{"report_id":"c405eca8-33f8-4793-b0a6-14f72cce0df3","version":6,"status":"done","tags":[],"date":"2025-12-26T03:13:46Z","url":{"schema":"http","addr":"paramountfinacings.com/","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"title":"Paramount Financial Bank Bank | Home","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paramountfinacings.com/","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-30T03:13:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2025-12-21T23:36:42.536211Z","alert_count":0,"request_count":1,"received_data":31883,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":10662,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":3,"received_data":79431,"sent_data":1563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":140052,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-21T22:24:05.252763Z","alert_count":0,"request_count":4,"received_data":46387,"sent_data":2183,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-12-22T04:37:39.172871Z","alert_count":0,"request_count":2,"received_data":81871,"sent_data":956,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node-ya-6.jivosite.com","ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1470340,"first_seen":"2023-01-18T14:06:31Z","last_seen":"2025-12-20T02:12:17.935206Z","alert_count":0,"request_count":1,"received_data":786,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"paramountfinacings.com","ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2023-04-01","domain_rank":0,"first_seen":"2025-11-29T12:34:04.06027Z","last_seen":"2025-11-29T12:34:04.060271Z","alert_count":55,"request_count":55,"received_data":2625498,"sent_data":25605,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2025-12-22T11:45:42.043763Z","alert_count":0,"request_count":8,"received_data":1724958,"sent_data":3839,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-12-22T04:02:22.523112Z","alert_count":0,"request_count":3,"received_data":372345,"sent_data":1734,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget-v4.tidiochat.com","ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":2781269,"first_seen":"2018-06-14T06:38:01Z","last_seen":"2025-12-17T03:50:42.910532Z","alert_count":0,"request_count":4,"received_data":872636,"sent_data":1825,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.onscreen.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3914cff741cb7f7bb323b8433233e","sha1":"35ca576406057ff8580b4ef226da8a40b501940b","sha256":"8f7d3d9629606ef4a561616eba0c18549fea801cc18c3a74e0ee4a3141bcbda2","sha512":"26dd35fcac4ffaad971e44de38827abef31072740650095de1e0b53a84c0743d8490032249d5adeb4da51346f2398734c704e62ce64fb1c3f4336cf9c6a8f73c","ssdeep":"192:ZuSa4h1NgiqIlTBka4TUKnlst135eFhi+1q2UfVJyB/:MCgisVl5efVJc","tlshash":"1d22137c29e37230a967b85d4b9fa4056e24a053b108dc103e4dd7e0efe586456e3aed","size":10717,"data":"","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-03-16T06:49:27.457724Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.magnific-popup.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b23ded83b6a631b06040ed574e43dd6","sha1":"554d5d9da772b0145af586fc73e7e23403aef9d5","sha256":"c24ed0313cd813b049be4a3d06ccb03f34662b3842b4840a4ee37afc1f6c466c","sha512":"0b5cef75bf51e79440925eb108b4cfb7e5a6733eacf9c70ebdcafa1b9ee56e6f0cd9f6e09f64948d425b435ddf1328ee2d58b07bdeee26fc1ad4451fe05d4093","ssdeep":"768:11x9gvJxzPtwiurw50N12C7xSS8XUOU/YDUUevp7g1H:11x9gvJxzPtwiTeN/8S8kR/YDUUeh01H","tlshash":"ce1374d4f7ac215782b2336c9c5e11cd6e3ce132da138cafbc99226810d596c9379e79","size":41730,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-21T17:02:06.82726Z","times_seen":3079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#164","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-06-22T01:30:55.533759Z","times_seen":36992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75606a24bd728e5d7d7256fbb679bc26","sha1":"7bfbb31c174ab2a6f4c68c9852c8444c075eab43","sha256":"9932726d2c87611c904eb0b04d822e785cd73f693838aa2cae3fc90a7d8d7746","sha512":"323a9930f67a978713ee419824630ccd74ec99274ead49c8ab87eedc33d5bf4dcc9cd681961483dbef9181b8c884fb7bff7eb579d12e5ac90d194caab6167dc9","ssdeep":"","tlshash":"2ec09247f5b01a4b049ae20ae387488c72bc8509463a4e292791a0ca3eb3f9d070e1a8","size":134,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T07:20:31.611307Z","times_seen":3252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAQD/d=1/rs=AN8SPfqdbvrPGDnzqQCWUSu0aJPm8SZ0Kw/m=el_conf","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9be9477b23826704ec28553e50e1b142","sha1":"7d0bdb6513967b86ba9d238379ab4fe6ace44e09","sha256":"14dceb20fd22927b6a9eb23fe8745e0555e7eaa1e12b6ffd0a2748018cd31813","sha512":"65c8ef66e5c849a24754bed99e72112e4a9fa8f131c531b43f063af2aa4861aa6e9d930f74c310f79912df19e00d86a33c6fde6f4de6f16d5ecb7c28f4f6dc72","ssdeep":"1536:XNHbUV8ZV7mgU1l4C0KGY8D60nKucbR7ChiqwNWrh:Xt7C0KGmehimh","tlshash":"f173b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","size":79553,"data":"","first_seen":"2025-12-26T03:07:48.173445Z","last_seen":"2025-12-26T03:57:29.774237Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/owl.carousel2.thumbs.