{"report_id":"915ea4c7-f61f-4edd-8391-ee10f5c3d628","version":0,"status":"done","tags":[],"date":"2026-09-08T20:25:19Z","url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"104.21.25.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"title":"Покерматч Казино - Офіційний сайт PokerMatch Casino","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-08T22:47:46.014141Z","times_seen":18354170,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"104.21.25.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T20:25:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-09-07T11:58:53.440636Z","alert_count":0,"request_count":7,"received_data":10405,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aris.org.ua","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-03-27","domain_rank":0,"first_seen":"2026-08-05T22:39:00.352733Z","last_seen":"2026-09-08T19:49:29.537016Z","alert_count":63,"request_count":21,"received_data":1580779,"sent_data":10717,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":4,"received_data":126316,"sent_data":2264,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":98244,"sent_data":1247,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-08T22:45:36.559435Z","times_seen":961256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-08T22:47:46.050354Z","times_seen":754162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/includes/common/js/np-scripts.js?ver=1788329607","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"036f3e7f6029ff3cd286443435da5f23","sha1":"2e0000ed5ecd712f2041421be740f6a9ba3e80c5","sha256":"f279225a89838686761ad4f3973638ab4fbb9adc0f2b74da5f091ab6e46de3be","sha512":"394251c6ffbb77923dae461fa29f1f1e292a48f08b6865b931ed13514c615cc4c66276012033cb64105a8af3962bb6f936383032cb303763e3b6e826c045a7c4","ssdeep":"","tlshash":"6e11bd6cd0be659410f730f50f5f6184bd2920837211d9e4b90def402f2a909c22f9ad","size":960,"data":"","first_seen":"2026-07-18T17:22:50.161311Z","last_seen":"2026-09-08T20:25:22.603059Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f5a23d933311312f6c3194e0481bb47","sha1":"39a21271849e0e65fb97705b7c47c89af3534468","sha256":"19b42b9bcae56ca158f24bfba6e7af01b9bfabae9079bbd13634b29fee15901e","sha512":"57cb02cdf7a32e3ff905ab10638850d92e6ce6a7bff72bd19137d9e65474afde9a7c8f6dd1baac4b45b455ddf10cfdbecf32475efbec38dbd1f5b7c3ea567adf","ssdeep":"","tlshash":"2bd02e2648e3143817aa010bb630829b28a0082a260be0223cdcde1e0f40e5348f49ac","size":282,"data":"","first_seen":"2023-11-21T08:24:41Z","last_seen":"2026-09-08T20:25:22.608003Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bed45ed2e4dc58c985abfcecca106aa4","sha1":"3c8ad8ea4c12066e01ece15afe3a51946ccccd7f","sha256":"108a4bff773891d1ce867407468f71ed21b0ed4a64ef0a4ed53f40f0d244413d","sha512":"c004fe531e0feda8c3fca0b2de793acc0b0d0c40dbdd8f3be64b7b3f7363256d9d2795a81fc06338d7003e83688b0057a51be35fd0688cf80218e652d8e44456","ssdeep":"","tlshash":"24c09bf7dc7f5178b2d45be1457d1fd6956c28185591d620724dd1440f60b450f044d9","size":134,"data":"","first_seen":"2026-09-08T19:49:31.203063Z","last_seen":"2026-09-08T20:25:22.608667Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b2ad90c3736f12555ff10536a41345b","sha1":"76632c58977aaaf7405f2793b93531b8f99956b5","sha256":"5761a99ed6a9da33dc5c3900b9333e6819dcd8895e8ffd5cfcbac49d4caaab2a","sha512":"985c707ce55a25fb382d456271134ae5ef7dedeb51c41f1d4ea9ed646c579f91faa1208468a3e955cf1bd993503d1b19d3bb1f27e082511ad9c33408be21af82","ssdeep":"","tlshash":"bf9002574436607457836344641b781cd245242c4641451591709304c4d88119904226","size":53,"data":"","first_seen":"2026-09-08T19:49:31.204921Z","last_seen":"2026-09-08T20:25:22.610265Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T22:47:04.458361Z","times_seen":51625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-08T22:45:36.608157Z","times_seen":1050751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/assets/js/nicepage.js?ver=8.6.0","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34fb45d47dc7a67e56ee65e9f2781b0b","sha1":"13cb4454e4e1067da5ff9aa67d883ac408259d63","sha256":"43dad18b1813edf5f87714910682ba7944a16c46bf7a6f48a89c59ef5cc7e5a6","sha512":"c38b63dde46d9086bcbc58af5d0a1b8e4e36ed2130cb482e8dd70360d6f14640f8cfdfd7fc8b90eb2da4a4def700b1d2431113a793e7c2a59d780acd4b5826fc","ssdeep":"6144:yLBgzotkl33+6xEuEiNRltRu254ZAb4hYRVCNCUoh7+GPmj+eYw3W2284TFDXq:oKHslittIN6w3W2286s","tlshash":"73941988f26474b903a721b6405f160ab23a7c79940a4468f56de8e53e7cd5e233bf3d","size":446565,"data":"","first_seen":"2026-07-18T17:22:50.198059Z","last_seen":"2026-09-08T20:25:22.580598Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/wp-emoji-loader.min.js","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26e3702780f1e2a957cfa22d1190d54","sha1":"f68544b6e551f3a352aad05665fd2e11ecc2d50c","sha256":"c4d63ac7d9f12010fe90c49f4513adfd260fd3f3c49a6d3a7e6393afe10bff06","sha512":"4dccd35092eeed368ababeb424ad397b11e4209c4105787e0d615b883dd499650c2de9189ce8d26895286e036e3e2f72a3e7fc71bb562d74dff6e78d1eb30523","ssdeep":"96:YrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJ2:ss7NAME0+eWjQvJBd","tlshash":"5af18559eb7938db33fa01f2653a4d4beb614436e784d038c9ae631428b1893c375a5a","size":7737,"data":"","first_seen":"2026-09-08T19:49:31.207444Z","last_seen":"2026-09-08T20:25:22.611623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://aris.org.ua/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f381.