HnNUw9yR0cHcvAxSqGvmZRQF+8","tlshash":"a732cfa9acfcec31c5a0bb1a1cd4a01220e671bb5faa2753d49dc1c439780f619ca8a4","first_seen":"2025-03-09T08:50:28.601855Z","last_seen":"2026-10-08T16:09:03.667882Z","times_seen":15,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/50429-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.737Z","timestamp":1791473432737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/50429-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ovshlx3lDaO1YIwG8c04rILrlYDZqqP64yrGfZZjYZ%2B0QuEWI%2BtDC4b7zG7d64jLgPZNrOgdxMYevtG7wNRaBmc9oxzkdxw%2BOMv6RZEZZN6i%2FPVl3iXWA6O1JiGozE0%3D\"}]}\r\ncf-ray: a4762ffa9c1956ca-OSL\r\ncontent-length: 8322\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8322,"size_decoded":10080,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fac84daa170f4c7d92d16d104c51986c","sha1":"f5c4c4221fc2afa20a78d6669256225a03ffe96d","sha256":"5e546cd5607cc6648dd1f253abff145e5832d4d22b032096f2ae491765467742","sha512":"a7564babefc05a673c39785c9923bedc2d98d13e5810a64636f9773c86ae26e762c2f856b054866199791e5107ddda44bf2924272f726a32892ca1df1952520b","ssdeep":"192:fje1Z02VEasmfqNLUkjp0zkFF+jPu/DKWj6Uvd6+2t7+SFappzyl:7eb02JfySHPQx6md6+2t7+2a/yl","tlshash":"c502cfe44a772a8a4d68d80046ee90164f41e1dfe76d5b60b8237b981c4b33b5834eeb","first_seen":"2026-09-18T10:10:37.720691Z","last_seen":"2026-10-08T16:09:03.704784Z","times_seen":8,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/64760-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.743Z","timestamp":1791473432743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/64760-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJLgSWlAsQ64NK025DCzFtz%2BVUq2Zm9i7q9lb0GA3c0DhkCmmPh7fLjLgBA8c63q3SAdFpravTMGCEejYdWAVZTsnyEQ667RgJK8PjTHUXE%2F%2FBZ5RLp7beeAjiv2dEs%3D\"}]}\r\ncf-ray: a4762ffaac1d56ca-OSL\r\ncontent-length: 8678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8678,"size_decoded":10434,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72fdc04bc8e25f4e343c2c96a4192593","sha1":"ae78fe5e89e1b6e6e069b59f8fbd0693a6b9f72c","sha256":"010f6c1a66827c58521dc63c5477c3ff792fca0404442d28a810337d704c3f4c","sha512":"b94a8b0f46db003d444726be4ea717ce62718a448019ad28ef3b100d4bafecefe7bbd1449d6f1f768a1a08ec717bc9e243d072e86a48aeffc6177a9e79d7c16e","ssdeep":"192:thZe6D3E/GE/3Yo6ZqJD+1u9ttZ19gW4tOtu4tkb3RrfY:thY6rE/GI3YoQqwu9ttZzQEtwE","tlshash":"3a029ed1002a4a64c613ea16c2d76960f1c26576ce1e97415950422bfdf379ce93ebcf","first_seen":"2025-07-02T18:45:14.80406Z","last_seen":"2026-10-08T16:09:03.71485Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c3b06566-4909-4c0f-b990-b8d1a33084f1","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.540Z","timestamp":1791473432540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/c3b06566-4909-4c0f-b990-b8d1a33084f1 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyEUrDDz7FrWfB9w3WOz7IDepY%2BGINwNsOvnRcp7ISmBjrlp%2FCYoZ%2BaIKDXp0PlJyDXrFyf1V3EXzNJyZfCkRFj5C9fsukCoj9KmQVWsvUlSmizKTMySlWkzJG6p0wY%3D\"}]}\r\ncf-ray: a4762ff95b8156ca-OSL\r\ncontent-length: 6542\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6542,"size_decoded":8334,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1f27855a6494b1636df4598defc599c","sha1":"647e19a1267b99606fffb6569680a65e276e79d8","sha256":"e9c8584389203c39242e1ed62833ece7ab05b08bcfd90c76926c453068109651","sha512":"e24c1f5fbafa0d9a5a72e8bed146818232c41410e4953fb33f563aeff3f52c18a90eac33cb1dcd3350faa8cdd6927c303e1adf4de46f41b900376e017d8eb432","ssdeep":"96:o7l6LZlCSiXOfH2UX8RKldPAyx5QWBr8v0nPwZeqh/NUAmlUZC66UZrA:I4ZlCFXOfdrDAyx5dBrReqUFnA","tlshash":"05d1ae984ef32bf0822a3d72e94d87a0960640d950aa8f3c214fb4f2234171f35f9ad6","first_seen":"2026-09-18T10:10:37.946485Z","last_seen":"2026-10-08T16:09:03.591506Z","times_seen":8,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e2f81dea-8863-46d3-87f8-2ddfcc8fe8e5","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.610Z","timestamp":1791473432610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=16,height=16,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e2f81dea-8863-46d3-87f8-2ddfcc8fe8e5 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHxiSSPOVS4BWGwofvhZSgiN%2BN3bN%2BVaHC4ulr5h0bQNVGCeeEzn%2FP%2FHh2jhUYMx9S5yI5bEa5XktoSK7zyoBoU8M8MLhKRI2GVSsubZY%2FVjdVxitAoLXBwd5z1C37E%3D\"}]}\r\ncf-ray: a4762ff9cbb256ca-OSL\r\ncontent-length: 326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":2121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da3b24c31bdd5b3e57cbf018fc13cec1","sha1":"8b60d79ae06d0edd676291d53171bf9455824060","sha256":"0b5feca29783faeb133f35cae8f156f88f8d69a3dc52db5e592c13f745f13f85","sha512":"4b81fda31f40d24aa37ceef7d5537aadb3889e8d9577493ab18d8ba12ade96f57e9a96ad57aa72d1f655b291f9e6026ed176e6527d3470fca356ce44cecae2ed","ssdeep":"","tlshash":"78e07d76164636e4ead4ba7be1aa438002b92402f044c411a8b246ab35ec0413177992","first_seen":"2026-09-18T10:10:37.854083Z","last_seen":"2026-10-08T16:09:03.59551Z","times_seen":8,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/2152-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.633Z","timestamp":1791473432633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/2152-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76G4hSS0fQVi2WvtuUEkMk8sC5RUpWqcALi4eUGa6RXWFRql1VpeyTmZ3HJaGIGTaP1HQV4qAlxe4qopTeYzbptwGtJ0tFOnzfEAR%2BfxraP1VI%2Bl5Wfu3%2BhNJNMWYVU%3D\"}]}\r\ncf-ray: a4762ff9fbc956ca-OSL\r\ncontent-length: 7722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7722,"size_decoded":9478,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d43298e7174b3e16b0ae6f90a0646e38","sha1":"02d51025912d35545ad90638e87d834de22049b4","sha256":"e17e0972086d633f3977ef3851994441be5dd18b46ee5c362f1975edc5955997","sha512":"cf401ef308a5485a1eee800e7c354ecab00324505a38cbf9e4342690d89e22868c78bf7f87c79b13a6881d9f5ad9757af05b793363b050f10c66644179af32de","ssdeep":"96:bo58mPxnUcXadEh5UHyJBuBiJa5fZZqpyWf48/Ecjx/aSOGaGm0hemcXZJ80WTUV:tgnU8addybuFt7WT/jtaS7UPZJ8R3aeE","tlshash":"c7f1bf65030e2b63eda51aa5bd74d39e01059fc784de4d913cd728ec0ad59023f347c5","first_seen":"2026-09-18T10:10:37.865707Z","last_seen":"2026-10-08T16:09:03.789187Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/59202-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.786Z","timestamp":1791473432786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/59202-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCYKLSFOmOFh%2BNwE4p7OJyd9vfpVYAVd8kDQcyoOenGmYdEniY1IdUOFEPZrvQMlNpahWr9aKHObZN7aGhraO7V0UKBmbF2kHahxvW7%2BhwlxetCltcoRL2IhyU708cg%3D\"}]}\r\ncf-ray: a4762ffaec5956ca-OSL\r\ncontent-length: 10048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10048,"size_decoded":11803,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3265e806d1e5f577708c3f515dded285","sha1":"3c178c1a79bdc9e41e2b1a56eae6d82da206fe6f","sha256":"a8c8236453118814bda1334db5aa6ef9fc92623c01f724730cbf2c5dc874dc71","sha512":"67d973b69ac76a616ed69e3157e6b70117aeb9f382c01d1fd0f122cebfada54ab845cb9f0c66c4340b0b1479b38d242f72d484841d397c21a9f8b07113e2bfcf","ssdeep":"192:ifIKIH1axNQnMPQk8itjkIV/209XxYOUa4P3iY+IvUuI5IpYQOgLEtxnBz9secRu:iAZkNQMYRitZPUa9YJiEYRtt7hc/0","tlshash":"ef22cf0b7bb97fe41e8288c6b582674224d738c93997940cb6d463993b7d34474f2d8a","first_seen":"2026-06-02T13:46:48.498858Z","last_seen":"2026-10-08T16:09:03.601025Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/60754-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.825Z","timestamp":1791473432825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/60754-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:30:32 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\npriority: u=5,i\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzUo58NCMeM9KJ5vbAyh7gKpor1leWW3KiRbbVGUazGSruP2cwpesGucFt%2Fq%2FRlXNr5xw07ylL%2F9tHOLNDcqyz2IRVxxO458zesQYw2Csh7EWtu44prLSEAfBcAppr4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4762ffb2c7956ca-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":285,"size_decoded":2044,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fee0cc2f258c97da0c1ba0fbc2aa63b9","sha1":"33a19abbf16364ae9d89d629de02d69d3b6e8045","sha256":"96ab528e80fab35cfe4747f07c03f0f4cfdf5ced2b611755596ac814931f88d0","sha512":"3d167634981a58f8905639df73244e0b7e429a4d449af3b8a7fd5c0bf3e732d52e86326ae03270be31760d0a5df5e85d94fe0106647a54c701e519557d8d7ba7","ssdeep":"","tlshash":"0ed02bb4321cec1a4640c206032ff40a21abf0e69b85c354f8d17d3566062f7bf5d7a8","first_seen":"2026-09-18T10:10:37.956889Z","last_seen":"2026-10-08T16:09:03.573069Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4fd8f2bd-07c7-4ff1-bbd6-d06e649cb1f1","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.581Z","timestamp":1791473432581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/4fd8f2bd-07c7-4ff1-bbd6-d06e649cb1f1 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7F4HPrMWZylcVef4nDM2Pzaqq5ua0hz2Fs3Pi8V1VU43XxZhALSb%2B%2B0nof%2FzOs9truAMAI7e3Ko1%2B8sIFIN3pWe1ISLDHUrWp%2BbrjnbXQNgzbeR5SmhX53dXvP4LmU%3D\"}]}\r\ncf-ray: a4762ff9ab9f56ca-OSL\r\ncontent-length: 8640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8640,"size_decoded":10436,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"523ec879729c33ab3cd500290f674948","sha1":"b300326500f3efa155513331cfa9cb6ff3bfe5c4","sha256":"c7d525c661698029630fcb89fe633d962c2f1da20d85c4a721309fa3c516c8ce","sha512":"d5cc82e30d03048144d91cd243b254f6c7a93a38d46ff83a5683184320b149b84a4486ba196fb4620cbaf1a8ac1031a13ecb87438796e83c4dd63f30f8843bd0","ssdeep":"192:4rp2m9MjvDC90942eZ5CuQQBhZtR3pxEZCiCHi+u67TOFD:iubCq949zR3pxECHFRTOJ","tlshash":"6f02c115f9f43f17beb9527830a105f42fa3222e805893cf285c7a94a35cf123d696d4","first_seen":"2026-09-18T10:10:37.99076Z","last_seen":"2026-10-08T16:09:03.673509Z","times_seen":8,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-27-wins.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.679Z","timestamp":1791473432679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-27-wins.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJkfGiVxdRCVUhPcpgVAwGUxpWqQwqm2SWPyqWwv5Pu7uU0RCQ9C5L0uTAJMlPAIgDdCL4TfrlvLRaGLRttpca3BpYGDY7Gxa5uGa%2FUzMx2Q%2BoEJGSI8zUYR8VIpR1g%3D\"}]}\r\ncf-ray: a4762ffa3be656ca-OSL\r\ncontent-length: 3920\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3920,"size_decoded":5785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21ca8f0e20547c6a14c13b6d2b8323fa","sha1":"f20d1b91e64642d3540f08a5b7877b60bc9d6905","sha256":"4f56d68b19c43b8d9f8dfc3e13c7cf65b8ab7d58a88fe9119bae636fb3a7604f","sha512":"af11e80863c90295fe8c6b6603ee1cdca09725f242a20b053d5034a2cf62c126022267fff217469bd555efb1336d3fd96dbfae496114a56a790080ad2aaf1474","ssdeep":"","tlshash":"7e817d146090f0742ab0898725fa1ada41d094e71f03ffaff7434595564b25d7edb335","first_seen":"2026-09-18T10:10:37.92474Z","last_seen":"2026-10-08T16:09:03.784288Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vswaysdogs.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.686Z","timestamp":1791473432686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vswaysdogs.