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d922b451a6e40e9a527c04cfe98fae1","sha1":"25120415aabc820193d8ef300546f44da23ccbe1","sha256":"9ff4a4e68c8d720d537ce02871a7cfd72305169f0d2c5bb9129af006a6e7bf51","sha512":"252db50e928b3fd35b2acb26b51de096467bef92a9d199d8d342d82c36aecb7e03d7a5dbc7f56bd1dfaa09fa6ead16adb64b47e6a098c163c3104966f49d97f5","ssdeep":"","tlshash":"d461bbe671152272555b82ec90a5548ff23fa62aee841c2f745466dec0ee90d30eef34","size":3464,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-21T12:53:33.160335Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/btSAZW7tD7","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd96dd326c2a5d25cee0038f3288bec","sha1":"d0f2bc4be45bc2e7a054bab170e21b4412ef7a91","sha256":"d95411e817031304101360d4319db31b280f5a705d80e9b3685c7218f1033182","sha512":"34342f64d66d25f2beeabf20ad33fbb3d93896481e128a1f5c075609348cfe62bc763d2dc39643cc322317745c4154b730a0902263fba34e1316a26844ba9c66","ssdeep":"384:boU4JkQamum0400rAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMVAfX7WO8UFWcPY4","tlshash":"84822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ade813fef8","size":18065,"data":"","first_seen":"2025-12-18T13:26:00.120545Z","last_seen":"2026-02-18T15:22:47.278487Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/render.30e5efe384839d3598e9.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"234cd34ce5c0f85e45866ed3efc25b54","sha1":"a6d720ff76181247d099c1d874e71c9d80d6a6bb","sha256":"32468f953d0aeb9b78217f5589ff219ac0b7ae1dcaa9fe51bef2bc4092fe898d","sha512":"2833b59912f3d76c9bd30af3487f2807afbf718ffeb37198e4913ea5c6c48e2e7767193281b649fe1df73357158ac92b5c46c6f5c797414934f12cb16ace8251","ssdeep":"192:LayqFWN4Ly9HxMcGGgpDDPQFVloCloegjWH9+OM/wIDfynHuL/pMpWJSxR:eP6HGcG172VWAoegjWdvIzy/W8xR","tlshash":"5772318ab68975a116e7b0b4013fb70fb1b6e9993049d4c0d226d5d0ac7c98f906bf7c","size":17154,"data":"","first_seen":"2025-11-29T12:34:13.551767Z","last_seen":"2025-12-26T03:13:58.543433Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/TweenMax.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cdb51ec2f59b803cdcda4ded3c188f8","sha1":"c7a4d1877417ede060b0c42da6835c77358e8ad1","sha256":"94f137c233766bb0015876c6cfbf8c28125aca4cb3a826d4f7a0495a38a8f3a5","sha512":"0e43ec1fd2f337365a6630accf02aba282b082302b2438848c0e6d4e0af7617e04e9362ff772024bc4f8d721472679d2986a677f432f6f936149c61bc2f867db","ssdeep":"1536:jSm/FziLBJ7jl/H+AhHw2eMH4YgLYvsFu7z7wxivYWRC0IfGxULYiGtYVVOiE:jL/lm5cADmkvsFu7z75DCvpYiGN","tlshash":"dfb318c5312270128496269a547f0a47733bddbab4098d2cf589c5de3e1cd8921eff7a","size":116228,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-21T20:44:17.588924Z","times_seen":2446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/scripts.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05f6b302bf0ccc47a847db41deb13966","sha1":"ed0350eaf1702a8b8819b3ef82a55664cd2716af","sha256":"be7aecb4af41046e9a0433e666b020e687045cc7dbe18b592bbefb5af3010234","sha512":"391020b317f73f9e7ddbe7753ee382728bf877bb2a9827d4b22356ee284e58faa0333fbef9c893cd0d1e8456f9f1d67e0dadaba13f89bf3af274d6857bd79d2b","ssdeep":"192:ka8JyquHgWydB7U6qHrwsGU5nODPCyEiysze8YnDJ0niBUsjhTU:mfuHYB7U6qlMn6MsjhTU","tlshash":"81321d0fa4f61461a977353d0b6fa61838b6401b9d04fd203a8e4bd82f5c72e467bbd9","size":11108,"data":"","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-06-15T02:05:54.388299Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/owl.carousel.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-06-22T01:46:38.021395Z","times_seen":61147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/select2.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e3d14fddf0553e0b51f69cdccd4fd7f","sha1":"b36737e7d2a65815c40ac86d0502f0cbb8b9bad8","sha256":"9c04b5c034013c1a9ad5f9d9abcc1dd59e8237e3e09875cb15d328d20da961fd","sha512":"aa228ce8525b239c79f862f90846c050ad2cb918635d53115e71ff5d025a690ea240f7f4e57c5b1411388d2e952733c621183bc511194eb189219564d4c2dc94","ssdeep":"768:voRWDhrrJ/Y6EvKqtB8Nnoc9DpPJRGookOlxNjuvSnJx0ejVrMbusSzXAFo8Jw:/ACno0okOvhrZ6b5KEc","tlshash":"5063b64c7a53723502af20e6356b180922376b3e500b9668b028cded5dbdd15736bf7e","size":72443,"data":"","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-21T16:05:49.86076Z","times_seen":8096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/sweetalert.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-22T01:46:37.975245Z","times_seen":11102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/bootstrap.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58072,"data":"","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-22T01:57:35.976033Z","times_seen":27302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b5b402a360b322e962dc10511efa64b","sha1":"bc1c7202eebb15c23c1b7cc4098bc46281187646","sha256":"3a2706c950e1c624fb82a4db8c952c9281cecb09e20327cbacad95ade31ca435","sha512":"3a1b087602f74a8aec46fe17fd3de4a39514586feaa7fee3cd9a5446ca53d3316e3f1ddc2a8ebe336555bf07832a62285234c020a0b1e208d960c6016629c7f4","ssdeep":"","tlshash":"2c213b29f1360003033f79e169dbf441590490a7c35b1e90b4ee05ed1fc4f6a9179b6a","size":1235,"data":"","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-03-16T06:49:27.491494Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2913f7c52060069da6acc84c392a4dc","sha1":"decffbb3f4e2addf2cfbb2d518986630091cc0dc","sha256":"380a7fdd97951f66163f9480d41090539e8e23ff8f6fc30512914ea8dae8055b","sha512":"e8a0f4321ddaaad0a2b2b15ddceee37e5035631baacadc55667664ce66d8d6952ef2bc591eac248a8acf80d434edd50aca289a72235bb7fc1f4e87acb6902cad","ssdeep":"3072:RNomCx0ijmbUgg15sxjMrGu5YCZVXxCTxDwo9uXtIjfwgD+NKXqYPFI8G4h:j0RDZexHvDXqYPbh","tlshash":"a174d9c9b26634529262f8a1d07f0087b93eac57b4484c6cb24decea5df484941b7f7b","size":370395,"data":"","first_seen":"2025-12-15T20:30:21.355048Z","last_seen":"2026-06-18T13:32:36.845424Z","times_seen":3793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v4.tidiochat.com//1_71_0/static/js/widget.30e5efe384839d3598e9.js","fqdn":"widget-v4.tidiochat.com","domain":"tidiochat.com","tld":"com"},"ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e5e7dde6f83a299d5826de2b690c155","sha1":"8857a148f144378c8393078cbddc5fbb6b0e6da4","sha256":"f80625d8c47541869c054eaed0331743061ae8bc1908a9abbb03f13431b682d9","sha512":"438d2a3ca96c4245aa6a91ec6ad654398a0cd90dc090e639cb2e76d4580e1af0d221cf6ce0ceda5872cb82e5998a2aeb4e126bcf81c76e907781a15d897668cb","ssdeep":"6144:xBQWNvCRlwL5irwaqGwN0GKVl5jANRTbfrl09L+kVo0sleppIFbeTw:jQ6n5irwfN31fkoQpIFbeTw","tlshash":"69b409c876d6f0a647f321b5406f140bf33e696a680d8550f211e8e57cb898ea237f6d","size":515150,"data":"","first_seen":"2025-11-29T12:34:13.562225Z","last_seen":"2025-12-26T03:13:58.563218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/0a66b6c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"897fed932ad2b76e84601658b3d8a48a","sha1":"41f7753eb9a4b80b44dff68307f01033505510c3","sha256":"9c49a60ebb03f3afd92d644fbe72263f6f94129b049c5b62805f53cfc33a9411","sha512":"10e6724fb93d4b1555cf42028d21e7c7aa0f076a80fb0a3946e65d146f926cd51eb459dc9e3b2d20204a0e4788ce4cdc6f4a1d712d326f242059a08ebbe3332d","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLei1JK:C7H7ObdFkOIphZ8wjFCifK","tlshash":"1522d71ee7017f360fa623c3744f7b53b6a480d592646cb5d88c826953b9bcab21778c","size":10543,"data":"","first_seen":"2025-12-18T13:47:04.025917Z","last_seen":"2026-01-27T20:22:23.176416Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery-ui.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80ffc45945634e286174e2e8c812e3c8","sha1":"884e357d6cff8b7de88b9ecae37ce9256d05dde8","sha256":"eaf9709387d61e3c516b255baf988a1a74ce7d83918a9566cf508bfe0f98ab86","sha512":"29e311e0d5baed4dd79c0727905783a7200a07f701ee5707abbf704da60d3989ba9d87e25eb96c3c404106dbf6ccab1b9f1ac1cbb0d3a5b72c0db5d2ea9c46bf","ssdeep":"3072:VkvBNnLO1wG0qOOO8D5BnAcKcv1/i/fXMS6PuQr1Q7SV7opS:4LODl6c/KuS6Px","tlshash":"d644f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253668,"data":"","first_seen":"2023-03-08T04:38:18Z","last_seen":"2026-06-15T02:05:54.423354Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81e6fa646f94d4db982bf402ba3df9a9","sha1":"9b1aa5133cdef61fa8e48b835110e5d1bc4b21a0","sha256":"f645249e2bc42deef36b64a0b710fa61e6db36e2127258d3d74a9efd71863129","sha512":"f9030776dc1087279544a9df805a026a84eb8bbe974f340306a72ea4e5b44bfbde71329f60d09e1323b260943665eb3bfc76c8abc65fc791415b35860aa21f43","ssdeep":"","tlshash":"c911af0a1cb421607413b5746fede0000a6c430bec49bd857e4d1b80af2e30fb2f2390","size":1017,"data":"","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-03-16T06:49:27.492515Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1766064608","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b580ed8f7debd21bb215d01efc9c6ec0","sha1":"d795d04a67639864b101c90a45c348c8f8c7b7d8","sha256":"60be37be524eaf7e50867bb55cee863e478e06f225cace090d6cc3b71ec27881","sha512":"c4d8a557ef4e2bfc7c0620bf1e2c76a5855f0f1202e093b235d576e156559d8fee3d62b47714e602f19deee9616719bb0cf5833966d2c4e43afa55efd6bc0e55","ssdeep":"24576:j/hLnS6Ulw3nfy8iEKMQZiyIf9CQ/E0zOVch1meapEuo2Mdomrt7ktAgPgef7mtZ:jJLl368iEKMpyGP/E0ueapEuo2Mdomrl","tlshash":"be656bc5b2c5f46203d355e6a03b2005b33a2859340da068bbbcdcdbe95a58e6377f79","size":1539379,"data":"","first_seen":"2025-12-18T13:47:04.104729Z","last_seen":"2026-01-28T05:35:47.439915Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f0ad6b49844bc559047c494a71a9f3","sha1":"bdd067ac3bf3f5ffbdcc4336adcede6ef79f5a59","sha256":"400b8dd2aa9b443386a899719b0d1d76137d6e55644c8137ff84cce71e931226","sha512":"940f2798058a8277dae71509f0bf70e42dd4ea3f91fd65350e6e8184ec551a26c5b958b302b80b004d0024acea315164035e9ddbed479bfeb711924a70a2e61d","ssdeep":"24576:YFLLv+yoNl0ldc8kW8u8B18HrLWJcYJeqf+sJkw3nlzSxw5fH6u6Fg:YxLM0s8kW8u8sX+cYYqf+sJkw3nlqw5T","tlshash":"ce655cd1b2c5f4a607d701e6943b1002a33a1c1a740da458fbbcdcdbaa5a58e6337f79","size":1507129,"data":"","first_seen":"2025-12-18T13:47:04.108024Z","last_seen":"2026-01-28T05:35:47.450292Z","times_seen":604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.nice-select.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-22T01:55:27.430632Z","times_seen":9475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.countdown.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d3ff3c3fbaa67cc639501f44eeb07be","sha1":"bd66e4cd58de09c198e7abc77fa4c883955d189e","sha256":"2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f","sha512":"96d7ae443f9a50436b64f4d758544f4c17030f120659ee6ebb46a93c49fedd92980f00da104ac82bdaef474433506994439e4a144d91a864d5a19b0a72d18c57","ssdeep":"96:kbG5QHArNbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qD2O:fQH+UpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"71b1c6ceb3b213d5089553b101ae1506613bf25be4e6001cb5fceac87a65c5d607fd78","size":5339,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-22T01:46:37.909428Z","times_seen":10527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/toastr.