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.987Z","timestamp":1788899081987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f381.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:29 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":656,"size_decoded":854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a7ff35f227d659eb5efd817e2052174","sha1":"667a23edc0b4c2930babfb9f449c0ca0f726140d","sha256":"05a6562177e8e5f89852e08f7bbd6b62597b35d70c92238fcab4d6674ec76048","sha512":"14b068f5557cd0833cb64807f8da41afa99fb613f94af63bd940c71ef3899e2968b88b481138c60c773e572116a1b8f4ec8826d334fa31d36d4bac4bdd4441fa","ssdeep":"","tlshash":"a1f099d8d0b03412484b47d92e9fb1c31781503980f90684b20d6630ee8f7de7885e48","first_seen":"2023-05-15T11:54:26Z","last_seen":"2026-09-08T20:25:22.575692Z","times_seen":6309,"resource_available":false,"data":null}},"time_used":3571,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":8,"receive":0,"ssl":3552},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4b3.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.988Z","timestamp":1788899081988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4b3.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1017,"size_decoded":1068,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae85f3ba482693c99192d68b402b691c","sha1":"00afcdef98f55954ad726f0753bf2ce0f701cab6","sha256":"369a2f73463f01b0cd5c8329a356b9108d8adf8f85b43d3446a69184853d6dc5","sha512":"55e965b31c8390d99f2504a96ca98d1f8206c67e75fc1092a3e50eca43f6ae3c57fe3dddc4c3123eeb578b9115f1331758783f268e2c112faed7fc17f655c47e","ssdeep":"","tlshash":"f21132ca2370f7c4cc8bc68d2f6ee9d94201a0ae20b940d6690e671c229becd3d08d44","first_seen":"2023-06-17T17:15:03Z","last_seen":"2026-09-08T20:25:22.577232Z","times_seen":2036,"resource_available":false,"data":null}},"time_used":3260,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":8,"receive":0,"ssl":3241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f388.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.990Z","timestamp":1788899081990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f388.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":698,"size_decoded":911,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6298512f50632252a23cc264ec73f29","sha1":"c77e96252e97f2fa5ec04bf28a241da919412a17","sha256":"57ccb51903834dfeedd2809b2ae4775eb0751945d3f75ab2e5942b5c25b2aa27","sha512":"04aab06acc8953e13e6e84d74236e043bbf10a74d825e27d281f5f75fcf5c30d6307a806f1b77e08925a941cb6b60848f33caf59f03d0f4fb06a4592785b3bd2","ssdeep":"","tlshash":"120115d5522c76489c8ad7d2afadfdd647c670f494d601cd608dc10811ce78fec72810","first_seen":"2025-01-01T06:24:03.012533Z","last_seen":"2026-09-08T20:25:22.57881Z","times_seen":184,"resource_available":false,"data":null}},"time_used":3256,"timings":{"blocked":3247,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/assets/js/nicepage.js?ver=8.6.0","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.626Z","timestamp":1788899080626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/plugins/nicepage/assets/js/nicepage.js?ver=8.6.0 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 129845\r\nlast-modified: Sun, 19 Jul 2026 14:48:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ds%2FUfPKkelRsKI7Ysapzy6nb2%2BFw64yRC2HtUK1PwFzUo2VbFcY86CnmbXnUgbe%2FX2VY2W4fJ24huJ%2B%2BnnVyiXgvORxVCF8NFHKtX5lQOMXLDoIZBUeiAi4VgA5JuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95ea1b7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":446565,"size_decoded":130599,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38661)","md5":"34fb45d47dc7a67e56ee65e9f2781b0b","sha1":"13cb4454e4e1067da5ff9aa67d883ac408259d63","sha256":"43dad18b1813edf5f87714910682ba7944a16c46bf7a6f48a89c59ef5cc7e5a6","sha512":"c38b63dde46d9086bcbc58af5d0a1b8e4e36ed2130cb482e8dd70360d6f14640f8cfdfd7fc8b90eb2da4a4def700b1d2431113a793e7c2a59d780acd4b5826fc","ssdeep":"6144:yLBgzotkl33+6xEuEiNRltRu254ZAb4hYRVCNCUoh7+GPmj+eYw3W2284TFDXq:oKHslittIN6w3W2286s","tlshash":"73941988f26474b903a721b6405f160ab23a7c79940a4468f56de8e53e7cd5e233bf3d","first_seen":"2026-07-18T17:22:50.198059Z","last_seen":"2026-09-08T20:25:22.580598Z","times_seen":5,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/11.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.653Z","timestamp":1788899080653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/11.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8902\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DzfwKZuAvwWRNJXsuwusbwBXTQs5R6%2FQ4pkwcyd514o0KZhJZ71E6nXQDvm545%2FoYByh79sYh6jNLXSgSyFTnZx0LQteIoGTPJXZNKA3HoH4GKPKrsKqK3dG4EI%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a597127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8902,"size_decoded":9646,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"5ab7316b6e6fbe39213b82ec1135ee40","sha1":"3c889f6f44aa873ae002fb7945b86bbb067e11ae","sha256":"8c56f04fd31f78ffa2baf0670e3441f7b98d56c63a5de8c3c39c8cb1d4fb1b81","sha512":"c0b773243b91ff9ef99112c5744d202bf2f93bbbad4f9b2a84047e7b1aeadd60f96af2a1751f2c4a79e28285b8db12b339b0a6325b8e5dea8089cbd6465476c5","ssdeep":"192:FcLt+ySz8ksXJUXwnHlTTe0rojSKvqTMNVe/aqsCa3:FXFziJUX6TTlrojSKyoN+aqsCY","tlshash":"d902bf253b0340b4f85f7dba01c00f24fb596c4fe1ec534ad2935a8c5b92e2ea67e1a1","first_seen":"2026-09-08T19:49:31.184016Z","last_seen":"2026-09-08T20:25:22.582367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/32.