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvHZBkN3xmTKhrCGPn6IGaEPz5jwBGRI7srDYayBNAXCARE2ZBB22%2BrRsslpabIy2OgX8BiCCAH9WOvpBU3RcFZYA7sjZ0omcDNXZP%2Bgq502LgPQDcDPb6Sjhnr%2BnB0%3D\"}]}\r\ncf-ray: a4762ffa4beb56ca-OSL\r\ncontent-length: 7628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7628,"size_decoded":9495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4626fd54c0aaa5ba39fed029a881b34","sha1":"9b91a678bd80b194ae3da67b67e98288a9342d15","sha256":"304c111658b3fad4e0f0e9f2e8ba25137ad8f439d6f45a3cc1c143efa22badb5","sha512":"f5e5e491127c4199e2d2fbb20d48770bb6976ae6b98a84c91c9c511a67db33eaf260d2948319449fe6e6c07b31a7e7f5d5daf78c8dbe1946eae045b553d83f76","ssdeep":"192:Tx8b9ahhVZFrUQL9Rudom1vOEra+38B+OcP/pnao:Tx8bChVZP9RRKvnxMBI9L","tlshash":"3ef16da91c6fc4a29158b695104d3337ea77b844fa4e92c462ddc2bbeb5cbb80e16108","first_seen":"2026-09-18T10:10:37.971574Z","last_seen":"2026-10-08T16:09:03.664699Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20midas.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.702Z","timestamp":1791473432702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20midas.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AK9cEB%2Fpiu5svCxH%2FIo9em6caeUKnJn%2FjhVU%2Ft49Jq9Lv8PvlIlGj%2F69hsc%2BFxifr%2BTZmmCSCVaNHxJliWjpIeYGtypP2Vp%2FbdNe0lWR6aP%2FzMlS2R%2Bz1tTIXQozxA0%3D\"}]}\r\ncf-ray: a4762ffa6c0456ca-OSL\r\ncontent-length: 5532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5532,"size_decoded":7413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0be44638cbf50ae4d124b3d26d2ca405","sha1":"337cc970aa2da7e9b7f0b26dfa226f36b6fc2bf0","sha256":"5855d05bc4fe1f4e4407854bc8d8bc591f8fd6685f9bf4a3dd2af158e25d6290","sha512":"b49665d7bf9a95d228218abf793129e3befd511cecb2e81deab54c264fca2e0e058d0c0117c4d9ebfdae2e947fb2b739856cb565ba205a8ff73cc93efaf61eb1","ssdeep":"96:07WL4uo9+5SOj6biuV2FUqUv13HjySi7eoyLqte/FcuiwwmSBeB0KG71F:07+4jk0TBIY1Xjylab9cucmLSBF","tlshash":"b1b17dc1d0c1d45ed8df2c6ace99bc93bcb267bd1af6089b1406c8bde173a079524a4d","first_seen":"2026-09-18T10:10:37.772387Z","last_seen":"2026-10-08T16:09:03.631446Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/52180-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.769Z","timestamp":1791473432769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/52180-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hlLowsANFsuWDLr8k4qB2FOitX0aoVORdIrFtRt%2FB%2FaRMuiMaJsX67HzKwh6gwIfBVBqeZWzV7E3cM1X%2Blw8gx%2Fc3Bg8NSmjDYHjtWCD3QO%2BKcksKLz%2FxXNhaGNn5s%3D\"}]}\r\ncf-ray: a4762ffacc4356ca-OSL\r\ncontent-length: 10710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10710,"size_decoded":12473,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8d964a209699d4470b1183016a5de83","sha1":"fea3973f415f01c01932057d297a273469dc314e","sha256":"ac98965a059c00075c46f38b8a3b54e58c909827fe484c35a3ce34b642098e17","sha512":"5e8604c41d0ce01e16a3d5e36f150ae44f9e6d1c7787394f746d5e332013295ec63faf049d2ade013da66167d39f3606d5f9300be43050225a5d8e998c7309e5","ssdeep":"192:BPvFIy5j45rFbyvdfp8PF/fZQMW8EPZGvcvJpf2yKGcVYF:xvey5j45rFkdRIfQ5vPZGED2yZV","tlshash":"6122d012ccec6755b080f96c67a9bfcfb5cb703fdad5848092025144a4325f59638d6f","first_seen":"2026-09-18T10:10:37.986933Z","last_seen":"2026-10-08T16:09:03.640917Z","times_seen":8,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/wp-content/uploads/2026/05/pari24.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.149Z","timestamp":1791473434149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/pari24.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:08 GMT\r\nlast-modified: Tue, 26 May 2026 13:48:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1585\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FviYufyGoCAa6tPVgckE7mh%2BqjhL3Svd%2Bxqooajs4olrap5A5MDQv14kCcWtFKD2N%2BjeHC9VBQASmyas1yvCsgoEt3cvegqMj0%2F0n6f6c3Ce4unoNrzkqAbu42GTY1o%3D\"}]}\r\ncf-ray: a47630037ec956ca-OSL\r\ncontent-length: 8287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8287,"size_decoded":10156,"mime_type":"image/png","magic":"PNG image data, 159 x 27, 8-bit/color RGBA, non-interlaced","md5":"8a54ed3356b183e827b94d80545b03f5","sha1":"dad72c571bed05ca7fb628f00fcb0ad02bbf754a","sha256":"1cc5ec78c7602e000653ef7774f0ee8125dde8c9744de48803da4f3f9f220fba","sha512":"c1eabb2e1e517e0f6914e37ab824f0a2952e15a1cc782b2f0c4223e3f6cd7cdab08f0d03190c741a158e160d7140bd8ec3c6020a90e77d87f30c5a042aa547d3","ssdeep":"192:FNtmAp8HQ4NLY6ahfl8XEbz55drZ5/e7HFenDZgTvuHKdzO6DE:Fmi4dn+fl8XK55RZ5sFew7dK8E","tlshash":"b002c0eb0fb402d20151463b30618a140cbfe6c1f7ef76857833e56e9c26e9818886a7","first_seen":"2026-09-18T10:10:38.014504Z","last_seen":"2026-10-08T16:09:03.614521Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/icons/PRJ4/apple-touch-icon-precomposed.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.232Z","timestamp":1791473434232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/apple-touch-icon-precomposed.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.35\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlink: \u003chttps://pari24.co.ua/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGrxZ%2BNiK5b%2FdpLNRnKE552XjDNYghztnBq%2BYnJppev%2Byw2XxmkpdZqd0Kr%2F27skxJaSQGIfXaAhf9xdT%2BTiI931uImoVdPMy7m0rGt%2BMFFGrym68wXItmAZdHOJ4Go%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4763003fee056ca-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:28.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO Premium:25.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104980,"size_decoded":23035,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49158)","md5":"6ad148e305259708213fb4768aefa54c","sha1":"3e8db5b56c5da521a47bde042a1f59f113153978","sha256":"21714c74c01aff4b88582d377c3d3d2b1a9c4a81841ce9a00e8319287c2cd0cb","sha512":"676905e899937e15555bd3c2cfd304f0dd6059abf112294868b26a8adc58e1d2d219dd0d6511b4de6a2552151583dfcfca232e42d302c5d60fe83019ccfb31e0","ssdeep":"768:R7puRC/NAp0kt7/+ptnF2cWWtyfKcv5v/v/aPMvJyroAPyfKcv8v/aPMMJyLRJSe:Ri2C+jnFZjwbUypxHRTs1QRQ","tlshash":"02a3d860a7a0147a253b437df59bf60865689a23db4e73d6f4bec09845c9fa304f270e","first_seen":"2026-10-08T15:04:49.060997Z","last_seen":"2026-10-08T15:31:13.580271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/seo-kit/assets/6154.c6f25ce1309c4a7e443e.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.352Z","timestamp":1791473432352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /seo-kit/assets/6154.c6f25ce1309c4a7e443e.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70EDOSOJ6wxFEI7qHdz373uXOamoZTJpOZGxU8LyUjB9VbEWLqmxNGs8mtfVJJ%2FBvRHC1NAhd0l%2F61Mg%2B9FXSbMbGC3RkJBKMJLWuJmwb6buAQCutTOthZ1fgMzUErI%3D\"}]}\r\ncf-ray: a4762ff83aff56ca-OSL\r\ncontent-length: 716\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2351,"size_decoded":2629,"mime_type":"text/css","magic":"ASCII text, with very long lines (1679)","md5":"130974ba618163ceffb3cd28edd369c5","sha1":"4a9d97f3edaea1c3c9b93b4b2a3059a27e1d8cb4","sha256":"7bdb91b71d4da3983402c263b2c8a9d5cf9aed87f909632ef61d22fdf1cbaae4","sha512":"299a6180492c7d9f0a4dd4142c40ac224c7cc0ab3f1ad6f646a51c423f146c613eaed395b21b8ddee68a8ea268a4baf981d3a463cf114ff18ca48cfef5cdc879","ssdeep":"","tlshash":"9241e13311337f2e513bd86c4b58a95a1240d02ae4bb9bedc960db15c3e3a9906b535f","first_seen":"2025-06-29T08:36:28.692737Z","last_seen":"2026-10-08T16:09:03.681202Z","times_seen":87,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/esp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.456Z","timestamp":1791473432456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/esp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjIuDRq8KybYFp%2FKyiFjuZSdagmSJHIUtNlS27Vm42BSTaxDFPAjBDMlHK0kbFDHiY8vmTH8cYYhALS3%2F8Mm13lgIk%2B4o4S1x4uMBM%2FQlVCsKcmKPQuB3U3M33ora2o%3D\"}]}\r\ncf-ray: a4762ff8db3e56ca-OSL\r\ncontent-length: 594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594,"size_decoded":2351,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc90fec6e81738baff462e2735fc1efa","sha1":"f119101a5d267447fa68a42e9ec138a593824e0f","sha256":"a4b2b2d4b54233630539359624788d65f09ff7ef8cce9c68c1674df8f01fcb2e","sha512":"e1b8706344332765113a43cf24a86cf717bb6cd4480e8959e47a6ab0438fdc5589c52a7dbb0cb24d7cfe9b5e5e4a85bb19955db1dd87592a0575587508fe6460","ssdeep":"","tlshash":"92f0b130c6bca3a2f4b32c2c61c20392bdeb001dad2ddc289b43a2c485d4113c238210","first_seen":"2024-08-19T20:57:32.148462Z","last_seen":"2026-10-08T16:09:03.665269Z","times_seen":106,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/17a40d6a-0e70-4a6f-b3d0-9e13457c1710","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.524Z","timestamp":1791473432524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/17a40d6a-0e70-4a6f-b3d0-9e13457c1710 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZS3%2BkEyjQupDmpenlvcuEKUv5%2FLn35pcXbeb61okI8FFEvB%2B%2FSdvP4NCCAGJBacVBfA2bowUHX2MgsryeZxRI%2FrA4Bpw91KHJ%2BSOwhB1W2qe%2FHNSqz6LHvUY7JwRik%3D\"}]}\r\ncf-ray: a4762ff94b7356ca-OSL\r\ncontent-length: 792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":792,"size_decoded":2591,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d35578f3d57f254601e48700cdd5c4be","sha1":"a72e8d607d0c74b141b50a6160f22ac0df89b9f9","sha256":"837d92ac783a5119d7c79f5cef584fbb5b079ad069cfc1e60db19fd4b8e9ba9c","sha512":"74fe73d6bafdbeb729ed01cb1f530456479ad73fafa66318036835d39b5668276de22122af4518bfc7e86a3a72114f0c14bf36be836dcb6c4dc89ec1a08b1061","ssdeep":"","tlshash":"db0181b273e49c2bcc8c61ba2a426d487a69a790cd344041201030cd71e9031ba82f87","first_seen":"2026-09-18T10:10:37.829618Z","last_seen":"2026-10-08T16:09:03.738573Z","times_seen":8,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/5035-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.620Z","timestamp":1791473432620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/5035-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXM6PuPIT2UPxF8zgHstsoivO%2BleSBiOJ2IGOVbqZM8ZruCz23O8Q7CtWrlAW4hIZr9t3%2B7lOdCtnzolG2WjsDKKRHCvYG1ZhqNb9DdBCgR3S1J%2Fv9WOUuOP3Bed4vI%3D\"}]}\r\ncf-ray: a4762ff9ebbd56ca-OSL\r\ncontent-length: 15566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15566,"size_decoded":17323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebd3ea546ac2a465b1508b6206f7f218","sha1":"673e29ce594bb6fb99b5e53b6ac52ca99fb40466","sha256":"b2089de21753536cb74c9aba4c6fc4f1c961746d9733326503ded15dfd9bed24","sha512":"f6d930be8664ad0d9ee2306cacaf049a2996ab622fbfc265e5d92dd316d77d6741a4ef83f79248d42f11076837e21e90a130f417ac8d6408c8dabd42a669b84a","ssdeep":"384:+ZEkI0qKg7SnyszgXGB8dyzR8IKViQeOxmwS5B0N:+ZEwqKgenyCkGB8MR7QeryN","tlshash":"4d62d06c41e884b59ec56cb9ccfc97d3215e753d2326929964006a27bbacf800a9f7b4","first_seen":"2026-09-18T10:10:37.809245Z","last_seen":"2026-10-08T16:09:03.758003Z","times_seen":8,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3538-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.639Z","timestamp":1791473432639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3538-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09pHJKxVGPhBBcIYA0NttQ8uYzKRj9PlA6HwsHhLdugbJX8zXVaFeqiXyLKFzGg2U4lvZG%2FtBj%2FfZTX00pn7l11RyyP%2BocnDop5lFXf47ikrzIjglnDhgJsUEF0ZcNI%3D\"}]}\r\ncf-ray: a4762ff9fbce56ca-OSL\r\ncontent-length: 8194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8194,"size_decoded":9950,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcc5e0656d629fe97939023dc6659985","sha1":"3b2d35a6e0a76e950e2237dac42b2516bcedf8f7","sha256":"53be9de3eee9595819309e49c197b8e31c45c4a48961467a075a52a56824cbf3","sha512":"584fc57d83c87a8db30c5977bba1eac80301c5e0f63bc71d2aa2341524f3ac861b1eb386336cc2043cdc81173711bded43225583f07c22231a1901402f85600a","ssdeep":"192:9YBw+A6AxSfXRluKU5h0MSvMISivrx55w1S6678sW/E1VWxl:j6AfKUc7EI38I8sLHU","tlshash":"2ef1b015a01322cd41e01a9dc44b0ab95846f549f9df781be53c2ea47cd84dfea41c7e","first_seen":"2026-09-18T10:10:37.730086Z","last_seen":"2026-10-08T16:09:03.599806Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/65718-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.766Z","timestamp":1791473432766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/65718-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaTyNxTsu2T%2B8r6pZmqacWa6rxaWJfSuEDrjBVm9iM9mf%2Fos3Orn9Z476BtDBMBFA9QYI0QfIHU5NVjsDSJomP6j40cYDj1PsSp%2B35U0R6GVgYzHZU97WbmZd2e8zUM%3D\"}]}\r\ncf-ray: a4762ffacc4056ca-OSL\r\ncontent-length: 10274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10274,"size_decoded":12031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c78f43810e0b25fee4145e98ca67702c","sha1":"4950dac21575b84a93d6143eb384d77cb4b899cd","sha256":"80da78c16fa6cf71d3ef8e6fb392b2e32b88f75945690fcc094c9eba409affed","sha512":"6f1bc777eb5a3fdc9a0a470e472fdaca34a3d5aec68bf673423ce98a9119da512091c3a979018541c4f8f20f9df5247637f64a6133708cdc567c4d31ae3829cd","ssdeep":"192:JDt1bA7QckQP0k8/LDjz0pc+M9x7rJeCo0lc+Z0cusYNeS+aN456XyT/NNYiwN6r:JA7H8/fjzgMPYMlc+Z0uYsheo/NjwN6r","tlshash":"0b22c00abd5185f28c12cae420fe0ed55eef4a537af016cae57434e91f3aa8931dc948","first_seen":"2025-10-19T19:10:25.669146Z","last_seen":"2026-10-08T16:09:03.766472Z","times_seen":11,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/?h=https%3A%2F%2Fpari24.co.ua\u0026p=%2Fuk%2F\u0026r=\u0026sid=null\u0026qs=%7B%7D\u0026cid=45942173","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:34.246Z","timestamp":1791473434246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /?h=https%3A%2F%2Fpari24.co.ua\u0026p=%2Fuk%2F\u0026r=\u0026sid=null\u0026qs=%7B%7D\u0026cid=45942173 HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 08 Oct 2026 15:30:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\nx-vapor-base64-encode: True\r\ntk: N\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/08/2026 15:30:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4c521f8fcf5f801c784712ffa67970b9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":594,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-10-08T18:07:04.651442Z","times_seen":72012,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_t.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.447Z","timestamp":1791473432447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_t.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aGz6iM57XnUlq4je%2BCmRaXX80V54kDPg9UaqhKa%2BJx8pOgbL6WCnWoiRuZADfalCERVAtRHvZmrVvvwMYzIDbJ6OsruBUALtDd7B976MZkQv5iF%2F601lkjHTfhbcAo%3D\"}]}\r\ncf-ray: a4762ff8cb3556ca-OSL\r\ncontent-length: 2552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2552,"size_decoded":4419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61aaa4c170002f142fdd0e4502849627","sha1":"38674ca315ddef444c3d4be4ebccd4474388ff2c","sha256":"90594b22825bd620d467f4a30dd117517e9857c74ebbb4f57d83afea00d45ddd","sha512":"857dbf0e7249d43453e9fe783feaef1b7a380ee1f92b1b4cb8a78a50edde52ce04a422e851ea51082cda17ee75e4040610c07544a34248d28846fad71c6933e5","ssdeep":"","tlshash":"de515d4baff61f978390350a13ff53fb51489ace29d30e24ae85d4ca52271b5405c2ce","first_seen":"2026-03-28T17:27:48.310363Z","last_seen":"2026-10-08T16:09:03.584917Z","times_seen":41,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_b.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.448Z","timestamp":1791473432448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_b.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tc3XmaCnfv7Wy06dnMA7zID%2FGNg0UHRZgt9ODjZJttq6eG5XZwKiySWflzJWS0n7kjc7afFlKwbVsFJ%2BhlnjHROJmykxhtIonGN3jvLVWLALDC%2F6hq%2FSH0sr9ugmV0%3D\"}]}\r\ncf-ray: a4762ff8cb3956ca-OSL\r\ncontent-length: 3382\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":3382,"size_decoded":5251,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"017f256f953f205b524d009f0568fc3f","sha1":"e0c7d0d5d2cb90eeb635be8e454437aeab8d72c7","sha256":"2e1b582051561b1a35a1fac089b8cd4195c2e04b85cbf531e8319586c5640684","sha512":"c197af6d113fc80c694baafb077d67d082018e96d1b75ea7eae69f9d203880963f7a1d6b8b805acff1e76939ed51e048bf284fedbc90cf3ebab0cc6756e4e104","ssdeep":"","tlshash":"17615b591971cd1a9406ec35aff216a5f40776c806426ffcd22463304862e246be43c9","first_seen":"2026-03-28T17:27:48.1684Z","last_seen":"2026-10-08T16:09:03.604196Z","times_seen":41,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/eur","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.482Z","timestamp":1791473432482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/eur HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvOqKnENt657QrTge83QLbyAMd8qIgDpJeoA%2FsNev1HXL%2BTzrbFQb4fqj%2BIfoqyO%2FH5y0bPNsQal%2BkSYEefkg2YOt0Mn8KyR3c0rUniPbW3xoPbFiU9AeRbHr1kIxhw%3D\"}]}\r\ncf-ray: a4762ff90b5256ca-OSL\r\ncontent-length: 722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":722,"size_decoded":2481,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b0f940bae607f2db85b56123f6bb255","sha1":"897ec10ca4925863f4689fa0dc92aa85b51ee5d2","sha256":"ed7e3032fb1932b087ff527a0ee8e37a7cf24d0b3468d72f8df7e808ebefa6f2","sha512":"9549c2d67bb9adcd54d14e01ccff64b72e2e9298f4fce88f4e28a579fa7a1d5dc8889e29115257d7f1d14540aadfff59790e97cab5521578a46e2fc3999ade6c","ssdeep":"","tlshash":"a60160efee76b0d8423d70c15c72279417b2a7440a11653ec5177b88a3f0408aa61a29","first_seen":"2025-03-10T19:15:00.482363Z","last_seen":"2026-10-08T16:09:03.706579Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/bra","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.488Z","timestamp":1791473432488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/bra HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5k2heKj0%2BlXxvIWQi2UhE9GGYA%2FbnhPP6Ffr8X61pjAFN%2B%2BDzMiKAkve7idi9gAp%2BxFmwKPU0kTC%2BfPKmP%2BuXV%2F7iXsWmG%2BkQFRhf7Ad41P4iTcV8T5GXhWHQgkbu0%3D\"}]}\r\ncf-ray: a4762ff90b5856ca-OSL\r\ncontent-length: 1150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":2918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10dd1ac82280832bf7de2b10b7a5218a","sha1":"72e6daa79d561ce7c16bbf311e26ff868e142ae5","sha256":"b1e86a19aaab3e4c5b7cef088d133b6e5b927f026ee068d54b09fed8ba0a8cb1","sha512":"de4a51cff0c9149e59a996a1c727751a4e77ed2ccb395f35012e9a6b24e3d9516e436681365ee193d979d31ad84f04f56c94b9d63c07d63b7b9ecd6fa3e98b7d","ssdeep":"","tlshash":"53210ab78d0b5d8c04dbeb434fc8e255da4c489f3f8c59c94203332901309162fe4364","first_seen":"2026-04-12T22:30:48.758156Z","last_seen":"2026-10-08T16:09:03.604873Z","times_seen":14,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/834-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.637Z","timestamp":1791473432637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/834-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIsG4YBjRPXL13axXrZywZaGMPceTsOp1lUPJMlVsS5%2FgbGqSAgdBvN1iH3AZoPBT0Y2mVC5pRPU3s9z5fRAJeb6nc7zz9mg%2BUFJk050tcDIGf4Jy54OD6Gljphdt6c%3D\"}]}\r\ncf-ray: a4762ff9fbcd56ca-OSL\r\ncontent-length: 5780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5780,"size_decoded":7534,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63886a9fbfce5568edbb02d59c11a826","sha1":"61dc586bce2ee4735965565da1c0592eb100d05f","sha256":"840871fb777271d4fdc102ae5a8ab207c4b51f770a16ccb299affbeaaa0d99c0","sha512":"ce2d3191e97cb16045d97bbb58cb0be69db25f8e550a1d4f205ca5014cddfe05d284b927da66b468e1433fb8dbc572f99c9595bad44fe29ccad65db7c009204c","ssdeep":"96:FHU7BezRZaYAFTKRjNLxHYuokRxa7IqOpyLM8Cpc/LPLXO5/f5qum3JkAnr4ppkk:pcUXa7FeR5LFzwcqhg81/POhsusAkhw5","tlshash":"78c18fde4e9c46b5245ccc7520e5457b26fc6e13ad2136c003f5a50a154df957cf63ac","first_seen":"2025-03-13T18:40:41.870515Z","last_seen":"2026-10-08T16:09:03.765047Z","times_seen":11,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/champion-sevensonfire.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.710Z","timestamp":1791473432710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/champion-sevensonfire.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYAY45duCs2EQgSvBfDsb8A2IboRy4Ib4YDaxLOa%2FmJ%2BhXVQBm5JdHQvA2Gq1CgTwEb793pLCPDmyNkQyQ%2FbtOBVNxMYy6KkmhL5HybqqcnzoVTCQGBU5wKycb6OIAs%3D\"}]}\r\ncf-ray: a4762ffa6c0856ca-OSL\r\ncontent-length: 5022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5022,"size_decoded":6889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d30f656e2eb752cb00b945b0eb532e24","sha1":"b3b8b27120f41be48a933ac23185e1596a0bd89d","sha256":"833065f5f03b44f2f76d604cb0c5bf4c77a1d8dc3202f0b3a77cbda987ae96ae","sha512":"40fddf9254cbfaff1f613f837f1fb3c5cd6d9c39de4ffa15c7418792b1613db5c04686c324a51501a68886d04178270f2ba53d87952d0b4fc60b525450f6020a","ssdeep":"96:jU1LOyarE30lulp4kIl230sZs1qHMm344H6bwY3tOOUSyQLFf4Urv:SerBclp4O3DMmFUZORSBxgo","tlshash":"6ca18ccd67a47d3321e2a0a306824f29caf605d604ab7f67ba3515a0303b9752c5ebb0","first_seen":"2026-09-18T10:10:37.855474Z","last_seen":"2026-10-08T16:09:03.785051Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/Main.1be5fb9ecf998d6411ba.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.342Z","timestamp":1791473432342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /Main.1be5fb9ecf998d6411ba.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pIjL7XPr58Rfh%2BWNjEoVZbeNQs2DYQf%2FUJDr4Wze%2F6BgMyq2BVqnpbSkpuh7ALJU4YNfZQH29QPsykng3a%2FyGhudg8nVAW6mKwsKpjGMvWDXq2DMqIshRkEhuyuFKo%3D\"}]}\r\ncf-ray: a4762ff82af956ca-OSL\r\ncontent-length: 638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1737,"size_decoded":2553,"mime_type":"text/css","magic":"ASCII text, with very long lines (788)","md5":"c82cd40678071fed26e313bfdcec3c1c","sha1":"be091fc3c66956854667aecede201ac4ba06a687","sha256":"c36c33cbee763403156a8f577ed547ce7acf6a108777185b73a4fdd6d25c26e2","sha512":"c6521bc0ff7c86b603593710b31e138f9d4e754ed5fce10a4a474cdf5a4138edaa04a7a19ab9dc441ae4698639cb5e16bc2a15e77b99fa38def14392ed0ceb6e","ssdeep":"","tlshash":"473120323932b368bc33c423d7591c9d4386d112ee235ad9df82362685dbaf17b9212c","first_seen":"2026-09-18T10:10:37.73852Z","last_seen":"2026-10-08T16:09:03.680619Z","times_seen":8,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_bx.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.452Z","timestamp":1791473432452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_bx.