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b703726fe13ac3579b559e7dfc7a46","sha1":"9691d795cfa6c5c4af45f1439a9b3f3782e6ee6e","sha256":"7fe565f3385448e1ec8d57dc2c1639d723561f1aabc2e3d547e284bbf9f9b073","sha512":"c6e60b917e6d285befafa3bd2bfb144a8b1bb8344418498ff86d1c54ff459ee288ef9f9520b03995ff3005094f077edd823134575a63bf7cb159aa899c335a1a","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02tfrS:O4BtcvvRqIQcNa74c7rS","tlshash":"b2b18384b220b78b1bb31079919f140b937673b2ccce5440763aa9987e7082c97a7fdd","size":5217,"data":"","first_seen":"2023-03-07T12:25:14Z","last_seen":"2026-06-18T05:37:47.023218Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery-3.3.1.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-22T02:37:55.366843Z","times_seen":136321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.fancybox.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","size":68253,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-22T01:54:47.632876Z","times_seen":26178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fb417d156519176b05410d65b27e0e06","sha1":"6e99d61a17654ca85bbd940108bddea93b283f5d","sha256":"c4769d1847e5f79a5d38f336b5f6cf94e9ee526b32417ec989b94fa366848c3b","sha512":"19ac2005dc0febd5d09ead6752e8bc84903a3a6df683c9dceba6521efda50245c181debeff4cea4a87ed7d46d174c114381c5938ccff60d51a3f3c72fe567311","ssdeep":"","tlshash":"115151a2605ca01b4503c5d0f8a23eeef4de0058c37169d07e1c29efdadac7704a716d","size":3011,"data":"","first_seen":"2025-12-11T22:16:04.368455Z","last_seen":"2026-02-02T19:35:57.84792Z","times_seen":2384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2c9f78d83cfb45634e2544e3d5ef8bc4","sha1":"a31196db411562871e1def2fd8d433ebdd0e70dd","sha256":"c719d73180dc24dd9d67368bb2bff189e4d4d2d0b78b506a44341e7975d8a525","sha512":"8f638611b532a24de5e3532c075a62227a578c59015ecf4a20bd0c9764f0ba3b46da86a3f72c75b83dbab110c46bad93d00856580595834e1e87deef81044f40","ssdeep":"24576:iFLLv+yoNl0ldc8kW8u8B18HrLWd8gJeEf+pSkwtnhzSow5fH6u6Fu:ixLM0s8kW8u8sXw8gYEf+pSkwtnhtw5b","tlshash":"79655bd1b2c5f4a507e701e6943b1002a33a2c1a740da458fbbcdcd7aa5a58e6337f79","size":1505321,"data":"","first_seen":"2025-12-18T13:47:04.117083Z","last_seen":"2026-01-28T05:35:47.462231Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/banner/2.jpg","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/banner/2.jpg HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 200322\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":200322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x850, components 3","md5":"29b813f46dbdf5f9c87f0bc1296997de","sha1":"780cc904a645848de4d8193c268ec26d5fc88d91","sha256":"c6f43dd307bc44e72bc535193314926de01f0ee75ad3cd08fc41cfb2454144f2","sha512":"0dfe7cc9eafce58a917c206baa004c6b0d96d934c548350ac705b70640d3aa59e6e4da807d1cf1f2b70258d8774fcf0c37f1a51daa6df062236509ef3d6de96e","ssdeep":"6144:rMDqa8jYRMKYJjN7KaQ/353tlerv/KbOpW5F:rQBTqZ7K7BtKv/KbOpG","tlshash":"c71422c14513c6b1c4660d1b8ad68ca54a967b14efc9ce5773a3fb53e282e21f46e0ce","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.445431Z","times_seen":17,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/0a66b6c/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:25.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/0a66b6c/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3393\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69428756-d41\"\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-25T13:31:51+00:00\r\nx-node: m9-up-gc7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10518), with no line terminators","md5":"897fed932ad2b76e84601658b3d8a48a","sha1":"41f7753eb9a4b80b44dff68307f01033505510c3","sha256":"9c49a60ebb03f3afd92d644fbe72263f6f94129b049c5b62805f53cfc33a9411","sha512":"10e6724fb93d4b1555cf42028d21e7c7aa0f076a80fb0a3946e65d146f926cd51eb459dc9e3b2d20204a0e4788ce4cdc6f4a1d712d326f242059a08ebbe3332d","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLei1JK:C7H7ObdFkOIphZ8wjFCifK","tlshash":"1522d71ee7017f360fa623c3744f7b53b6a480d592646cb5d88c826953b9bcab21778c","first_seen":"2025-12-18T13:47:04.025917Z","last_seen":"2026-01-27T20:22:23.176416Z","times_seen":447,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/owl.carousel.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 916\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3186)","md5":"dad097f003be652450a7807609f61322","sha1":"fb627cdb07b368b0f078cbfc734645c69bc0a7bd","sha256":"8ec0477cf78093180be967bebf8bf74d7288062385709427a0d1a69ad6b3eb04","sha512":"96ce3095c6b1fd154709d44fa79d419a15ca44448cd40c80dae17aa629014d43d679187b86273a386a758bc936e5b7996a3eb773543c453e4f4414079ead6e83","ssdeep":"","tlshash":"de61bbe5314a215f480f831219d91e86393dcc52d8660a5a92fbd71847dae6d213ffcf","first_seen":"2023-07-21T00:56:43Z","last_seen":"2026-06-15T02:05:54.421773Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/style.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12603\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91236,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (900)","md5":"93fdad0f9ec539e2e304a7e8c63e6c68","sha1":"270bccc2cc03297497a80c61b6615db19ff7d673","sha256":"303df9c91b34f9fb3964eb746140998c309bc5aed4032f72a9464a81ce356436","sha512":"10d22d55881b70fe034f0d1795efdbe6986b5cd1ac2ace1f5f4be98120251eb334a5ba86c8f5d20d4f01b52c45d85670cb9ca91de1d08daffe21a9bdd7a51468","ssdeep":"1536:u1QyZalOTrPmyV2mwlORf7zM2DAAM8YYDV9GpBpIkpkscHmxFmqAUANQRFXFtsHW:uTZalOTrPmysmwlORfM2DAAMtYDKpXII","tlshash":"5a9396ea6bf06704340f94a855998b60337c6143e60edefabad5205ddf897e80163f8d","first_seen":"2025-11-29T12:34:13.610018Z","last_seen":"2025-12-26T03:13:58.523097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T03:13:22.