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.657Z","timestamp":1788899080657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/32.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8994\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgkIGo0R1SK3K3YU80D0wQrTlBJ9P6RT2Al1%2Bbr6kvkipq1L4lxXxR3YQ2sosxb0NYCKDXm%2BaJ2HWnA1Xckn6%2BGVce0WOh7EpxPs3biIfulAJLGGz4awDhKFYeFW%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a677127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8994,"size_decoded":9740,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"91df28af48a7a014e71ba5ae51ce1f71","sha1":"742a5e4114f62cb9ef9a8c7fca43638a6330a209","sha256":"9bb13bfca3f7eb192e393dca781a6f70d7211b6d38baa8c696cebfde06198573","sha512":"667c1260b389f3d2b27b939c0f05739ddcc9dd39ab4e882e2dc95bb082fc2011b5f52c2e8535097f92732df2fd67f99397890016f979c78f5acefad2ee37de4f","ssdeep":"192:uR2xIhk10b2PGvRpl9R2ta/bILHd0bDKhMStwbNHyQ2tMyCCm:C22D2PMRpXwHdwDKCSt0HypLjm","tlshash":"3902bfac88703014f42fa4b5ab0ec2ed632009c9d7f31b75eaa58921d36f5ca26f4359","first_seen":"2026-02-08T05:31:55.560318Z","last_seen":"2026-09-08T20:25:22.584602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.455Z","timestamp":1788899081455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aris.org.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 18:08:20 GMT\r\nexpires: Sat, 04 Sep 2027 18:08:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353781\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-08T22:35:57.997005Z","times_seen":559054,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/assets/css/nicepage.css?ver=8.6.0","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.620Z","timestamp":1788899080620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/plugins/nicepage/assets/css/nicepage.css?ver=8.6.0 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 50624\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sun, 19 Jul 2026 14:48:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8HV%2Bjo4COTyU%2FjyRorireMCT0IAdAxQEg1K1pxL3sff9zYCgcWcExVDt7YykZ%2FX%2F0luJ2b53WyixN1NhyGhCSgPn00cXLYuAgn1phZAL0biGA%2BusEKMHsqGP2fVKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95da0b7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":448963,"size_decoded":51419,"mime_type":"text/css","magic":"ASCII text","md5":"63fc1370e7bc9accc628bc3d4976f399","sha1":"64837414c52f7b4d2797e9a6962b569cf3148d54","sha256":"923525e4a1aa4845ba340ad8237284568bfc690ba8dc1d48c599280ae6eac86b","sha512":"a76739bbf73f6d858310712578f09748f9c547ff0e5ec49965971380a3a7de16e5be632323e8d447fdb0de66da4aeced2cbdc0a0b9fd0efc33898179d9dd84cf","ssdeep":"12288:s5NgagN4k4Q6mNPWCRzigtgHc58XIFYv8JsfgHes+iTH87ns8aDRRI52HVI2UKLA:pPRzigtgHc58XIFYv8JsfgHesrI52HVc","tlshash":"cba463936eb00e04e1329486a08ee56b775d54439a1eec69b2e5204d6fcc6ef8173fcd","first_seen":"2026-07-18T17:22:50.196863Z","last_seen":"2026-09-08T20:25:22.588103Z","times_seen":8,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.623Z","timestamp":1788899080623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUhrXOB%2BxMhpbLClmtfPp6%2B8aEqvHT%2B3A6W9WFsGRfcOlx6mDwQw9h2dH2P5%2FqoTDJjLCtLjJzLOhgwgMJ9%2FgxZGQMbcKCSvKgRVDzkrFzV1F4pWu5bgJVBUTgY1iw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95ea127127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":30497,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-08T22:45:36.608157Z","times_seen":1050751,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.624Z","timestamp":1788899080624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ff3nRMHuswlv3iZn45cPCHWfuktxRqWn0LJtViJwAkE1wHtyjRYQEols9Y8U31qChjF%2FxUUDqbK%2FV3sfkYVdaaqUktZ9VeN1oOvxoXr4mJEAOxrughXkjUtEzJ53zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95ea177127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5426,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-08T22:45:36.559435Z","times_seen":961256,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.634Z","timestamp":1788899080634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 20:24:40 GMT\r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32832,"size_decoded":1779,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd2a357a0584de6104bb44722d6c259","sha1":"6e07ca403758ea6f34632f02f5634f397acbeb30","sha256":"af5abb977620003efaf1e16e703472ff6c962064cede280b86c51495c9243f75","sha512":"fcb293b5b9152cf851571050b7b7abf6688a3a438684f6e106321d9b447341f3f76863487359dd4df88ca5e39ab662b12200b319175ecc50bc2a7b74e4e812c0","ssdeep":"384:A3Mw3hF363636xwSFXLTew3FsccLwgFx9dwwVFGGeFwmFjHnCw7FYIw/wkF9pR0P:0//aaz/QMib","tlshash":"ace2ac51101ae500a7432cca23cf7d26ce4e62667494c476bbfe2ca8bde5c361361b7d","first_seen":"2025-09-05T03:00:03.793695Z","last_seen":"2026-09-08T20:25:22.591062Z","times_seen":6281,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/47.