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmuiQEZfcLyKsaXkC0PcXgW2cJO94fXWtReLMAwnH%2BHXFYrsAnu0RfLy6OhE4A0pcDqmfSr%2FJGu7u0am1KvzL9oe9Bv4NJZUb4YPcn7MfBpfA5yRqpqV24ocRueczyM%3D\"}]}\r\ncf-ray: a4762ff8db3c56ca-OSL\r\ncontent-length: 3110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3110,"size_decoded":4977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17740ea1a3c03f25e3a1c00846222272","sha1":"509154d47df4ddbbbcd551f340c1e4cc431985db","sha256":"3d8ba15de400d48d6ab4dbf40f9b61eeb1d559495199bc0d221fac5fee8df322","sha512":"02beb4dce3199ff046dd9c490135066ed5453aa74734c48ed91a35401ec7e897c76a7d46ddfd1f9c267fbbd1fd698520edb60eae245650e151f5f46d47677d88","ssdeep":"","tlshash":"7f517d37e35d7923fd54b23d4638f5d286d155720e87dfc058148d43921c3a2506faca","first_seen":"2026-04-29T14:23:59.922014Z","last_seen":"2026-10-08T16:09:03.755649Z","times_seen":21,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-supreme-hot.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.666Z","timestamp":1791473432666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/egt-supreme-hot.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EG2UXY2M%2F3ZFfdY49cf3U8T0tArN1HM5OzGPu7IBIOcqSa%2FO0BuT11Fkoy9lg9FA9RLxnUVcRCOkTPGEpDowArLZn2N6bbeVVIC8YAT0%2FG29QM4Dkh8hajr3jsiMCdQ%3D\"}]}\r\ncf-ray: a4762ffa3be256ca-OSL\r\ncontent-length: 4850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4850,"size_decoded":6717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"916d22ad59c91eecb76b9eb86611977a","sha1":"e2f0fbb689bcdd90eb7d6b8872acee7d0127b0ca","sha256":"2b7ff6c9a4f31de4e58a3224a40beb3405075f5ede36030acaee4c78b249e886","sha512":"3fff2929510cbe063126987a81b2ce39b2989a05b330a4b3bc4d133352a0746fc6997f68b76cec032996f3e6c6bdbde2a627c8f21081f1fea0aebc1cecc3e0ea","ssdeep":"96:nChUTEse5MslQBf0IuERtc51JlBHmwLTB5qfKVuvpVRCxC7bWm7AZdCFdJ74U:xx/aQBsORmVBJLTBcfKIvHRCTmkZdqdN","tlshash":"89a19e7c63f4255f0e11090e2ec5437cefa640e69e035316d1d1f21eae295d52b8352a","first_seen":"2026-09-18T10:10:37.982869Z","last_seen":"2026-10-08T16:09:03.668653Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/146850-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.810Z","timestamp":1791473432810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/146850-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sm%2BTY5x%2F%2FiZTvroQY6GB2kCfqfHPrFzBGuQNvenEE050fiYoJdTjtNqOn6oTnaf3%2FjL1OmTosCQ1iNiK%2Bi7uhBWmd6y2L6MsZGZF%2BP%2Bkdko04XeCSClsdS3%2BGqlaWhs%3D\"}]}\r\ncf-ray: a4762ffb0c6b56ca-OSL\r\ncontent-length: 8718\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8718,"size_decoded":10484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c829665f8dd71ae056eca87bd525d1f2","sha1":"e78be90c167ffceb5b4cd898a2c58df1ddcfab96","sha256":"06000476786e080da7e7a6b838d0e965470d8d1156996486abe819c0feb0495f","sha512":"982444d41d64d5e39d08952840f3e6ce5fbd1e31c705d25961d32870b2380eb24c375d47b6465746ed704bf9a860efc92034634993fd40d17df1c1e0f964f9d6","ssdeep":"192:pA+YB8kyeekv3TlOWex0u+yBCzrOkS20WL2R5:PYB3zv3ToQAKaSm5","tlshash":"3c02bf8be88ee2c6f8194e3ecd1735b3981ce2467206621e68311d0717485aab8530e7","first_seen":"2026-09-18T10:10:37.78275Z","last_seen":"2026-10-08T16:09:03.678502Z","times_seen":8,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/754.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.359Z","timestamp":1791473432359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/754.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlfN6czEjuuZqhmy5m2%2FV%2Fxz22YppSY54HOYbygqiQokR6moVFA3RVR9CHRrClXBXJ8Ytem13t5z9UsZsYupvXRcLHb%2BUziuuRVC0%2BmML9TdeDbAV3WsmuM2n%2F0VZXU%3D\"}]}\r\ncf-ray: a4762ff83b0356ca-OSL\r\ncontent-length: 420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1213,"size_decoded":2337,"mime_type":"text/css","magic":"ASCII text, with very long lines (636)","md5":"cdbb3339b8bc24de24547ad0d4f8ac55","sha1":"b95f4b3031ecc4c8cebfdd726420a190cacef596","sha256":"a1d6bd1d911145b87d2a207cc4365da0ab71e1a9da1145fc78ff67924be43460","sha512":"63f791421b04c234e2375bc49d24d9da8ebd4fdfb3fe07c5f9d7c3fb3792a3775ef7b281888ec1588d7e55c5c534d5d195243238d4198fe03dd1d7207b16205e","ssdeep":"","tlshash":"6721cd3770e0770d006bb83cba8f11458172c035cb6991b4b4b8d7214be624b2a398df","first_seen":"2025-11-13T20:36:08.30676Z","last_seen":"2026-10-08T16:09:03.701859Z","times_seen":12,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_h.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.450Z","timestamp":1791473432450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_h.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5doC45OBA6F0ycUb4KiqvfIeiJ91dm7FGR6jjX%2BYUFBtwCAXMbJ3tTdmTVFrWsqnlVtpbRoxG5d0jMdJdlWb96Xc0KYTznz%2FyTHT4kJOxBU14P1NCt5q4dJClMl7XdM%3D\"}]}\r\ncf-ray: a4762ff8cb3b56ca-OSL\r\ncontent-length: 2066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2066,"size_decoded":3931,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9130380d5099e0ae07016c17d6c7919","sha1":"f1893cc1b2c8e2c28f607184afb0fc3a22e0fbaf","sha256":"7917bb6f527a10f95367a926e0ca61378e09c4f672982fb545830f8e9db83130","sha512":"c33c04b4fbdb701a038babc7213503567dc9400539213b4c7f385be93a9d62667dde443c89d6fcde6a674c6b12b563b6c768feb384e2c89defa732bbf0043960","ssdeep":"","tlshash":"b6410e60b64374d46908bde148d843f1f6cb06f0af46eead8693d75502fd745f05d504","first_seen":"2026-04-29T14:23:59.626246Z","last_seen":"2026-10-08T16:09:03.76128Z","times_seen":26,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/fa21f3b9-dac0-45aa-ac18-b05f67b698ca","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.607Z","timestamp":1791473432607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/fa21f3b9-dac0-45aa-ac18-b05f67b698ca HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZaDQezSSLKJ7nMIlXUzFwl0hHij4LceW3%2BkyObBG1vcNnPConr79vG4eBVvOtyJ3QTL%2FBKCdM0Pru2cXfb3MTP9sDGAgzkbw8JZznzYHbBPmlcuFwXqLaBXIlCD8So%3D\"}]}\r\ncf-ray: a4762ff9cbaf56ca-OSL\r\ncontent-length: 800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":2589,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0fd4b49f670c1cb215e1ff1de98bc814","sha1":"7bdb6a4b60a96798c6b0f22da109a0a32560e4ac","sha256":"9ebbbb33540b51acb0133989aa2633df02c627463a4df9bf3dbb4698f82adccb","sha512":"230fdad28290444d79a3f1b8f07c2a88fc9a7df62a800fcd272ee3fd40b81da793c5306f466e315927b96197376efea09428e09a61b2dd40380043fa9de75831","ssdeep":"","tlshash":"0801756fcab60046ce4d056b43d85b67006f2a5d35e8042a24ca8bd8ac6e56ef670db7","first_seen":"2026-09-18T10:10:38.023001Z","last_seen":"2026-10-08T16:09:03.707744Z","times_seen":8,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/79410-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.642Z","timestamp":1791473432642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/79410-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzWTizomxtaTY9arYFn4F50nmsgO%2BcrZpVA5znJ5lFgRwC0LqjNJZRLPeen6lZ5hg34Vv0zinN3WuX7M1cqzCEN7o1QVtX1LVK26qkz2Urx7SDc38vPAcW5uRZbKuQQ%3D\"}]}\r\ncf-ray: a4762ffa0bd056ca-OSL\r\ncontent-length: 10670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10670,"size_decoded":12423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"178f89f2f538d4b97c52b4ab18354437","sha1":"99bdf0a71ce3558e883b740b7002fc02f38ee3bd","sha256":"888ac2bc406161b72bd17e7ba228570bd7b08b9302837e7e011e1c4999595f4c","sha512":"c90e4847dce5e0052749e3faf1ab21e67d5ab02cfcdb413b11c8c4437db4bcd30bfa3773f01bcbc7856eaac522b5d3d50a7c40614c92e9c55aac6800ceef4dc8","ssdeep":"192:Xmir8oqGJ9n7teLqmT/s0hWY8HXx5NEgwd7C7eBy/zx8P5k7LLA+33DD2Jlqp8OS:Mo/wqUgXx5NEgw07eS1M5k3LL33DD0WC","tlshash":"2422af611e5c6519203186a98333ab284bef2113394efce162b66c6d3cbb5557ec2f06","first_seen":"2025-10-25T03:52:20.362544Z","last_seen":"2026-10-08T16:09:03.782889Z","times_seen":9,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-egypt-fire-2.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.692Z","timestamp":1791473432692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-egypt-fire-2.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ENq3qkAIa22SjyygCV68bHl%2BuMqoZSd%2F2u%2B0qedcltbGZ72gNYUb4isIb6CHH9qUXNjIMwxwn8HJEsrmZpcD%2F1%2FMhRd12l3adBCzhNUg4tTjv3a6soTllApFvjzA7w%3D\"}]}\r\ncf-ray: a4762ffa5bf256ca-OSL\r\ncontent-length: 6218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6218,"size_decoded":8089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35fe5ab2c70b1707ae773fa030d906aa","sha1":"31bd95480ef3243cedb40fc14a42cbdfe739c06b","sha256":"4a9819ed334632cbde4f9951f97a3bec11b16a36e8749c779e80cc1e9f31d164","sha512":"6efcfe75fd8aa83540868438c82dc96d3eab4cdfc6e0dddef79c597dba68a54b6f85929f56ae14c2baa188c4ae90f6e76665c5caf6e0eaa440421c332ef7bdf9","ssdeep":"96:s92dvcTOY73iLIc/Wga5TPHPWLQr2KKMWTw2YaiuoCir+Li8cnWMvPcgpRiW4i44:VBcEp//m2i+irSi88bn6idn","tlshash":"e1d17ec2b2bf474fc23b9437650878292df246149756c8fd2b495737050846aebdd394","first_seen":"2026-09-18T10:10:37.745449Z","last_seen":"2026-10-08T16:09:03.754143Z","times_seen":8,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/61430-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.789Z","timestamp":1791473432789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/61430-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2R9GbvzS0mOtjn7cbgcSnBR1Jp3lB%2FOSKFo1%2Bd7maP9quWEfaU6J8ee7dD7CUGVbxhxmPtG3vmmAAqbn0%2F7G4Po0Lqjh2zGR4wRUceJMnD5hlx9a0Ik0jqgN382ClQ%3D\"}]}\r\ncf-ray: a4762ffaec5b56ca-OSL\r\ncontent-length: 8608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8608,"size_decoded":10364,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b10dd685cb373f4463e8b82418836346","sha1":"a7b4a15ebd083fb2287b72bc1a49e340ef8260d1","sha256":"bb2f2dcb83ca604bbca90cae13e72fbc5fbe47722f3fbe80decf699c74c41802","sha512":"ee7d2442e87a79e43e1717b530ed969c1b193927dbe8539eb71badd3fce828873e723f1a16af259a0f1b2009ba021e1e5b40f96b447ca7ce1630585e51e55bb8","ssdeep":"192:mE/uKFNNh+7EH1ILS255SyjWfO7YxD8HnhxE64jt/F4PC:v/FNgpSqhWN06h/iPC","tlshash":"da02bf35b2732fd0d669333a249c6c45e32983b9776d9414acf42362484e6de815f6cb","first_seen":"2026-09-18T10:10:37.727048Z","last_seen":"2026-10-08T16:09:03.632315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b167aaf-3984-4516-be46-88aab3e7055a","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.527Z","timestamp":1791473432527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/9b167aaf-3984-4516-be46-88aab3e7055a HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUSUhziE2xJhT%2FzCtggeBYScbC%2F2FrSJrm4AGpqOQAPCPbz6iiPfi8GSyUljHpyYzIkl0oFGfBhWaSSPJd2SFxv%2BUaFsrLt18C9qcj2ZypWGobwe%2FkgOYyZvJaL4dZM%3D\"}]}\r\ncf-ray: a4762ff94b7656ca-OSL\r\ncontent-length: 2138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2138,"size_decoded":3932,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1242e202e0c77686d798524768cd28c8","sha1":"9787749010fc52db6d36e15b29fcf273cacde643","sha256":"bdc2422c91bdfb8ce44176cbe51eadc1dbf7d0eb3d22c544379ab07691ba0a97","sha512":"aae3df2a271e9efb21debd58de4d74f551d8ac4eaca7d3746498d6c9533d381ca382237b6d3f2192d2979e4047846c14af0d549c6c8824d397c1b48449022252","ssdeep":"","tlshash":"cc413c1c43805abaf8b52439e2e5422637a67801902e428e227c0a5ef711365f07745b","first_seen":"2026-09-18T10:10:37.753266Z","last_seen":"2026-10-08T16:09:03.731229Z","times_seen":8,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/072454c2-32d6-4250-ae51-4bc2b8200f1c","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.619Z","timestamp":1791473432619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/072454c2-32d6-4250-ae51-4bc2b8200f1c HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghdRk7rJ1iiTt159KHb%2BAKQRzu2BBqmiB652K6rKjgF29OXvxrj6PVH2BuFnDJbvqbaWs%2B0BCRZTJGgUS2NIF%2F51FC76HRUqGrEWeibdzGM6AlKBFss4vfDqki%2FShJo%3D\"}]}\r\ncf-ray: a4762ff9dbbb56ca-OSL\r\ncontent-length: 762\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":762,"size_decoded":2555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"403f44dedc0b18404d1aca736ae202df","sha1":"a93fd4f8ac5e88722b4ea96107d0a853ff189762","sha256":"e45e51781a9734b8307dddd1ee9093f2efb714a9efeed788f6a217bda47c51cb","sha512":"ce02e72ce18eb98bc4247287b00b3aa9997aa3abde8c2aeb3417f156ae9e8cb9204a6df512e72fd80888d4b15f457d77d1a3968f1e92e45a1eb74d6d70593940","ssdeep":"","tlshash":"c9016a844f57d665db4ff02052b73bf6163f46425c98d995d49e049620012b91cf1c01","first_seen":"2026-09-18T10:10:37.922882Z","last_seen":"2026-10-08T16:09:03.607153Z","times_seen":8,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20fruitsw.