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\nlocation: https://paramountfinacings.com/index\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24956,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":182,"dns":0,"connect":87,"send":0,"wait":90,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an1/2.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an1/2.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45987\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 602 x 564, 8-bit/color RGBA, non-interlaced","md5":"4ec17d5293210e7008342a3d97cf659e","sha1":"8d3221b250a6584841c3d45c5733c128bbb8847e","sha256":"17aaba794be5eccf22a564328de765db08c9c59a9fa186346e92711d770d0e95","sha512":"6d79578876f23a16068cd05c2e89e3fe584669d5ed44c0997c3f566512ea8556983171fc86c7c1232959119f442c0dac7cba36234b63a0e2e5079c8bc4408c68","ssdeep":"768:W7YAxVH0aO8RI2PfQvNJYvpL/Cc/LAN4IDsp/ch+YuVyVbZp572kJMGM4:gfTO8jQvAvpL/X24IDshQ+LIpN9","tlshash":"d723df589b95b11ec0be2431a82ced54f6718cc83be413389e5f97a89b93192ccd1c8d","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.430837Z","times_seen":18,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an2/1.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an2/1.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 133738\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":133738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 539, 8-bit/color RGBA, non-interlaced","md5":"7b16cf5f533b95d0f6fd6805823d6121","sha1":"78eece87c2e28363df06a85f06e8f79aa6c111aa","sha256":"249ab80fcf169d0fbe4da7a174dbd494809e102174b28e81e62bddb61f3c1299","sha512":"914b10bfcaffa56deb005b1b0b305dcf6dd07a95d1a133784a196f134a16b694b30cfbb34ac79d55363c463d1d3625055dc7f5054ba45d26a2ab687a8b1bae93","ssdeep":"3072:WZvn6gPQB4sNlVGSIpSzsFQUpo+BgPpkXO9:q3PF6lqpScQUe+WPpk0","tlshash":"f2d3125644c24cafccf6a63d6de5c46bcb1e2178fc7d4cb813b2601b244d62c98a572e","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.426337Z","times_seen":18,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery-3.3.1.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery-3.3.1.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29664\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-22T02:37:55.366843Z","times_seen":136321,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.nice-select.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery.nice-select.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-22T01:55:27.430632Z","times_seen":9475,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/images/preloader.svg","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /images/preloader.svg HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1035\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c22a925b3c2b17fda67b6158cf4452","sha1":"0f49f8ea13f74401c3ba4d291b19a7ed782bf127","sha256":"cf4370e0f9d1f12205c7a5faac8df8720dba72b6559a0a71bc4f0e3e0b8764a9","sha512":"4b850a49231fe99ccf636cf39090767afb619e3c4b0e77539746684ace4477981b69abf16851ea634bbf6dceb267d902a1779d1789bdf2f8a3ba2079353aea6a","ssdeep":"","tlshash":"4f4177a68734899b64052e58cb8838b5290ce9edc06440847381f9319c46fefed39eb5","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-03-16T06:49:27.480939Z","times_seen":16,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/footer-bg.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/footer-bg.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45840\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1459 x 504, 8-bit/color RGBA, non-interlaced","md5":"de8828960ba66ca0a202ff41406ab98b","sha1":"c5948091033ea54c11dbbea97e60f9f784316105","sha256":"07fed59dceab220871079ff16f1535cc686488e4ca20681944db7d22f2039ec7","sha512":"7e82c4db0aca8c71cfc9c93a95be6d27c3baed92506d0a6cb97a9e5360737bbdd8a3322dd6251c43eca092e25879c44897f5f3f6f2a545d0bb69b3f6f5c9fe77","ssdeep":"768:nUvKUxXhJXAOxkEQS6wlNM+Y636EEjgnq7y+1Lve/KBCcgRZYE0Yewj/:n+nRSOxkjrwk+RRq7y8EwqZY9gj/","tlshash":"2423f1610f4a5bacd055b07499fbbdca7bb10889dfae86ffe1c8d01548a31188fa511f","first_seen":"2023-05-17T22:00:23Z","last_seen":"2026-06-15T02:05:54.348311Z","times_seen":17,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.mmVVB70FM2U.O/am=AAAQ/d=1/exm=el_conf/ed=1/rs=AN8SPfqcR1qT4BSvrMxg-3GOnhIc-0oBXw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 105328\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Dec 2025 19:27:14 GMT\r\nexpires: Tue, 22 Dec 2026 19:27:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287169\r\nlast-modified: Sat, 13 Dec 2025 04:11:49 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":370395,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2581)","md5":"c2913f7c52060069da6acc84c392a4dc","sha1":"decffbb3f4e2addf2cfbb2d518986630091cc0dc","sha256":"380a7fdd97951f66163f9480d41090539e8e23ff8f6fc30512914ea8dae8055b","sha512":"e8a0f4321ddaaad0a2b2b15ddceee37e5035631baacadc55667664ce66d8d6952ef2bc591eac248a8acf80d434edd50aca289a72235bb7fc1f4e87acb6902cad","ssdeep":"3072:RNomCx0ijmbUgg15sxjMrGu5YCZVXxCTxDwo9uXtIjfwgD+NKXqYPFI8G4h:j0RDZexHvDXqYPbh","tlshash":"a174d9c9b26634529262f8a1d07f0087b93eac57b4484c6cb24decea5df484941b7f7b","first_seen":"2025-12-15T20:30:21.355048Z","last_seen":"2026-06-18T13:32:36.845424Z","times_seen":3793,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":119,"dns":8,"connect":28,"send":0,"wait":29,"receive":66,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-26T03:13:22.