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.652Z","timestamp":1788899080652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/47.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8053\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPEcHHZkF%2F2CMQ3WA0QEOV0L4XE0Ep%2FHgjH4j5ke5rSMzbiheE8Lk10dLfBDgRetTM69HQG5bTBWFwa7YSXDkZi7SOvAL9Te7vwUAibUfqDNU5ca%2FXTRqQwE73YQ8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a587127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8053,"size_decoded":8797,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"dcb66711416d92b683e41ed23b1ea41b","sha1":"892963fc9fe679320e79712d3e970209dd5da524","sha256":"fc761e144fb5454aa34a94ce210e4656e1ae49305dcfd0967ef62c2ddf62188b","sha512":"de5e69fa76d27da27dd88f22b3f1cb39ef17950475a15f4ccd4322d6ff0f59f2a7b66f2a39377d77b39fc5c57f7c56ef1a0cfc08147d311986b7b32b18e9bce7","ssdeep":"192:K41fOlk67AB/UImR5mSY25dJTZcQxNTDTtSMl+U:KSf4RMB/UIsQoTcQx5D1wU","tlshash":"2ff18efd6e8e3e1bee3d1e3e1048d15916c6c9be526003767940b8f29b948fb2949813","first_seen":"2026-05-30T21:40:23.29811Z","last_seen":"2026-09-08T20:25:22.591683Z","times_seen":3,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/18.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.659Z","timestamp":1788899080659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/18.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9734\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMeAEgYQpbNxZ4S2xKEC0XIYUmosZW0IpVE292mcG5AoBrZheHT9xS1FWZyXe3wkMU%2Fjqku5mRwQ4WQrVAwXbl4pTm3pAuY6VxtY%2FsiheM%2FvT9WSfxT1d%2BgaQM1ecg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a6e7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9734,"size_decoded":10482,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"cb33291e2bdc549dfbdaa5d9359cabc5","sha1":"a71b890b4017217b632faaaec72cdd493c44074b","sha256":"e1c82898cba0d2bf7fdb6d7bb57468edf2f319954bb071c592def98489a443cd","sha512":"f512a4cc6278ea42689d8e8996ebc195c57d454986871753b642c8848cfb5170fd09d47d02caf4a7c0845ef2b15bfc25dcc22967161669e416177dfbfb15c073","ssdeep":"192:clZdIi/CGaPhqaGRBNwWZePuBU4pM92UqTZdvls6Sill6f/:GPIXha7TZFppMnqTZdNs6XlQf/","tlshash":"bf12af4d9e029886d63ceabcf175343b8adeed126c4c71c58493591dcf19cc32a1e2aa","first_seen":"2026-09-08T19:49:31.198902Z","last_seen":"2026-09-08T20:25:22.592373Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3b0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.985Z","timestamp":1788899081985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3b0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1940,"size_decoded":1109,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd75504bd8a4810f750bdb5a94ade84c","sha1":"99abb72f7640bc3b40ea1c05aaed6ec5f94622c5","sha256":"87eea51e11f1301207f08c548815bf770dfdf6f48ab6177095d2a4c2a74fb4b7","sha512":"7679cd230a692a0f8310ac590d1f9d00e971133fa36c9759f425f5c0b8beda5949211107cafbf2c9ddf74a943a86324044e8e6bd5ca2489da3148215e10fb57d","ssdeep":"","tlshash":"2341e1cc917177cc9950faac7fbda1c1065b87d81334d1847369ef28448f9d13a62848","first_seen":"2024-06-08T08:01:12Z","last_seen":"2026-09-08T20:25:22.593489Z","times_seen":1158,"resource_available":false,"data":null}},"time_used":3554,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T20:24:40.140Z","timestamp":1788899080140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.33\r\nx-pingback: https://aris.org.ua/xmlrpc.php\r\nlink: \u003chttps://aris.org.ua/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://aris.org.ua/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://aris.org.ua/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\npriority: u=0,i\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zdam2fQGh0h6c1g5ZbGd7gPgTG7tdVM5O%2BjhzLmJz9xp2Z82qhYwbYY5X8v9Yw2PDF87aiTZ1RZwm5RMWaWD%2BH1i9MVbb8oz4nbLBa%2F4Tonl1bV4QVZk5JrCuQQPoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a380ad933eb17127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":225210,"size_decoded":28079,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20522)","md5":"38aa5ab1e8448688f8ba91ff1061e8e9","sha1":"8932e18a1876884793189671e698bb54647bc40d","sha256":"be9d9a7e7901c32eaa589aaa09bdd7bafa8fb2367d85788309ee2fd0286c7cf5","sha512":"eaf7c67bca1d53e10a7dc86e866b8d1c91b6942661cbbccd672042da8c9f268914064766ed51d7bb04922fb1aaa46a312b04e68bba7b62e6d3a8ff0e9d231f13","ssdeep":"1536:TgypQSjMs9chVf7Buu3Rt6NSVEUVUFi36bq7kYME1zF/g1UEhG0mYqb+RR:TheSjMs9chVf7Buu3Rt6NSFzz+/","tlshash":"99247953f164123b22831abd524fe1b17b16bacac7017be4737f80681bc998f952e54e","first_seen":"2026-09-08T20:25:22.594174Z","last_seen":"2026-09-08T20:25:22.594174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":42,"connect":14,"send":0,"wait":208,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/assets/css/media.css?ver=8.6.0","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.621Z","timestamp":1788899080621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/plugins/nicepage/assets/css/media.css?ver=8.6.0 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 