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.657Z","timestamp":1791473432657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/pg-rocket-vs20fruitsw.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlS94d1NgI%2F%2BI%2BzsOjNJubNBLi%2BPLALcmWhAJsJ7G51GNWwdN8nn8gw3SWAngdFbPINThXPIMcmmOI2GTcjGiu4h3A6Gxzgk%2FYWZZpEIXPIPFXhLkK6h0P60oY7ZYjs%3D\"}]}\r\ncf-ray: a4762ffa1bdc56ca-OSL\r\ncontent-length: 6074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6074,"size_decoded":7947,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"875b8af4b0f46fb291c688bec61a23cf","sha1":"927cef6cb9ea191eda229e04fe790179b87d7451","sha256":"6c1b04f0aa07a680f4e54ed6d58a7462a205752879e2e70389ac5076c5e69acd","sha512":"2d7fdc39dc79fafd84ee5ea4b8dccfbd6f4ecba7ba56ded27e97490230de762bdc1df0f7563e38e8eea1c97c90556a0560a0e5f05331887b42fbddf12b0d57fa","ssdeep":"96:NRV9xHYnwlZZvDqgxUlIlBF3D7FEItO6rZInRNlrgvr7gJLKabMQhEK/fkL7ow/y:HV91Yn+Z1Dhln3D7FhOoyKXop+KHAswa","tlshash":"73c18e43a6114bc5dcdc5983aa991672cc3faffda21e8681e0a6bea70b300590467996","first_seen":"2026-09-18T10:10:37.969612Z","last_seen":"2026-10-08T16:09:03.702838Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/268.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.362Z","timestamp":1791473432362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/268.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2EBWHGFo7wJteaQHnqOv5hxNcZpLld7vwb3DL%2Bb8fSy1XjCG1AEvauz1RjX7oZ4kZf0JoJyvM2p39X4HJkI6vuQjR0WYx8PPDR08pbf%2BI%2F6h%2Btz6TOj46ovjAi5nM4%3D\"}]}\r\ncf-ray: a4762ff84b0656ca-OSL\r\ncontent-length: 528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1499,"size_decoded":2443,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"cb744a8ea3fd7ec4c19e38c1d6ebe581","sha1":"9f2beac1b3e8d885e9920dfc53af5bfd09be6ce6","sha256":"261de3af1b637c8ddfa0a5d6ebbe39e1eedef85be8eb8c2372a14e6a96fc6c38","sha512":"99617c6e1d5d995f341bfee683b0f263d45caf9069fcc342c280be3e34db99ef9aef08f5c3642eb1226302d10918194e1998b285d7569e4f6bbdff0077f45d46","ssdeep":"","tlshash":"3f31003260b6761c1817ad202b4e13d89276c425dba263f86972d72183cb2ca0df26df","first_seen":"2025-11-13T20:36:08.413525Z","last_seen":"2026-10-08T16:09:03.681782Z","times_seen":12,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/ukr","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.469Z","timestamp":1791473432469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/ukr HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRr6AEW0g1L5pCYHj8zuXUHQNCsuuTYTy6IAMCV1qA4jD8SflH79PpjRAStcjIuTeTb2hsChkmwvB%2Bu3ahFW9532Coctlr2wF72xot8H6tJaEehFfk6yHJoqGFLe3EQ%3D\"}]}\r\ncf-ray: a4762ff8eb4856ca-OSL\r\ncontent-length: 316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316,"size_decoded":2067,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"11fe565f6938a10bef2f1c6cf9dcf032","sha1":"dae75dac8a12bcfbad8e19b3a26ef842370a93fd","sha256":"9a4a597d453af66fa11de2af6f3e2bc2f169905327be83a9f8576f02713017f8","sha512":"10049d55e7257eb2c3c3ed6ee64a61d3d41e8c5d6cc4e683676f420d835576886cf9c9207e3a2c14d5abd011eeb1fc590c14de0a69c0947b24e53b7b715ddf8d","ssdeep":"","tlshash":"43e07d8b6204ac70c9303e775ed56c80486f005468451fee0c26f4d36aa14129a96506","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-08T16:09:03.659102Z","times_seen":102,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/nba","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.481Z","timestamp":1791473432481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/nba HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zu9IWjF%2BJi9YqiA3%2FLX%2FdGKukJQeew0BqVVdJR8X6Ji2fsKnwy04Gb2bq%2F9YByBxdvxb3GtmArMcfSUi8%2BbzaEvQm49gLGQBzb7o%2Fncd%2BqSb52eQmic1Fwt1wzDNEiM%3D\"}]}\r\ncf-ray: a4762ff90b5156ca-OSL\r\ncontent-length: 1649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1649,"size_decoded":3413,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"cd18e8380d34e77f2521380e2aab48f5","sha1":"7c4f8be9c5a84890b1edd57e095c3d6d7494614a","sha256":"1b8fec5c02fbe3b4398569156b05d6a3afca1f0cdd0b9f32b3ef5ec921641670","sha512":"f52e8acb9a1a700e6cc64ca8955671736b26582f3ad6de0be9dd3c3b764c75393742b50f31e76ce1059bbc9ccc53f5229ecb9189194a38ff954a1ca0ca166a4f","ssdeep":"","tlshash":"23310abf7254d73a8afede9618141b6e027807a41123e1ccfe62b22d0b93647739532c","first_seen":"2023-05-09T09:01:56Z","last_seen":"2026-10-08T16:09:03.648978Z","times_seen":101,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7a78d421-b837-488d-bcaa-94d582d60465","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.572Z","timestamp":1791473432572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/7a78d421-b837-488d-bcaa-94d582d60465 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkHxBAIQthWIzAqWroS5xq7mXLtJ6IflF7sEgFOxWpzNygif1mHQKN8390Tbw3s%2FM%2BDSyDoFxOE2pmAPCLl5hEGCNh7KSwN1u26Qbkj6k4zjT%2BX7URiwBmUwHX4k%2BIg%3D\"}]}\r\ncf-ray: a4762ff99b9656ca-OSL\r\ncontent-length: 25068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":25068,"size_decoded":26863,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"936b718d137b10dab44a9b45fb3dc513","sha1":"5401a04a6927e68499d61b0f31851083d38d725a","sha256":"e9cd612f2c3349b3b3b4f815f1e012f006b0de9bef7612deecd873bb0ebdeb54","sha512":"b15135d0c24b1496af67a1574078d4466b839d6c57d5f7eb4885480f3fd95feaef2ebb7da79407cf998f6f9e86639266d8479b2641e10e37ee6ff2b4d136a940","ssdeep":"768:jh3B86ImsFMd66DX0lH0VHJ1kbJE+B4t5KTw4t:RBILWd6zh0n1kb9BqKT/","tlshash":"91b2d18ff99932f49d5461f7e331de32d083c384e472998a11e72c75e64caa0d9b612a","first_seen":"2026-09-18T10:10:37.851257Z","last_seen":"2026-10-08T16:09:03.763297Z","times_seen":8,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/3.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.365Z","timestamp":1791473432365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/3.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiK5Qu7Wna8TUQLrhc%2BuMX8yu%2BzBISldKswSWG76IaGxSjx%2FGRf7z5rGJ50DL%2F7Ebx8wDMEWD1G22LcgRRnvfwb9V0vPZSFFCZIst0aB0WokSg%2FhkCWZ6uEKxoszNnk%3D\"}]}\r\ncf-ray: a4762ff84b0856ca-OSL\r\ncontent-length: 246\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649,"size_decoded":2163,"mime_type":"text/css","magic":"ASCII text, with very long lines (648)","md5":"3ee6f0636a35f6fbb984cff1bc3aa836","sha1":"e746ad69096e8238a8ad0afa1b66834a9b74826e","sha256":"5e53e4443f07fa47d95d1781d8a36ae6144a44dd342b7c9d5b189bbf3b77c9b6","sha512":"a27a41e3a2cb049ceb952110c2537631f28da08c1c2d0873e578f1cb2f0bc99c906c434f6b6aa3bc31b00cf2350fcfd59e8969a4c0ddb265a107722498773d3e","ssdeep":"","tlshash":"8ff07337f094171c74039c2863495a738170c56693e1bbfa3b76db2453d79450afa22f","first_seen":"2025-11-13T20:36:08.477901Z","last_seen":"2026-10-08T16:09:03.577055Z","times_seen":12,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/479.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.369Z","timestamp":1791473432369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/479.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1p5B5YtH5FhNwuM%2FN2zchic7nCgM9StpL6CqSxW8NccrBbSE%2FW94jQiU4s%2Bi3Dyf8F7qFRTNyf7sHsjlEz%2Fm%2BHZOoH1ntT6t%2B9ri6CGmqa1v539G8I0rqZ6OFDsTbE%3D\"}]}\r\ncf-ray: a4762ff84b0b56ca-OSL\r\ncontent-length: 519\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1486,"size_decoded":2438,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"aa2a2a5c468117a3a2241cc140856dcc","sha1":"11c741f50b624328f5fd201c80c9b34e29fbb355","sha256":"08f86c164eb60f803e5e0693943ed1bf5e537f90abf5e823f874c5db5a4e646e","sha512":"a807e8d97c53362150567357fdb9292f1018f9893e755e74af6edb946c55475747dbeb8d86823f91ea8a26bfb0ba8d19dbe3ca266bd5dd679f2b972235051715","ssdeep":"","tlshash":"1231d33320a1b60c5813ee502b4a13c99166c436ea6267f85873d62183cf1d60df26cf","first_seen":"2025-11-13T20:36:08.121782Z","last_seen":"2026-10-08T16:09:03.603477Z","times_seen":18,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d1a9b80e-b42b-43df-bb71-5aaad5d978d7","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.576Z","timestamp":1791473432576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/d1a9b80e-b42b-43df-bb71-5aaad5d978d7 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ipq5tFjm7Xht8Uy56xVJ8aY53ECosPlcXNMBSnSIOs4n%2FSkcEiMs5iztJwe%2FCc1swUPKklOdfLT8C8gCFewBhRvsSivHAmRZgAVLO4N0HGmEmr0DZOZz6mE8RU9tTLY%3D\"}]}\r\ncf-ray: a4762ff99b9b56ca-OSL\r\ncontent-length: 12572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12572,"size_decoded":14363,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7fdd202d91e60404703771eb662e208a","sha1":"76d8040928deabf9d0b886c47c3094db739c180d","sha256":"23ef082c90909039d5e44ae93bf94fe71a043314885bc383e07075c37661b76a","sha512":"013cc923dffa0e634adf8d7fd57896dea3fb9c6241aefb645bdc36489ba01b179035a5b177664969fd512f2ab3e718a4e20e5a41c352417a76d7ed1e401aa1b8","ssdeep":"192:d/T21HtTUEIENpM3d/Yfw8yyAieLP0SThrJ0sVH48pBDhfVqLA6YZ:d/T21VJpMtwY8hAieLP0Slraehf08Z","tlshash":"6642c0bafd051f7c47000968d43d368e2f97b5406085a89d3ed3c6426b2551a2a0fdee","first_seen":"2026-09-18T10:10:37.76857Z","last_seen":"2026-10-08T16:09:03.672897Z","times_seen":8,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/19303-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.632Z","timestamp":1791473432632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/19303-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49JiFpdA0%2FM7g96pEvltsb2gSL9Kp3XlYnBlF4ogl5MlHIQK3KuFMJKHSucQP2jmqJ8JjF91ZcxNDr46tkOlMR%2FIOQvDqJZD%2FcsFBVA%2BgC0yXs4lRj8bYWFUNo2ZW0o%3D\"}]}\r\ncf-ray: a4762ff9fbc856ca-OSL\r\ncontent-length: 