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /index HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.3.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]}],"data":{"size":24956,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (480), with CRLF, LF line terminators","md5":"d17bb07f5e4036bbb96f1e195f88e51d","sha1":"a7eafc5364abbfa2743c32df2e9ae4eebe0eb9e5","sha256":"2bf9a115081022eebd3bb6c20f64f355e54965473c2f5f1214166737c69ad714","sha512":"4df8e2b7712e725a9e32760c7829d6dbfa5f7a0d5890fc6af45d4d9e7dbdaef2b5a38fe7efc87423ff0849aee3c991997a9865ff61c9224dd2475d56118f1d8f","ssdeep":"384:wDGAkEllIkxONTEZBlTSne9Gq3zJ9VfeI:0GAkElFxOexTSne9GqbVZ","tlshash":"05b2031698f54033057391c269b62f1efff2810bd51a4a2472fd0baa5ff6e4af913819","first_seen":"2025-11-29T12:34:13.589121Z","last_seen":"2025-12-26T03:13:58.538628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/jquery.fancybox.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/jquery.fancybox.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2897\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12795,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-06-22T01:56:53.89456Z","times_seen":47543,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/sweetalert.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/sweetalert.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11427\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40808,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-06-22T01:46:37.975245Z","times_seen":11102,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/render.30e5efe384839d3598e9.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/render.30e5efe384839d3598e9.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5625\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17154), with no line terminators","md5":"234cd34ce5c0f85e45866ed3efc25b54","sha1":"a6d720ff76181247d099c1d874e71c9d80d6a6bb","sha256":"32468f953d0aeb9b78217f5589ff219ac0b7ae1dcaa9fe51bef2bc4092fe898d","sha512":"2833b59912f3d76c9bd30af3487f2807afbf718ffeb37198e4913ea5c6c48e2e7767193281b649fe1df73357158ac92b5c46c6f5c797414934f12cb16ace8251","ssdeep":"192:LayqFWN4Ly9HxMcGGgpDDPQFVloCloegjWH9+OM/wIDfynHuL/pMpWJSxR:eP6HGcG172VWAoegjWdvIzy/W8xR","tlshash":"5772318ab68975a116e7b0b4013fb70fb1b6e9993049d4c0d226d5d0ac7c98f906bf7c","first_seen":"2025-11-29T12:34:13.551767Z","last_seen":"2025-12-26T03:13:58.543433Z","times_seen":2,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an1/5.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an1/5.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33143\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 602 x 564, 8-bit/color RGBA, non-interlaced","md5":"b6ae35babf6645974e05d98c8fb84c56","sha1":"e2b814a5cb3651ee1294345d91e94eda6dc34d15","sha256":"0c7954f204b01fa634d934f31c01dc346323167d214106ee89e45bfbf6bbdd9f","sha512":"d604312f2a1fdba9580db6653c7e22a23f3ed357970cb2143b5a57a0f272a22bed31c89c42477160fb3492a8cf738053c665413e244c2dce9d33599633a5042c","ssdeep":"768:PjEMiiOB9EASPHpEZybPlWbOthH36NFzgMfRWUuysKxDo:7EMfOi75dhHcFZfRuMxE","tlshash":"a4e2c013bd3cf0a9d8bf457801993a03a8234cf64fedad16f346355a4abdc85e89474a","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.351604Z","times_seen":18,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an3/3.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an3/3.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3935\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"70c482303ff987e07f9dbbc02b2a99cd","sha1":"c5d0f34768b355af4b490067935a4cf9bf092e8f","sha256":"e2fb183036f319b1d7f4dfa86a0bde8f4f053bb14b221e16a5cbba38eb324b90","sha512":"5ed5bebb774dc6e66c4139f0dbc3eb52361a90efba93eeeb005e9210fe9014bc0f6b0947009e8d9a6ca0a8300f4e2d7505f54b5b2973bb4d7af412114492e73f","ssdeep":"","tlshash":"16812fa9d17304f20a4e5ec98152eebfe4131cca97e49332fcad8b2d27922f53e05595","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.418535Z","times_seen":18,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/scripts.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/scripts.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2273\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11108,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"05f6b302bf0ccc47a847db41deb13966","sha1":"ed0350eaf1702a8b8819b3ef82a55664cd2716af","sha256":"be7aecb4af41046e9a0433e666b020e687045cc7dbe18b592bbefb5af3010234","sha512":"391020b317f73f9e7ddbe7753ee382728bf877bb2a9827d4b22356ee284e58faa0333fbef9c893cd0d1e8456f9f1d67e0dadaba13f89bf3af274d6857bd79d2b","ssdeep":"192:ka8JyquHgWydB7U6qHrwsGU5nODPCyEiysze8YnDJ0niBUsjhTU:mfuHYB7U6qlMn6MsjhTU","tlshash":"81321d0fa4f61461a977353d0b6fa61838b6401b9d04fd203a8e4bd82f5c72e467bbd9","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-06-15T02:05:54.388299Z","times_seen":16,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10301\r\ncf-ray: 9b3d66e53d40568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e60-e4d2\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 