6646\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sun, 19 Jul 2026 14:48:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73LCORfnL5FEDBDtXbtN8Va1XUZSrnygmWog%2FaIjOwReglDPOqNnTVlTYdNFywb5XozdMLOlGRGI1am8%2BjB1VqlLw7xWH%2Fq6cgpzCCv65uMa3CdqYjeAJ1ARhr4t%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95da0f7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":123248,"size_decoded":7438,"mime_type":"text/css","magic":"ASCII text","md5":"509fb7c6a2ec26e864a1be8dea7512a5","sha1":"0f0887189562b80b5e911c944ed8c713132ba101","sha256":"77ce8c7bcb62ef47fa440bbc38341765ad85e89dcd668f9c8e28f891dc351080","sha512":"38270de1f4466e7bee97007216b61365ec9618728bf8bf680a3184f5b0960eedc239608218f895a43b7cde514c4ec9d4344496b294ce0d1532afa233e1a98c38","ssdeep":"768:lkFKPiVJs/r5cPf8NirxEnPvUCQyacbh9Ni43dpJe1KcOMVUDZl1yeyihdnZ3xDx:LHYi6X5xjr5BoDvayJf","tlshash":"f7c37b0b70a2010c716236beb1ed325e338d945bfb9edc5574865812ef99653cca3acb","first_seen":"2026-07-18T17:22:50.143624Z","last_seen":"2026-09-08T20:25:22.595353Z","times_seen":8,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.458Z","timestamp":1788899081458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aris.org.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:39:38 GMT\r\nexpires: Thu, 02 Sep 2027 10:39:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553503\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-09-08T20:37:00.264856Z","times_seen":12433,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3c0.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.983Z","timestamp":1788899081983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3c0.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":617,"size_decoded":902,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45c074e64c49165be59a19ec38f40ae8","sha1":"0af3e2ec86c453e69cb16f8bf4fc4ce809554be7","sha256":"956533d7bc8de6d0203726dce0bacf79ab40d1818f36fa82b2e3068dfeb48897","sha512":"df6f9d415edd7af069be509814dd7799b6353b6e8bb036771e48d7392a23273e76b7a5419e76ea5185e6c92b8af45f0956396e641285d777f04c8dddd54d0915","ssdeep":"","tlshash":"4cf07d8a2f75b0c95c844e7cfb3ae5acd20b703e465e034152a8ca087aab962e84dd54","first_seen":"2023-11-20T22:22:05Z","last_seen":"2026-09-08T20:25:22.596437Z","times_seen":342,"resource_available":false,"data":null}},"time_used":6974,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6952},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7CRaleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.636Z","timestamp":1788899080636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Montserrat:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7CRaleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 08 Sep 2026 20:24:40 GMT\r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64044,"size_decoded":2336,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e1ea073559e86a25b5c529483607a63","sha1":"a58ebd0295f1fd9998809fd2a792265d71ef2d5a","sha256":"48049f1c620f1cd2b02d633b024d3c8aaebec43a603e3f74570a5805951cd26d","sha512":"f71c1a0041094f7808414143104362f825fbf5d43c19987bcd174dd6b89f68849cc771b1c3f795cc08c05185972a7fbe8d9d22880648d9469899e40b97643b4e","ssdeep":"384:A3Mw3hF363636xwSFXLTew3FsccLwgFx9dwwVFGGeFwmFjHnCw7FYIw/wkF9pR0e:0//aaz/QMiogYTgg2yr/F","tlshash":"7653ce91051be500ab432dca63cf3e36de4e62657085c536abfd6ca8bde6c36136072d","first_seen":"2025-09-26T18:01:03.086135Z","last_seen":"2026-09-08T20:25:22.596992Z","times_seen":139,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":38,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/48.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.654Z","timestamp":1788899080654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/48.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9484\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRS%2FefwUd54OgH0njHlhDGJ6jH%2FH%2BIZrl24XM2E8SP1dDwT4BJBwtFHJYFV7o4R0Pg2w3cSOwiiE9QrPM1qgqsSlpYKvnAYA0A7jRuCnUGgb0JrV7f6hwiHrrWTF%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a5f7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9484,"size_decoded":10230,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"a1b9d94dc43fcdea4991526e4e4affd7","sha1":"9929f764a76b2662b968848862676ef3ca994b5f","sha256":"060ecec2dfb085a07062d4a71e414e9ed8fa7ec0b09120bf7c2c070ec08e39d2","sha512":"92b7fd8d62ec72ccd5fc8c280cfe1abc6455e836375c6236b983a973a514bf1e86499e130fdd51f96483f08141167823632875f01e8a497516af8f2f17644cfd","ssdeep":"192:4WFo6ZFXXBamsdO6D6wt8H/HFbMdZgiaTy0B4N+G3Z8UbwOnGVdiu5+rvl:JZhanCI8f16ZgigdB4NSUbwcGVZ4vl","tlshash":"2d12af4edea64a20f73c6a34107f7690f85e7113c2b1e32fb9a950427b9a0c50fc286c","first_seen":"2026-09-08T19:49:31.148459Z","last_seen":"2026-09-08T20:25:22.597514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/33.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.656Z","timestamp":1788899080656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/33.