8050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8050,"size_decoded":9808,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c009d7feb4a6c7e712f2543c4f03441c","sha1":"607894c79ceee024047c9431a30b42dd0d816548","sha256":"95db0821a9df14e0ca8089f6115da5f0b8ce3a5c9081087ab37bf892e1c191b6","sha512":"0f2556ba721e9ade237a5638297f91dbce132fb93a3fce87bcdc00712d42cef2b05220f71d363d0ece9864806c04ae93b8941207b3c437a5853494316bc182b2","ssdeep":"192:Mb4WIXe0tBgsKoY+Ro1VbuFHs1e1VZAxwLtEzy:MUWUHc6iQFMyaOd","tlshash":"aef19ef581cb504207685cb089ec5836bfe120751ce09ec672abdba98cb4ec72886a71","first_seen":"2025-11-09T09:00:07.566297Z","last_seen":"2026-10-08T16:09:03.629968Z","times_seen":13,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/59902-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.808Z","timestamp":1791473432808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/59902-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygFF%2BLd9fKd0z5QCrjqor4Xp0KM7QDIaN7pK4cqEg6k4fvNrCj9foHPkjk1L0ywUOvctjLhZDpzwFmcR1f4FoAnvmCmuwwx9GQp0cqwRDPm440NHrCFFe%2BCIR283mhY%3D\"}]}\r\ncf-ray: a4762ffb0c6a56ca-OSL\r\ncontent-length: 11058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11058,"size_decoded":12813,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d4a5ac28386b406c3604cbaf26ce005","sha1":"4509d16c02cb77ad73ed98ad63d3e9c20bf1a06b","sha256":"aceff1744e26a118e53eda8bac45db46b538289b011a26cb21a0b53083fb883e","sha512":"4ca8075da019c919a0d818970e15acb33b165de5952dbe7c9a7c8f4d73b4b99182f33ee5a205d8fd0ef7c25aeb4821c6448fb3dc35d8a9c843faa6b86c78dd32","ssdeep":"192:DZaE0C0I7zAT0YZZXPz1XXT9qnIH780fn4YzdwoeuOxtl7lrp:DtYZZXLXqIH75Teuat5L","tlshash":"3d32bf87934fd00cae618e783a8d773a786f907a91b7c8b4185c381b54d15932ee64be","first_seen":"2026-09-18T10:10:37.781527Z","last_seen":"2026-10-08T16:09:03.643669Z","times_seen":8,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/915.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.363Z","timestamp":1791473432363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/915.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evKye%2Bma7mfxlfYvQeqlCqHt4saAdckFfcSTZWpzlzylrC8gRtj8XWAy2DHByt1E38IpmeN7yabXeZE2g088aF70Fz%2FXMK%2BBuEssSQYrFoZcPtW2XH1rZpuZF%2FVK%2FSA%3D\"}]}\r\ncf-ray: a4762ff84b0756ca-OSL\r\ncontent-length: 497\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1417,"size_decoded":2414,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"a246c443f2506f158bbccc468d4de4d2","sha1":"e5e9dd4561d1fa6be30f266e2302eafc18cb323d","sha256":"b7b587d635b50ffea56e87ca74fea68da1aaac2a320f76e704b312ceee9e2ca1","sha512":"48d4b6730693f5af96bb4a643c4cbe9970962a5a2b940c08270c49fa06a297fb50a0bd977da27f0e6bbb830b9cb39cb5922cd2ba9731c6a431047cf09c1c46f1","ssdeep":"","tlshash":"f921ce3320a2b60c5813ed502b5a23c99235c036ca6263f86876d72182cb6da0de16cf","first_seen":"2025-11-13T20:36:08.496839Z","last_seen":"2026-10-08T16:09:03.670608Z","times_seen":12,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_sport_f.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.444Z","timestamp":1791473432444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_sport_f.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1583\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9xCJ2I9tJq1ywxkr2aU6LF6TVj3TNI4C5NOVMPhDnxYo8swnfYzpvHtrQ9nuQcbp4n2dMwnTNHuYv6KM4pSMKe5ssMp%2Bjz7%2BXR6w0sVAGJ%2BtVokb1tdB6fXYngGyss%3D\"}]}\r\ncf-ray: a4762ff8cb3356ca-OSL\r\ncontent-length: 2548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2548,"size_decoded":4415,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d648cf7b93f7928895548f2114c6cee9","sha1":"9dd60766e23033a1192a8c34f250dfc30b48e760","sha256":"b7e3b52518a4d99c7f504dc10e2d5bfa0b2011aa69f8c9a3d9cf5dcc56142c6d","sha512":"25037e9046559bcdf13f62b3315593174525cc4149176274009cc155bcd295906d4d5196b0a8a4be95f8f8901ccc9cf3a770a6a2547d8567f2678ea3a8c9516d","ssdeep":"","tlshash":"b2516cf0d932e1623c300baa1549f1167833fda20561490ad3e92bffc82215f2a00e7c","first_seen":"2026-03-28T17:27:48.408465Z","last_seen":"2026-10-08T16:09:03.611916Z","times_seen":44,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/cs_dota2","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.474Z","timestamp":1791473432474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/cs_dota2 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KoC2lqK5bu4FokkZ4K%2B%2FwU%2FpHbHCwqmZjMWsQeJA7KRZWq%2FVEazSXom1eU28uEsgxT62xMJ%2FlNPFqVwDYbEN5ltjnVjRLbsbdhl7a6%2BhPiMwg77PuI5kohLUP5ea%2Bq8%3D\"}]}\r\ncf-ray: a4762ff8fb4c56ca-OSL\r\ncontent-length: 4008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4008,"size_decoded":5772,"mime_type":"image/png","magic":"PNG image data, 200 x 150, 8-bit/color RGBA, non-interlaced","md5":"17010fa41a79294a457aaf70549e69b3","sha1":"df74a5bb6f4a376c6b8f943001cb0d9f2f6ec7d2","sha256":"bd18a34c6fc0462c978b9161d48376be72e76c19146e754f989392409cab942f","sha512":"532c2c72be9a0356800561e06bac60c1158dd251fe6c1e489a6ef07b970ad06420fe6bfdc0e4d432b30975c5fac23a7cd40389a66951c7d75f52f77c9321214d","ssdeep":"","tlshash":"16816de724195d323e810a62a77253380480476c8cbb152bdc9772f53272eace632bcf","first_seen":"2024-12-15T09:19:43.741524Z","last_seen":"2026-10-08T16:09:03.737475Z","times_seen":62,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e7be01fb-f347-44dd-b338-88265b4c5d71","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.569Z","timestamp":1791473432569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/e7be01fb-f347-44dd-b338-88265b4c5d71 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iTWmDjqoAM%2FqELFmD%2FU%2B3KMm1ClW87tqQIZcfRziirSfQzDiW4sOFGY8Yny0GuogV%2F1lk4EUzqwhW0VFrEbzWHXLgQVaaUkPJgBNI0%2Fc0Ihdn%2B1jnhkI5pqp9OrcJ4%3D\"}]}\r\ncf-ray: a4762ff98b9456ca-OSL\r\ncontent-length: 14196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14196,"size_decoded":15995,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"448967e0642a588dfc0eb39b40b38d57","sha1":"3fb58e0f477aadcd4ee7b451e050968b3818f1b5","sha256":"5b7b444160b03ee564af728a847808c25cf611353eb28c6378511faecca4007e","sha512":"af7d0cdaa85f0442635a0e39a5530532d2359bf0a7103447e6d6db67b61df5454efce819fb6219dea98e0f5b84e43c3656d6e3edef9d105735bae7eea82f50ff","ssdeep":"384:x/LeONepBNsHFrSBiiypScDTv7+xiCOPpOnc1ZeI:xTeWeZsl2BiLpS4n+xiC0p0cn","tlshash":"c352d02f5a64f3e04fac0133032899a2540739a8f8951b745bb9d28d6c6368fff92146","first_seen":"2026-09-18T10:10:37.718637Z","last_seen":"2026-10-08T16:09:03.751351Z","times_seen":8,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6e4f1ef6-7272-4496-b0d2-b24cc7b17328","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.575Z","timestamp":1791473432575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6e4f1ef6-7272-4496-b0d2-b24cc7b17328 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA0ksKcWc3%2BGWr18S%2BH0F0uKQzjl%2FWAJBuRBQZeKDeSAxPJHK2S8ho%2Fq8Zy35MkxJ7WPK1oMRoLXtFNgJMsXbEe2vhW6i4ArazCUo4cL2Mjjinlwe7ghWKhmzWfa82s%3D\"}]}\r\ncf-ray: a4762ff99b9a56ca-OSL\r\ncontent-length: 19644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19644,"size_decoded":21439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9538926ebd36a8811fd8e0771e3f0e1","sha1":"7fa1e107ec545bd73399bea98939c774995c743b","sha256":"057abdc8bfbdb1cabd84f03d07d114a0b53772099d3ac664722bb3cf19d6c8ad","sha512":"65cd3764f26851c9c328e7ad6cfc7cacbaf099992dd8a93ed23c202de5ad70231e57c652634913b2c89d8173bc42fc663608d486aa71470c4b11b7d2d8d5b46b","ssdeep":"384:Iq4u8GxLSBzaafdNi9JZT9u6h+vurYGnDFPrOpCCDQ57L92EEsfpn:B4u8LBbfdQ99+vdGn5TGDw70EEsfpn","tlshash":"9292e0698380fb85d720bc5fbdb74bd298e4509da95d7c23dd442e31c2a191ae10fd39","first_seen":"2026-09-18T10:10:37.934193Z","last_seen":"2026-10-08T16:09:03.787443Z","times_seen":8,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/3606-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.636Z","timestamp":1791473432636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/3606-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xu3z6GzRT%2BZDVzEiwDTrVivx3mla7Sx3tIIi6s0QykBHAD8R9w4hqfoPKLph7ppPhSyg4dfDKgNlQX7ZZXUTbAPbTOqeaaG%2FxBltaaaEYZwadrN2EkaGnqbH8vOXC5o%3D\"}]}\r\ncf-ray: a4762ff9fbcc56ca-OSL\r\ncontent-length: 6896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6896,"size_decoded":8650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91c8daca0dea65649784a390999ff3d7","sha1":"babe2ade62e1d3176ea70983816d08c3fd26164d","sha256":"be5d84c84379fb470fcd84265714bfbaa1593a7629f9f6b5fff4544d1fc683cf","sha512":"2de852029cd8006e1a50a8243f107fb910fc82c3c2df5e534303324419c5a4ba077f22f10a590ce763e09d7e7544bdc48aa3d670ad380afb39401a1ef6469ed8","ssdeep":"96:VxUxpI4L+B9I+z4foDamTdOnB51XMqqdUQKvslb5Wz3Wz2D9MJbaHCbRdJ3mSFke:8/tL+3I84qRO9Z0Uylb5Sq2DibR3LFv7","tlshash":"ece18fa46ce7fb47472500e1c7913eb66a03fbfdae0419ae69e2c891457d3512104326","first_seen":"2026-09-18T10:10:37.917262Z","last_seen":"2026-10-08T16:09:03.684119Z","times_seen":8,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/1998-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.640Z","timestamp":1791473432640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/1998-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMUtsHwphee64LBo3DtXs6nbQzta%2B2JSJwqXvD1ORpkhwFeh5KyNwXfuRgVWNQKoEQE5Lh5sU8IFyMZPkzv%2BgmeaybLoh21DXo5cyJo2rKZ50to3sdM1nr94Lu4VQIw%3D\"}]}\r\ncf-ray: a4762ffa0bcf56ca-OSL\r\ncontent-length: 11986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11986,"size_decoded":13741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73145073d9e08db8577190878ba1432a","sha1":"0e6d8135fff8f3cfe5a85df9101253e6ebb7fa7a","sha256":"44770d44be9ee5c86b678b4a7c66cbb1cf12b12695ca0905227cb626e09cccfc","sha512":"cba510c05d357442cabd36d0afe73f3c17c8b204f84e6f798dc349605dbac7bd241823b07715f999c865041cbee915f609bbd9a500a142ffe917868b8c64f206","ssdeep":"192:PTYIMB3LjLiLRTKHfVYFFjoeiBUTt+XkRIlyYJf1C1uSdgXxc:nMBURTK/VYFFjkUTsURaA1uS+Xxc","tlshash":"c532b0722a059e8f8fe4901af5a143e611b87c023706fbd67fb85e0646ff798449087e","first_seen":"2025-03-05T01:10:53.961046Z","last_seen":"2026-10-08T16:09:03.663439Z","times_seen":15,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/5043-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.652Z","timestamp":1791473432652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/5043-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO%2F1Iwbybu1BcklbVRd8GVoptU5fbgJiXLjXpkv42OPjTg4LqZUrW8MvXLH8qGUsSmMhQAyqgBupiiU2bBcQHYteFbGBNn0oKggePxKACAQZxhvwaKw3wiJrfBunfl4%3D\"}]}\r\ncf-ray: a4762ffa1bd956ca-OSL\r\ncontent-length: 8638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8638,"size_decoded":10390,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3c4eeb077544a4b2cbbffaf52045b6d","sha1":"eeb2c9ec41649e832462ef12195dda8cc56e0a6b","sha256":"19ee6113bb3b172615fbf3790adb41d93d0f530963ac87bf6935c011f9738eb9","sha512":"ff6ad2ef655be11cedb66203411ed676d2778b2203d7094fa442773b82524c07ea282a9f56f269da21cc6f0fccd1706501e34a4a68bed5dc8423ba9c29983adb","ssdeep":"192:NyS3UABYL3ul9mpXrvbdlIWA+L+Hk57xp6pTNz:NrkAKbuWpXPW+CGxkNl","tlshash":"8402bfa550dabb93ee50e65fa11154a15411fc81ac595e3afe701c9e8fc0c9bde30c82","first_seen":"2025-03-13T18:40:41.935401Z","last_seen":"2026-10-08T16:09:03.553902Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/mdlr/assets/images/brand204/mdpi/img_ci_topparlays.webp","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.442Z","timestamp":1791473432442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /mdlr/assets/images/brand204/mdpi/img_ci_topparlays.webp HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:07 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcutG6Ye1JsWVB18lFlLLHA31wAQcSxaliZr6Z%2B6ljgoSVZlocbbhZBMLTSdyksksdJevYaqtok%2Fpg01ZGeyOxtAfC2s7XTvUU6NQmvtlFQr8v6oLyIecgMM3CeaYuc%3D\"}]}\r\ncf-ray: a4762ff8cb3056ca-OSL\r\ncontent-length: 2878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2878,"size_decoded":4743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"952ccac51b057e7e22e586db920e9d8d","sha1":"5676925a1f63b2404e104d20832b9db73d773d56","sha256":"0cd395e7958b2fd3391abbf2b509b41e1fa772d5a73956e7f011903ac8d2b5d1","sha512":"89af077b832a3252952a26ae853622aee4b367ca30d37813342139252f6f3abc04a96f6e901a48348da5328bf2be01a6f96e1f02292d63bf6bb85ef5b193e440","ssdeep":"","tlshash":"30516daf939b70738c8420e0596a4852d0060a5812d3db8ee0e6d716c6b1433e6d4522","first_seen":"2026-03-28T17:27:48.382366Z","last_seen":"2026-10-08T16:09:03.633239Z","times_seen":44,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/isr","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.484Z","timestamp":1791473432484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/isr HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lPSSW5IRSp9Ts2EpPNHO6c%2FZoQMZ1GXgSjgM8CvYxO4%2FaanMfZx%2ByAY5%2FBst4OMVdHdJasr4%2BfbBx%2FaY7TC43BY3q3vI7606rfh8v8Vb1LzgAx5j0JMeYPHBElNEzM%3D\"}]}\r\ncf-ray: a4762ff90b5356ca-OSL\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":749,"size_decoded":2510,"mime_type":"image/png","magic":"PNG image data, 112 x 80, 8-bit colormap, non-interlaced","md5":"1a6db5fd0de3bbd60b7fd65d326f6e62","sha1":"dfb54aa529d8a2590ce6b95e1f92c6e8f1518cae","sha256":"55037674611492223ed5b67d00fcba505fa99b100fdeaa04088a2d0686fa7b50","sha512":"d8773fdc3d050cb48753dd2599ff887a2a483c8999bd24e010611203d3c66650ee1b251a4fe9d3e2497c3f746a45515438b695948840b9227bf25fd691ca427c","ssdeep":"","tlshash":"be01baf743387664782f2cd6247ac8b6c821cc191d8158452153c414d28bac6dd7d5e1","first_seen":"2026-04-29T14:23:59.594114Z","last_seen":"2026-10-08T16:09:03.623632Z","times_seen":12,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/categories/cze","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.494Z","timestamp":1791473432494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/categories/cze HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joDlUTV2EsULj266LVbpXmSajlxR4EqUdJIVaQJ2YWxXpoc3AnHAnsTSc3m7qXwCzFXn8mS%2BWL2QnC9TMD8Krt5oPB8L60YDQXdYXXKWUOy%2FovTwB2d0rZQW1fjV9Qw%3D\"}]}\r\ncf-ray: a4762ff91b5c56ca-OSL\r\ncontent-length: 606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":606,"size_decoded":2359,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83d22999e25c62a49d6eb2ff9d4d0769","sha1":"6a6a26ccb0b71a464ce65f0c88eb35b17af15033","sha256":"3b96ec172db1e497ff4bfcd8bea3a08b07943dd2c2185096dcf241081657a552","sha512":"547f6c60426f88224efd22cebabacd836134aff88bd01613cc806b16c143e87492fa8cfee06aeb492b5783b43fbce9a15134d4deaffa059f496eb432489dea2a","ssdeep":"","tlshash":"83f0025a889e2285742568a15178095581dacd88b3ad25442ce324b8b5527030a9ba3c","first_seen":"2026-09-18T10:10:37.741213Z","last_seen":"2026-10-08T16:09:03.578795Z","times_seen":8,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/39197251-0d79-4d33-8ada-46179debabf8","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.595Z","timestamp":1791473432595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/39197251-0d79-4d33-8ada-46179debabf8 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwxoyh6oXbYCs1XoiXn8OLqeyO7MQM8z0OIP5iLG7XxQAoK7ymLiyDoso78G7W%2FzkbY%2FJ37dz2zUaqXKHbF%2Bmyokq68gXk8r%2F%2Br3caudez4OZ8H8%2BFkDgkiJ60%2BegXM%3D\"}]}\r\ncf-ray: a4762ff9bbaa56ca-OSL\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":836,"size_decoded":2635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e68667b973055d5f8b995198ead63693","sha1":"2a0fe5125a094a72f3547e05b576e671f1f3f141","sha256":"3c2c843b18462cb424cf10d53f38de3fbffe1048214abc9516af42b3ad02fd06","sha512":"416454726a3fbf6edf7daa23f155c9f1dd4e26f856102973183e1ac2c433e12318b1956e83adfa914a182257ab3fafbefb2d94da018ea44290affa879e517fc6","ssdeep":"","tlshash":"78018a4d9cbf42138d7c5f1611765b059d5a01d439d64a031a9bdb7f793a47043257a0","first_seen":"2026-09-18T10:10:37.744021Z","last_seen":"2026-10-08T16:09:03.771862Z","times_seen":8,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/630-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.627Z","timestamp":1791473432627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/630-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SDvegGQZoIV14nTPaQJ%2FHcnef2ms1%2FiiJkDq1xLUCQvirpAPEHaVe%2FcqOJr%2FEVXotLmkwZ8WZSEjA%2BEndz0gE%2FOlJIcZYldPVnvEy7a8mWuUXOcfE425RCJmzyLdrI%3D\"}]}\r\ncf-ray: a4762ff9ebc456ca-OSL\r\ncontent-length: 10352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10352,"size_decoded":12115,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42f7c028c048704907e4633c6690f89b","sha1":"7c495a17d5b89d6fcb18858ef1c908c51df27004","sha256":"d634bec84bb473e724efee1668038d117df0ac9b81e70e5e1402fc12b633cf6c","sha512":"d8cd3832e2053424fab01400ded856d4d69db200f195db206357ddf15f42402806317a74a33f5569da0fb43d3f2771870b61c483d7da1a6b050ebb88b4e20a3c","ssdeep":"192:T2/kX5Eu82edNWvcXUhVT0bTJzZhp/hmDODAPvDKmeiIFgigQ:Ekiu82edNWEOeNzTiLKme9gQ","tlshash":"f922ae402b50676946992cb0aa70342de2c760cf91d6d3c12b531ba59f4ec74b1bda8b","first_seen":"2025-03-05T01:10:53.871723Z","last_seen":"2026-10-08T16:09:03.662691Z","times_seen":17,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/297300-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.742Z","timestamp":1791473432742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/297300-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mHjNktQz0Y7dkcuqUZAZeiH%2F56VkaVxaDlKXztutSxqoSMerpfcIWvIOMPBncmFxa9skiOtctYjq7hEhuIn7cLDnAZTqAlAuJVYQ7QtGdnZU9TjNpJBUSDSBOYq9v5g%3D\"}]}\r\ncf-ray: a4762ffaac1c56ca-OSL\r\ncontent-length: 12722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12722,"size_decoded":14475,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb1be6359f6ff141d890d8909ed7be8a","sha1":"403c98b2d4337e76b5bdbb599d81c5b8c5b9b1e6","sha256":"d28c8319d2518af64abb14eb8772dc40b6b79f2ccff0df9c42dd986967dd453c","sha512":"ea083883265015f37d88b2427fed6d048d84d4bb77ff8253b61ec3deeb497d663003a2bca53f88a70d5b2feea8b42fd641c35789fe770751b5f509123fdf9d4e","ssdeep":"384:r/0GRR4qF+ebvhxp458aH4Eqrik4sDIka8FO:r/0GRR4qFHvhzaH4EIkb7","tlshash":"7942cf8171f045a712d7e6a874ac7e9721adf18dc4885e500683b49ef7f4ee6f6f0209","first_seen":"2026-09-18T10:10:37.77387Z","last_seen":"2026-10-08T16:09:03.77273Z","times_seen":8,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/prj_footer_telegram.svg","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.831Z","timestamp":1791473432831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/prj_footer_telegram.svg HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRah%2FSryJV3pCwk46fscBeIdbTcYaR3jsvQI04i78Q6hFUU72RouqLHbkvqg8BYqvv6J0iYkhdKFyZC5%2FP7PdJzO7wo4PQJQG7ilXsGV%2B0GJalodT5qp%2BoxmQt6UIXo%3D\"}]}\r\ncf-ray: a4762ffb3c7e56ca-OSL\r\ncontent-length: 481\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958,"size_decoded":2398,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e5852133411729292817e230a23c877","sha1":"81062824c9b5f346e766030ad1fdf3fa1f40c6f5","sha256":"1b3c3f30c60b3ee65ebee4a971a51bc3f259f18f6d1f4523839ff3bb231af06f","sha512":"55d484564e86fff7b61b825e933705ecb40fa00e6cc90ed45da53b8341c916a81a3ae48d1e4568fb85d9f434c212cf405242c3d30cfbdcb14c871deced75e3eb","ssdeep":"","tlshash":"6611d4f3f298b627e29bc6f5de69b937102460ffc8858257d6449b4e50169cb2c1cee0","first_seen":"2025-11-13T20:36:08.123767Z","last_seen":"2026-10-08T16:09:03.679044Z","times_seen":15,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/X_logo_2023_svg_be90b4b865.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.836Z","timestamp":1791473432836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/X_logo_2023_svg_be90b4b865.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIgrHI9ToyZ54StfHvRjud0lnTu64dRv1n3EA0YAR9EBVHacB2sbHoP4WA95JJYUIu4rU%2FYNgjaW%2FogH5DbO%2Bg%2FKynjiezTr3DvRE8Fo4NXnQqvhfpfkf2yXDBzX%2FO8%3D\"}]}\r\ncf-ray: a4762ffb3c8056ca-OSL\r\ncontent-length: 5122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5122,"size_decoded":6993,"mime_type":"image/png","magic":"PNG image data, 260 x 235, 8-bit colormap, non-interlaced","md5":"d590684a305efcf79b6a3312b6572d24","sha1":"52c7d5d799e277c44e505c73b82259284a667b1a","sha256":"650a4fbc20e9060baed34a429e69fd60f43eb2207d5f6e7ca4c6a3c326925046","sha512":"d05a65155ddc732f6dc234eb96d93d31e15d63dd4254810f7988a565cf32aaca766b7bc4c7de2292f58d97d2beea30a8a5fd3cb5bb74521018699cd90a482a0c","ssdeep":"96:ANLABduc5U7WEuz5FYHNONHh37iTik6oeOS/K5M2BfBMPm9ch/7J939x:ANAduUUruFFYHUNHJ26oVSymgBMe9chL","tlshash":"a1b17ee9c5cf5cbcf07be77d0b6e240091a7254555251529c6a388a2d4e9e121af3368","first_seen":"2026-05-02T08:32:39.449429Z","last_seen":"2026-10-08T16:09:03.774438Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/modulor.341df8fe361c4ecc8549.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.331Z","timestamp":1791473432331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /modulor.341df8fe361c4ecc8549.