536181\r\nexpires: Wed, 16 Dec 2026 03:13:22 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m4HDMkjp3XWGFqaF2wLDf%2BsfvHyA2rj6rtT3Wt0P7sQ%2BzIocD%2FLdYc8LFso50zjAS%2BgZIRrjcKnBsAhM%2Fenz8dm7e5DdN1gglrnbvdj88vQcG7JVILKLFcYsh07Kjf5guoGA48aQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58578,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58392)","md5":"76cb46c10b6c0293433b371bae2414b2","sha1":"0038dc97c79451578b7bd48af60ba62282b4082b","sha256":"876d023d9d10c97941b80c3b03e2a5b94631ff7a4af9cee5604a6a2d39718d84","sha512":"2fb31670aec534f73036a9cb759abcea54c760b750a996b3e58700804fb97271a6970f094f4dd0076fa8c4bd74d14781e9197364b531086492e3ffbe98d65dc7","ssdeep":"768:FEC319PiyLNq4/xMoAUHJ2kEBR/MMQyYJrXjBrth5Qzl:FEkPxLE4/6mHQpBCfdj9tMB","tlshash":"b643fcb8e54c01c9a731c44bff82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T14:02:03Z","last_seen":"2026-06-22T02:04:22.832467Z","times_seen":9760,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":15,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an2/2.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an2/2.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24909\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 539, 8-bit/color RGBA, non-interlaced","md5":"4f5ccecae0e0e388c768beb274513e15","sha1":"50f50eb73636cbab1e496656fc3f05076f676592","sha256":"c55f6340886454fa79b1a0e50882f2290746c4a0f6d12d589be42d0893b07532","sha512":"322abe6ac17142633cd239d9abfad8123c807a4cdb3ab5cdba67c98b941d9e070ec5e3150028394c7b44b12a585ae9f1b50b569f25d87c9f89d4dad9cb65613d","ssdeep":"768:x2/mysoSsfVgWzWYnPDPnzKrLFaaEelwPI58Z/90eK:x2ystgWzx7PurLzwZ/BK","tlshash":"10b2afedc663cfecc93f64710526422d679907cc0df072c188e89eea7a275660ea2167","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.358299Z","times_seen":18,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an3/2.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an3/2.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3639\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"fa841ae76d76ffe1885e0530df098c04","sha1":"c1aa5c64ba3e07f05ef6c273215d2b79be5c4903","sha256":"983be8b96db05de77e262a30db5e85bee7aaba3129daa26d15b6bfbea47dc2ff","sha512":"ffcc0302881a528cdb7d5631e8b61508b6653cd97f6a6510fa2423e0240227d16898602839a8967835df7a709aea2fe99a9fc03e5ad0cd839e7155e5f20a6cbf","ssdeep":"","tlshash":"9a71daa9d53308f31a0e8ec99591eeaee4030cca97f05372eced4b2863d27f12a15595","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.404279Z","times_seen":18,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/TweenMax.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/TweenMax.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38664\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116228,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32037)","md5":"1cdb51ec2f59b803cdcda4ded3c188f8","sha1":"c7a4d1877417ede060b0c42da6835c77358e8ad1","sha256":"94f137c233766bb0015876c6cfbf8c28125aca4cb3a826d4f7a0495a38a8f3a5","sha512":"0e43ec1fd2f337365a6630accf02aba282b082302b2438848c0e6d4e0af7617e04e9362ff772024bc4f8d721472679d2986a677f432f6f936149c61bc2f867db","ssdeep":"1536:jSm/FziLBJ7jl/H+AhHw2eMH4YgLYvsFu7z7wxivYWRC0IfGxULYiGtYVVOiE:jL/lm5cADmkvsFu7z75DCvpYiGN","tlshash":"dfb318c5312270128496269a547f0a47733bddbab4098d2cf589c5de3e1cd8921eff7a","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-21T20:44:17.588924Z","times_seen":2446,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/banner/1.jpg","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/banner/1.jpg HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 255711\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":255711,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x900, components 3","md5":"d0dafe3663f5b6095f98aad3cc22b5a1","sha1":"61cebdfcc6c506a41ef39f748bd203e46ee1cb83","sha256":"518d205174c13d668f5f58b11149ec23a2aa011067a830cb2587b79594ce7645","sha512":"d87f8014c19175654aa5f33cccd503d49f063c884f3d3ef22350a81183dc928e8bce03646c9591c7436c7eaa9deced9dad3f764e862eb1e2892f36a42e28eb0e","ssdeep":"6144:dccsLnxfq1sF9WdnMJZexbXvE0xade05HfUFTIBCl15Jw6uhmzs:dcdLnxfqyF9Wdn6ZexjvaF5HFIh26U","tlshash":"844423eb676d1a644321236d21c9a28b9f2fdd03cab41985cc45f1cffca984b1e245db","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.443971Z","times_seen":16,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.13.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.13.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 79444\r\ncf-ray: 9b3d66e96ac60afa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e60-13654\"\r\nlast-modified: Mon, 04 May 2020 16:10:08 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 521458\r\nexpires: Wed, 16 Dec 2026 03:13:23 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ynxMvRQGSfFJDYodp%2Bl1q1sWGLKYe1rGtG8ARQWj23aj95q1uCx913s864YsKRJW73bUDFxp1hLHL9QeW%2FWH03E25uiTmNg4%2BK82OdqB7W6DCGUsyCmllYJNC6QQ4iBTknsWTb4A\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79444,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 79444, version 331.524","md5":"b15db15f746f29ffa02638cb455b8ec0","sha1":"75a88815c47a249eadb5f0edc1675957f860cca7","sha256":"7f4d3fd0a705dbf8403298aad91d5de6972e6b5d536068eba8b24954a5a0a8c7","sha512":"84e621ac534c416cf13880059d76ce842fa74bb433a274aa5d106adbda20354fa5ed751ed1d13d0c393d54ceb37fe8dbd2f653e4cb791e9f9d3d2a50a250b05f","ssdeep":"1536:ogXevisOzyu5r4HjEIe9vyJFdiTCHnegAZ64RPmF17k+GbpJ0VxZrtbz:oTvissyu5eb0ciORAZ64Qrk+0Mzbz","tlshash":"6b7302c68d4ae504c87e0daa36b5a96651be9fc5720e4df6e8700cbcf1f12dc0266d19","first_seen":"2023-04-05T14:18:50Z","last_seen":"2026-06-22T01:01:51.47762Z","times_seen":26640,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":29,"dns":2,"connect":0,"send":0,"wait":14,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/toastr.