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9802\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgqvslVOonVX2VEiix6612qP9iMclSL3ADIaofTtdN2j7qIf8UHb01HmWJgkSxNu888Gfn7pTV%2FiD8Ttkd0u7sffP439biGP6OrmvRZ8x5xf131tFsiYrIAIVXgFuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a667127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9802,"size_decoded":10542,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"25721ad35730eb8431e24b38b9acf60c","sha1":"aca2ef7a89f920ec63a33c1fd056b3bb272025b8","sha256":"11a948fd06057143629042a48d32b660a61cde84010e0da96f3855707f42a582","sha512":"2dfcdf9904dc22b7ab51013c1620ba787b07630c7d76e6050a1d2b9e99f1860e8e7263b2182fd985334334175507b8eb989a784e7f65ecabe6128dbe5fdd2c25","ssdeep":"192:ke9rZFolQEMUW3tRSNQrrs0DCT/Q3iHRl0YnHRzBdfTO5FRCAor:kSFolQm4tRSNQrfCT/dHz0YnHRzrgor","tlshash":"0d12af4777a194f6f4bcde7c474dc66af32df0e41021b8007222078a27715ea78597e2","first_seen":"2026-02-08T05:31:55.610279Z","last_seen":"2026-09-08T20:25:22.598476Z","times_seen":4,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2025/10/cropped-parik-24-fav-3-192x192.png","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.973Z","timestamp":1788899081973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-parik-24-fav-3-192x192.png HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 15401\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:42 GMT\r\nlast-modified: Fri, 17 Oct 2025 07:28:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq9ekZzldrgAskjuPOleepowIBuC8x%2BNKuTkJohIqHdkTX4RHMGN0m%2BOXXkOyr0QGtVrpx9%2BxpeKhqYCmRDYENyK6IcsnCG%2BU65vP9Z3oMat4TUkls5t%2BGknM7Ruog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a380ad9e5c977127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15401,"size_decoded":16154,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"74097b7686ab68453ad4e748e794f1e7","sha1":"5b879db3d13104d39bf6304b797880a4f9bfe2e8","sha256":"6e769bb5ece61cf23ad36b514a27aad650efaf64b92a6437eb51e5ca8aae89cd","sha512":"6541bbade05bb841f549c499999bcd8419543ac871e70d3aecff5daead8678ca7b5c1b7332640a33ba04551aed11abf8e5cda1f769ed87024467987e8bb5fcdf","ssdeep":"384:BsIljeDFHQ51UZD5aOL7v9P7kCSLgJVWuDF/43zC:nheDqADk+j9Pme/4jC","tlshash":"de62c00c68da625526fd72a703b3270519a4984b4afdc20aa73d2f16bd307a635d2f24","first_seen":"2026-05-30T21:40:23.322422Z","last_seen":"2026-09-08T20:25:22.599022Z","times_seen":3,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f0cf.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.986Z","timestamp":1788899081986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f0cf.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:29 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":1231,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"080ef5f5f55bdf671af4e31d41b893d3","sha1":"848f060d2e4e8b2a334e6e77665b5145be6d69f6","sha256":"2b2eeae08130b9acd1b981a984e9590aefc73f8aa589fc1a4ad1ba1d6c3bd541","sha512":"91556b6b15f3eb8c8ebd67fa43261071b2e8c87ebba522ff52b3a6941cd87c35739818dd5e11de76bc634927f42f9b578fa5a87f870d9efd03e35eb4f44b13ce","ssdeep":"","tlshash":"2b31bcc9a67cf0c54d4395e45f4fb1d1360f233627190788f05eeb58ea896df7641a24","first_seen":"2024-08-19T20:30:50.127902Z","last_seen":"2026-09-08T20:25:22.599902Z","times_seen":313,"resource_available":false,"data":null}},"time_used":3284,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/1.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.658Z","timestamp":1788899080658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/1.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7385\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BjNWOZwjgpuQCgR1Lc8KXKDVVgu%2FrweHTfwrXjcVpGVtwyQ%2FDy6vk6aI1gHHB2JKO8z4wSomDBL5mXbYvVVm6AhxsvAOw0zCQs598u5ENuojtKKUgywdm3leuYbzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a6a7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7385,"size_decoded":8127,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"99c36797d683a43afb294a9328f37fb9","sha1":"ed2c2d429a1db1a359d0e94495b5edda04d0562a","sha256":"900912e50deffc0d8a6fd74de97547fca9673df63712b95ef567a01ae3ee4667","sha512":"ec644aeee739e876ec84ff8ee83d41d6507df96ccd6ba38ff84932adcc9d12bbe34e8293cb476eaeeff85d44f593cc086fb8f367f8ce1ff14c19c612a56044a8","ssdeep":"96:n5trurPh6nUZSt4PwJ4PGP6NxT7EhIDMK993YPsl322JE2QyxpSfsp1WrdOlb:Xrur5uUUhJiNd7EhIDfCPGm2JSyWr5OB","tlshash":"82e19f13de52adbbd24d1a39e03193e9d310256465251f1eb670168d27cb41bb7623f8","first_seen":"2026-09-08T19:49:31.174619Z","last_seen":"2026-09-08T20:25:22.6005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.572Z","timestamp":1788899081572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4974\r\nlast-modified: Fri, 10 Jul 2026 03:13:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABF3LvhvzKoIaS4hZAoV0Pz7KrMEhatkXX083osI2TcdA0%2BUaK39wx28Q4%2FAqAB0xfvjMs0z43%2F2i2KAkqgsN6etNKey9kAFkaHzdR4tEQ%2F6N8t0B2df9EZ2U2eoGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a380ad9bd92b7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22752,"size_decoded":5724,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-08T22:47:04.458361Z","times_seen":51625,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f48e.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.989Z","timestamp":1788899081989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f48e.