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJsvgPWlIuDMtiamB6YofvNSGhuH09jYny%2F04l%2BlyDaRoyPJGha0CHEsz4Lfeg2AWIVuzrjdkYhVFuzN%2BkItsh0%2B4mM2Iqj5QvSMXWovIcQn6B%2FsVjIA0Nlq66WYz5w%3D\"}]}\r\ncf-ray: a4762ff81af656ca-OSL\r\ncontent-length: 22527\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":266712,"size_decoded":24446,"mime_type":"text/css","magic":"ASCII text, with very long lines (14480)","md5":"b99234eec4a8395efca4a4ff79334603","sha1":"fad656aa04cc393e345a6ca3e8f91a9c2a9a865d","sha256":"c3a0c90d9a095e6c511de7cdfe87335727fb1de5b5498eda3b8de6ef8ac99a52","sha512":"63e41804cb0b4b9474a2ef791c71b5a897480d0dfdfc8f1218af0e50ad8510db4693a05503c2bc7161127a60bfa1cfd753ee97d45fd74c613239fe0683cd514f","ssdeep":"1536:4ZHZSr+vBHpAptT7iusmtXmaKSr+vBHpOmSr+vBHp6GCBzzGEKk9xthPbbISr+vi:mkz97vvn3","tlshash":"df44ffacdae0bb29b51b55e5aacbd57d431c66e0ce012ba4e3f1dca603c3ed191e1530","first_seen":"2026-09-18T10:10:37.860714Z","last_seen":"2026-10-08T16:09:03.575505Z","times_seen":8,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/footer/assets/870.8472d4e50c8cce0932e3.css","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.361Z","timestamp":1791473432361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /footer/assets/870.8472d4e50c8cce0932e3.css HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag4vVvSIyP6k5ViX4b%2FoNU9lpRgyxq%2BwyqT2Xr0cxCXep1EZJlaYLpNxEfVQ5uFZTLA2eY6UA%2FdJ10JgBlYcM2UJ05jKNT0u%2FHmx%2Bgj1hxaxfb0Nn6k%2ByfLQzFsBymY%3D\"}]}\r\ncf-ray: a4762ff83b0456ca-OSL\r\ncontent-length: 523\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1442,"size_decoded":2442,"mime_type":"text/css","magic":"ASCII text, with very long lines (907)","md5":"6a60267cc2941f6dbc0db1e5148dcaa7","sha1":"ca20df6bc3d323ba4debb392fdc0295869a21c9c","sha256":"d7b5a36e1a8d1313b25c67ed6381d09c9f03b9d0f781d5696d41a6b5e92e9076","sha512":"a9ea233aaf0594be8cfd989533da8a64ce16a868c982ed7bd059ede252114d47812e5f2b2fd6b60e6fddd79ecdf5827b73e3a6ce34ebcbf17db953116acfae94","ssdeep":"","tlshash":"57219c3220b2760c1813fd652b5a53cd9176c42ade6663f86472d62583cb2db0da26cf","first_seen":"2025-11-13T20:36:08.187649Z","last_seen":"2026-10-08T16:09:03.650478Z","times_seen":12,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/ec4fef5d-1395-4dd4-a0fc-00bc9e392fcc","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.529Z","timestamp":1791473432529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/ec4fef5d-1395-4dd4-a0fc-00bc9e392fcc HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTEwtEm9T5RLEXSQqfOFkGBqn%2B%2BbuAUy8ke8RJrByMkS83gLm%2Fbj1%2FXaLpbC2PVR4wdYUZkvOy%2FRpdC3nQ3tytldO%2F0oGNpfX5uaVoG5N73m2PaZGbVCZY%2BWz%2Bk85Us%3D\"}]}\r\ncf-ray: a4762ff94b7856ca-OSL\r\ncontent-length: 1420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1420,"size_decoded":3222,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b277bb78bfcc1c9d138bf8bce6be4282","sha1":"132fef3a0ce8136fcc10c4bd66e52f936a2fe28a","sha256":"9fa59cb92472224f9db50353829b3ff48d4761730c86017dd0a8ba7111cb466e","sha512":"ecc9f8170ac376f92c255f10c9b0f87ec98efdc1a350a3f7f0986136b91d1a63d32faed078ffc68e14c9fce459220807ac63c504a2fae727e7fe0763885f160d","ssdeep":"","tlshash":"ac211b7f8667ccc1ada8dc1deba375f104b210b5b56349f42665c692601c5b4ce43427","first_seen":"2026-09-18T10:10:37.842771Z","last_seen":"2026-10-08T16:09:03.666463Z","times_seen":8,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/303f6605-d6ec-4b9b-9102-909000374cf4","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.578Z","timestamp":1791473432578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/303f6605-d6ec-4b9b-9102-909000374cf4 HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orHdeVwyOCKztgKTT9AGfBW%2FynjbWdMx%2BB5eoWfUJB%2B6YeJQXmIt9%2F%2FwUrYKratS1eetivu8UufELNKvNdvM%2Bp3OFxn%2BG4TmTfOrqOiZJFGqFgZ1seC%2BJmcu6%2BfdGXI%3D\"}]}\r\ncf-ray: a4762ff99b9c56ca-OSL\r\ncontent-length: 14028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14028,"size_decoded":15833,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 784x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37f99c1592b2a7201252f1d6bcc30a0e","sha1":"cf5fe6a40792cfe5a96b57ee53a67fa8ef8e8c08","sha256":"d655632aa4339d34988649fdf3d9fe58d7f1efc81d6521ffb5f981d92c23c259","sha512":"6b7c4bb8f172fca5ee6fecdc31b7d9d62df3567781487f66802c94154533b615a72b1887ba8ba68b60afad1eed7ee06c9bc9e2203d4c650da33e055a2a2543f3","ssdeep":"384:vsKBKe8+Etu4Hwk7t52vHohDm03H5o9QHoYwP+:EKBKe8ltxp7t52vohDrZo9QHoYwG","tlshash":"ae52e157953e9095028383d75c6a05e943b02924fa012ddb9f58cc3d98f2363d9af7d4","first_seen":"2026-09-18T10:10:37.769744Z","last_seen":"2026-10-08T16:09:03.566853Z","times_seen":8,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6d6e0ca4-0251-4310-82f9-cfd03718e53c","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.613Z","timestamp":1791473432613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /ubo/cdn-cgi/image/format=auto,width=32,height=32,dpr=1/ROCKET/PRJ4/98b0c34f-6f27-4b19-ba25-bae95eefede7/6d6e0ca4-0251-4310-82f9-cfd03718e53c HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:33 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SPHOvAHInLUeZ1XfLsnBdiC6rIE6aTBbhoQg2G6GRtfE5Wn8reyW9Kl%2FRrDuKqebvg02kBFxqMmcRwxlpzILNrBFXlweAG9d5MXFMRITrENZqRCAw4liTEhmxj4XsG4%3D\"}]}\r\ncf-ray: a4762ff9dbb456ca-OSL\r\ncontent-length: 868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":868,"size_decoded":2655,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3e0e6ad83592a4583bc4bed66bff593","sha1":"ee617369be9c4498c2e61c5ceca1cb9c52696f3e","sha256":"73fa0b3f51ec367dc495e7ade62cb12ae946ed61b0bb5894841fc2fd440af2f1","sha512":"2edd1b1ed9190346896db30f61cf03da7f88fbc64bcb751c69373df7cf427bc4f204d87b2431504d55fc6cb51ce6306b4ae924600aff43435f9e1ff7d0258dd9","ssdeep":"","tlshash":"9611638ccf975190ac09cc74a2292693b0ac5f5e6bd484500282da7cc11c4676878604","first_seen":"2026-09-18T10:10:37.935813Z","last_seen":"2026-10-08T16:09:03.646601Z","times_seen":8,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-sun-of-egypt-3.png","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.662Z","timestamp":1791473432662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /eva/cdn-cgi/image/format=auto,width=125,height=125,trim.width=700,trim.height=700,trim.left=150,trim.top=150,dpr=1/games/3oaks-sun-of-egypt-3.png HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nx-powered-by: PHP/8.3.35\r\ncache-control: public, max-age=86400\r\nvary: Accept\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\naccept-ranges: bytes\r\nlast-modified: Thu, 08 Oct 2026 15:04:08 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO%2F%2BnR6Qj2ZIj78NVCGwecZAQTLW9DDt2mvqiL%2B1AOhEOGuO%2BnN028uQC07aSZByZM3C%2BeLPoV32bVPRErZlTED8YN6i8WSFRk6sAH6wZM%2FS%2BI1OhRX1kOmj6vK4RIE%3D\"}]}\r\ncf-ray: a4762ffa2bde56ca-OSL\r\ncontent-length: 6162\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.3.35","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6162,"size_decoded":8037,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 125x125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c13ac801a3fa89f9fecdb6b97cf1590","sha1":"35e1d886c4f05af5ca6344647b9d78055fbd97d0","sha256":"152098768e0e2a7363559f5e64ec4c374fe921f8a30c484431ba5d8d37739036","sha512":"e69b9b672368c9267a93c36a58fe385185ed27c6b3b213b707c156351ecd96e1b26ab5eb7d1410f5fd8c34dca8cd1b09d8126c5836f0f78d43d69bb25be67c51","ssdeep":"96:0MOLPpYz7GXjFJ7bbUt1C+2ngaGKsyGwkJqNaXpHjXdOfHX3i1IZcs2Hn:4ezi/gaxgaGDgNMYHX3iSb2Hn","tlshash":"60d1ae75938251868379f3411f0b0dce2ceb4cf1f1a4de149a1da4e1a5a1eacbde4b36","first_seen":"2026-09-18T10:10:37.771074Z","last_seen":"2026-10-08T16:09:03.655854Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/59555-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.773Z","timestamp":1791473432773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/59555-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dpl4XIVqZ9QDGMjhxO5BicEoFcQNDdZnvrOlvYTko9NSpHxq0eE3bXUjqXnFUONfaU1rqfgxaZLaWQ%2B8xcopPonzU2o6ARHzEXbd%2F4zYth%2FlUE6y5TuSeHXgME1pKTk%3D\"}]}\r\ncf-ray: a4762ffadc4956ca-OSL\r\ncontent-length: 11530\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11530,"size_decoded":13287,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542f10427888be99b7dbdf016215c1dc","sha1":"5bdc572e639595de50ceafa60444e309b1a490c9","sha256":"792642ce1691834b6b3e6289bde7c5346142e5a7ea5ecb214f986fa4cce1971a","sha512":"4cceee3265f22ca9d10342fe2a4d3123bd24275a03bc1837758abe992ed7ae4ebb0f35ef3925ea5b5947073467e6c95125795da4c79a3c3fc1dc61e5bb3d18e0","ssdeep":"192:bbAXpYt/98am5xSVPOjbIzw0zvLttxaMDNuk0E+HbeWSTIZwlp2n8CBt8:bvUHEOj0zw0zvLttoiNuLb8bSZ78","tlshash":"4a32bf955ecae30a4e5737c35557c879438b30a62300962e622a7ae3271589337fdfc8","first_seen":"2026-09-18T10:10:37.859049Z","last_seen":"2026-10-08T16:09:03.670048Z","times_seen":8,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/taxonomyicons/competitors/319764-164w","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.820Z","timestamp":1791473432820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /taxonomyicons/competitors/319764-164w HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 13:04:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kunzuyKIrR0cG4YAwQDsvyAo4sOKxublfUZoReR6K4JofSa0AmD8IeQsibBH6BF399JqivNf5VVIiaHMqiR3j31EDiTB8zNiPCQ9ZE5Uf2TPvsEJoT6IsM5wFuTDoM%3D\"}]}\r\ncf-ray: a4762ffb1c7556ca-OSL\r\ncontent-length: 9882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9882,"size_decoded":11632,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5893c5fe018ba48e3b57588e4288c74","sha1":"82525651ba41b9a2a0e6e298bb1451235f9e400b","sha256":"d8a50922fa4ee3cebc54fd316b07c12ba5717af4eef672e38ad6faff3866bc54","sha512":"6ee044db92ece3ce89e9e19f25ed9f24d0afb9e86b461a16f3318b1660064d301f727217b62418aa1231d511109bb9c3f780f4789e37965094f9bc4b3e4a500f","ssdeep":"192:iy3cHrQHC87m6xCvaeDtahse34kifFlo5f2ZDtUdivllx2boUOr3X:F3cQCniCva4e0k54tEClL2b+r3X","tlshash":"1e12cff14211ecd3202df4dc988c50d5b850f454af258abd42a6ee8d70fa8db20bf499","first_seen":"2026-05-02T01:58:44.673246Z","last_seen":"2026-10-08T16:09:03.584269Z","times_seen":9,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pari24.co.ua/content/uploads/icons/PRJ4/prj_footer_instagram.svg","fqdn":"pari24.co.ua","domain":"pari24.co.ua","tld":"co.ua"},"ip":{"addr":"104.21.90.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pari24.co.ua/","date":"2026-10-08T15:30:32.829Z","timestamp":1791473432829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pari24.co.ua","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 10:00:29 GMT","end":"Thu, 17 Dec 2026 10:00:28 GMT"},"fingerprint":{"sha1":"F9:FA:18:4F:16:87:2E:3E:2D:BF:6B:D7:14:55:6D:58:B4:FC:C7:A3","sha256":"E5:25:D0:F9:88:26:39:33:96:69:BF:09:CB:86:12:C1:8F:19:51:20:62:EA:4E:47:3C:3A:06:06:31:C8:6A:7E"}}},"request":{"raw":"GET /content/uploads/icons/PRJ4/prj_footer_instagram.svg HTTP/1.1\r\nHost: pari24.co.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://pari24.co.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 15:30:32 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 15:04:07 GMT\r\nlast-modified: Tue, 26 May 2026 13:04:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1584\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLtpBgwdoSOE0SLhz5zUTyxTsT3f9iDs34KDgfiixlihw6Rbvukj5yeHP2I6b2qL%2BU%2F4SAquhufgAOn76834ll8Fb2EBioIs7AScakKlw%2B%2FWRWytgacxIJwGhdQPq0Q%3D\"}]}\r\ncf-ray: a4762ffb2c7c56ca-OSL\r\ncontent-length: 1001\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2438,"size_decoded":2919,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"693dd7344c206fd4526e622ba1c37db7","sha1":"a0a7f37b9ceae1505707aca61faa1c15b324354d","sha256":"3408902c6a0ebd9906022d291b0d13ec1e1a417ee4ba499dd4e3e409adc00edc","sha512":"4568471113212f6aa76d303055d533e27fad1bf4bce791c03aad187e7cef47b5c7e6285bb465ebd35475aeda6e4fc138ff3903c2cf40dcde777b321889702778","ssdeep":"","tlshash":"724132da5724129dc0cb953fef3dadb2131ca1ba3ae5c60d59be472d44034d2ae5b580","first_seen":"2025-11-13T20:36:08.104105Z","last_seen":"2026-10-08T16:09:03.786562Z","times_seen":15,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"pari24.co.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}