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 08 Sep 2026 20:24:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 301\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":301,"size_decoded":810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a8d9af8b5b3922097b2cccfce844630","sha1":"6ac2f699a69f5be83bd5fc7e80d57c979e35d501","sha256":"6e7a1458d222e42798409e0e827860aa1cdff49188b5fd8bb249eae14d38e532","sha512":"880cc3af8e7ba354b9b7da5893c1253677af80647fde89dbfa51a23b220149746adda7e9e0c6d850e1275e6b8025c207ea735f3c4217daaf73530eb2d0349770","ssdeep":"","tlshash":"afe08cd6a0b83592490847f09e9cb4c5048273a4208a00eeb2885826330c7afee92e0c","first_seen":"2023-05-17T21:55:19Z","last_seen":"2026-09-08T20:25:22.602441Z","times_seen":959,"resource_available":false,"data":null}},"time_used":3270,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":3250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/plugins/nicepage/includes/common/js/np-scripts.js?ver=1788329607","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.631Z","timestamp":1788899080631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/plugins/nicepage/includes/common/js/np-scripts.js?ver=1788329607 HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 345\r\nlast-modified: Sun, 19 Jul 2026 14:48:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K7lkSPlq5NP7emMpnCPhS37%2FSMmKQz9WQjgCZI7ag9hHOm5oj7qapVdqpvcCOKqZf%2BrutwnXfPr%2F7YJfhYhEeeXniSQqqN8mM4jx6E%2BqVFZUONw6FBNsoDi0WrSBtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a380ad95fa277127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":960,"size_decoded":1094,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"036f3e7f6029ff3cd286443435da5f23","sha1":"2e0000ed5ecd712f2041421be740f6a9ba3e80c5","sha256":"f279225a89838686761ad4f3973638ab4fbb9adc0f2b74da5f091ab6e46de3be","sha512":"394251c6ffbb77923dae461fa29f1f1e292a48f08b6865b931ed13514c615cc4c66276012033cb64105a8af3962bb6f936383032cb303763e3b6e826c045a7c4","ssdeep":"","tlshash":"6e11bd6cd0be659410f730f50f5f6184bd2920837211d9e4b90def402f2a909c22f9ad","first_seen":"2026-07-18T17:22:50.161311Z","last_seen":"2026-09-08T20:25:22.603059Z","times_seen":11,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2025/10/parik-24-fav-3.png","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.647Z","timestamp":1788899080647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/parik-24-fav-3.png HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 3348\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Fri, 17 Oct 2025 07:25:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtK2SbgtsVVZM5RDjbYT10M1%2Boy6wRy4iNxUpTeNHRw0XaH35vn%2Fq5uJ6UKydyGymIuXlX3%2Fl4TXTMZ8I7tpIT%2Bg8Zr3Ueqy82DHcRY8Onsg6x%2BPY8sfFZm%2BB3UN4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad960a457127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3348,"size_decoded":4097,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"bf0f79ed8c774df4163d505bf7303bf2","sha1":"b42acd5c336bef58de7501c580368dee082709bb","sha256":"d1383e1eba00a4ded91f07de95bbfe8f8f3634829ef52bc711b3da9d175424c1","sha512":"84558bbb39d380580e7bdd242807339f4fdcaa6523fdf73b8057f4d7cbdc7d125d6ff79e0e199e7cfdcc984c749edf85abb8e1fc739b128c4fda2e53cd59741c","ssdeep":"","tlshash":"9a615ccf276935fa6caec75fc9c8554a2d2602c3b1a6e00c00c2c7e29e349cbcba1581","first_seen":"2026-09-08T19:49:31.167437Z","last_seen":"2026-09-08T20:25:22.603591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2025/10/parik-24-banner-8.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.649Z","timestamp":1788899080649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/parik-24-banner-8.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 97235\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Fri, 17 Oct 2025 07:24:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JStJRpjPYeczQBp%2Frf5Mjs43xnpR8vhSA7nRv%2BGcyu%2B6MMKKgsWE4X2Lf2nnwAemG4Kx%2BY%2BKWg4IkSSLLCISE3DalRTN%2BBjYOtnVquRf7MA9KmsDNAvSis%2BfHE2ZUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad960a4a7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97235,"size_decoded":97988,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.8], baseline, precision 8, 1521x429, components 3","md5":"7f2c6c9ccedd0df4b38d321841060fd5","sha1":"1ec6ef1c77c886dd6e25f5037f73d8684832f86d","sha256":"f5d7383e4ee825ca782de512c8ec1c520f5b6ecd3d1fefbe788e9a2459f5da9d","sha512":"c760d93b0e589210c7ef5c6bd3bc18f71a1f156ba7e30143170b85b05fda3163530e9c853ec506669b5a165cb1e7d82a882a1dae007129b7c72393a69f4019c6","ssdeep":"1536:8t/mVVZM2LnWNGbsDvk77QuP5kDcHF2E+DDN2K7zBZIrrv4q0wQAowjyuVdHZneg:zVzMkbuvk7suP5kDoqcOlaQO3zTVdo7U","tlshash":"509312adec6501c21c4c377dd8d43c79abce64b094e94b2417bcd8fa373ea267589a09","first_seen":"2026-09-08T19:49:31.189671Z","last_seen":"2026-09-08T20:25:22.604314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/44.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.651Z","timestamp":1788899080651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/44.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7606\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:52:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=td3VUX4wS1NgfPw4s74E3uy9zCvjkxyy1k79vvWosjMj587cOueRXj6Tl6pw2M%2BVsyF9oVYJKQPg%2FOTJf9gPxBZKU4JACgF4l%2FCofr2FjyijEJcDm77QCYqYtInBHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a517127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7606,"size_decoded":8350,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 133x150, components 3","md5":"dab1745c339362eeaeb9492ac5d49ef7","sha1":"6a26a9d0a8555a16db9c35fab6ba410b265f4fef","sha256":"b34ae3f4780a3c31cca93f24e51ed11de119db38eb8b80bbc4b1eeef3e55c66b","sha512":"151637118125e655cf412d0b95a148c6447f978a62116a9808243f4228b38701961cdd292a2b920085d890aa4a4b3294b5a0cfcf53457f2501404488fb26b2c3","ssdeep":"192:OuLEyoApUGrvQVuZsU8k2lVoA327GNzLllUQI:zLEyzO5UVal3NNzLoQI","tlshash":"e6f19e48112a5402f96f012b187a19f212a64c1221f74fbecb89b094efabcfe1e91139","first_seen":"2026-02-08T05:31:55.578831Z","last_seen":"2026-09-08T20:25:22.605232Z","times_seen":4,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.453Z","timestamp":1788899081453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aris.org.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 18:08:20 GMT\r\nexpires: Sat, 04 Sep 2027 18:08:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353781\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-08T22:35:57.997005Z","times_seen":559054,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":18,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2025/10/cropped-parik-24-fav-3-32x32.png","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.974Z","timestamp":1788899081974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-parik-24-fav-3-32x32.png HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1925\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:42 GMT\r\nlast-modified: Fri, 17 Oct 2025 07:28:45 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9J2cnoLpvEDow%2BwGkt7SH%2FvhHEllqxBzxh0J1xjobuU3d1VWo1GFV03RTNRRHa4hlsmm4x0T9RkqaiKRCGj%2F0dXWOZ8Nf0crXm5mKSb7FM%2FQD6ZNA9c9e4HfP37DgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a380ad9e5c9b7127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1925,"size_decoded":2673,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2976009bcb366b67c78697ad2a535e93","sha1":"7631729c12ba7077e5171c8747bbf26681ee82ac","sha256":"34405a3e1720bd89f3b1a8721ac7e8f9564c150c6d288d5df65beedd3e795ea7","sha512":"77611d7bb50c76b8cbf79838f12e7ce23fcdfa14c8db5efa2171629c26ed952e0719be7f32a26e27af7033dc80a1a0eb5755c16ef85db37b392c223c723f0941","ssdeep":"","tlshash":"9e41f9522af24bfec51f0b8746c094cc4d6e5b460db723559426bebbbe217e105f0698","first_seen":"2026-05-30T21:40:23.39349Z","last_seen":"2026-09-08T20:25:22.605939Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aris.org.ua/wp-content/uploads/2024/05/28.jpg","fqdn":"aris.org.ua","domain":"aris.org.ua","tld":"org.ua"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:40.655Z","timestamp":1788899080655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aris.org.ua","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 03 Sep 2026 15:39:54 GMT","end":"Wed, 02 Dec 2026 16:39:42 GMT"},"fingerprint":{"sha1":"57:93:19:88:CC:01:78:09:6F:8D:C4:50:39:1D:34:2C:C6:FF:3C:5B","sha256":"7A:68:10:C5:09:7A:05:E5:5B:72:D5:AA:58:D7:CD:B7:57:C0:B8:7D:9A:54:99:01:35:A7:46:11:95:F6:E3:85"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/28.jpg HTTP/1.1\r\nHost: aris.org.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aris.org.ua/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 08 Sep 2026 20:24:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8091\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 20:24:40 GMT\r\nlast-modified: Sat, 04 May 2024 08:54:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGwi2mcsTmGSL%2Bd6f69t6yyihIaDBmJhBjr%2Fk%2F%2F5pRj0%2BgdG7U0V6GsN6ipBNCv%2FxBRsyG7jYK5sD%2FdS0RnrNOAlVnCwFgusvXmAeYde3rsRx%2BSKCw%2FbWp1lzBc5uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a380ad961a637127-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8091,"size_decoded":8847,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 133x150, components 3","md5":"8bf95f78db065e5e22652f911a9528de","sha1":"dde5663d20ce26812518f76af3022226a6e97580","sha256":"e7ce18d7187572c2265a7b4c2c8e4ebfcf7fd4bafe645b12c161dbec6426d3f9","sha512":"8be85546d4e8027fa2bddd5a78599bfead7124bbd061a7db19b97f9c7f0addb4c741142170eb5a0aa56e2e875f073e6d51be3f62f03d1ecbe1d728d4b609ad7a","ssdeep":"192:MNGXtzQsOCxx6fTLtsB6LhYBcvdRDbP/msUhNkZuAP3GE:7NXrx6d06qu7/BUQZv2E","tlshash":"b7f19e08bf6e3535f13cd1b4a757a624a595ee280130cbb242841e71933e8fa7ac05fc","first_seen":"2026-02-08T05:31:55.650351Z","last_seen":"2026-09-08T20:25:22.606619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"aris.org.ua","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"aris.org.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aris.org.ua/","date":"2026-09-08T20:24:41.457Z","timestamp":1788899081457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://aris.org.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:39:38 GMT\r\nexpires: Thu, 02 Sep 2027 10:39:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 553503\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-09-08T20:37:00.264856Z","times_seen":12433,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}