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/toastr.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2654\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6454), with no line terminators","md5":"f284028c678041d687c6f1be6968f68a","sha1":"a668ec5d16eec86372216a8c1b161cdec3eebecf","sha256":"47dd690f8f315bea076e92581a7e7147443bb4c847e313ab5a7d50a8c44836d0","sha512":"e92d875b3545c6bb83959c48dec5ce659e3f789f007319101f5f898d27bf38d084a91f4be18b2ae49753e62a6ab7353b5876a5370cf006ffa2139d6034724da9","ssdeep":"96:XKZGSoKiejY1Sq9octKokNM/WQ78GhJZCjts/WP+zLmlDI/WKG8Czy4/WVMz2Tb3:XKZ6yjY1SqvKbBY8syRttzGjVMSbO6r","tlshash":"9bd18431da81361dfed3811af45966092d0be1b3e6ee5dae250fa1bcd2c67d06c33280","first_seen":"2023-04-05T23:07:13Z","last_seen":"2026-06-22T02:47:36.015584Z","times_seen":16681,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an1/3.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an1/3.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88168\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 602 x 564, 8-bit/color RGBA, non-interlaced","md5":"f23cd8944ee8ea30678880b8a79689e4","sha1":"010008556dc4f227100504ca610a3a7d94870fdd","sha256":"49fea6371fa16957bb97af5ee2aff95b07a668f8d031bc32d5d45040c32f18ba","sha512":"fe1ab79f2ac5724c3b4d0c75788cb39fc8b3ca830c56b0b1ad6a538e2af8e3520c1d4a5f3ca26f5a88600e81fb2accc0deb4e6b56f76f19771068839f144932d","ssdeep":"1536:hyuXTwa3X+U5lN+NZTfD57ctbjxxWtRIvgw1UzCHgZwcCmDSsc+ThnLD:hyuXTwa3jtITflwjxxWtREQz+wT48BD","tlshash":"0683024fcd63e8f35e931b9a4b74eafac614b096a366c9a02c5c443f91245e3381e717","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.442408Z","times_seen":18,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/online-payment.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/online-payment.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79308\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"353bddf366ff4e4156be2290a3f90cc6","sha1":"013f1899072763903b164f07ea4201faeb1e4660","sha256":"70e28f310fef04ec605d7c93a96f959701d5afc61f73f2a677fd92c5eb7b8920","sha512":"03ff9ec001d0b11e4d19f1210099d14acc4a09262248d17e1c7378715f4b7608745fd6f406f41b2900e0f22c43322ccabc63b426bdd350208d958f8ee982e8ec","ssdeep":"1536:xSLbCHw+moUDyGxMrNLOKVOXWv3Ly5tsA/b:EBoIuhnEXgLwvj","tlshash":"9c7302a699b4fba42853a83236e7735ccddd4653c040edd0fbcf50294fa51e04caa67a","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.345199Z","times_seen":18,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/inc/switcher/js/switcher.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /inc/switcher/js/switcher.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-22T02:37:38.931534Z","times_seen":135091,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v4.tidiochat.com/1_71_0/static/js/chunk-WidgetIframe-30e5efe384839d3598e9.js","fqdn":"widget-v4.tidiochat.com","domain":"tidiochat.com","tld":"com"},"ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidiochat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 19:18:36 GMT","end":"Mon, 26 Jan 2026 20:18:33 GMT"},"fingerprint":{"sha1":"AA:08:7A:49:9C:78:89:DC:2D:EF:BD:81:5F:91:A3:95:00:C3:7E:A1","sha256":"8A:20:13:A6:C0:3C:50:DD:EF:63:A2:FE:49:56:25:FB:78:8C:35:1E:68:5C:A0:D0:AA:CA:F6:F8:B8:78:C5:A4"}}},"request":{"raw":"GET /1_71_0/static/js/chunk-WidgetIframe-30e5efe384839d3598e9.js HTTP/1.1\r\nHost: widget-v4.tidiochat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Jun 2021 10:08:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60d0651b-530da\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFFcIGYchp4Njc%2BV%2B31dja0Kkhiq9ea%2BN2Iiw43adqgp0FLJ7BUWndw3HmKLPTTVqK0QLAcjFoPlxaws3HBuMxR6e%2FCWl%2BTsEM6b6CtrWEy68%2BCN\"}]}\r\ncf-ray: 9b3d66ebc99d56ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340186,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65439)","md5":"dd0cd7feae69bfdaa1ff8f356c47d4f2","sha1":"c41aff899f78733ec3236bff983fd2cabdb15f66","sha256":"72a80bc8a03635c33219e69e30a7202117c8de3c6fb1ad75f5e881b8f53308d8","sha512":"3c36f84d050e916dbcd685476d9a37f52190ee21af507d76192eeb1e07ca0f683c96b4e6f67211bee37e971a717f7f39207a0582f451cc7b057da16ca6e0234a","ssdeep":"3072:c/JvuW0iZn4SMMflpB1TeefuKMA6AzLRPMzlnAjC4Vbc6dUkD:IuWLB1eKMA6AzLRPMzlnAjvVbc6dUkD","tlshash":"ef744c88b1c2f86d529353b5906f3109f33d2d45b54ae450f2bad4e1ad9988da233f2f","first_seen":"2025-11-29T12:34:13.547556Z","last_seen":"2025-12-26T03:13:58.561565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":44,"dns":21,"connect":1,"send":0,"wait":216,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v4.tidiochat.com//1_71_0/static/js/widget.30e5efe384839d3598e9.js","fqdn":"widget-v4.tidiochat.com","domain":"tidiochat.com","tld":"com"},"ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidiochat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 19:18:36 GMT","end":"Mon, 26 Jan 2026 20:18:33 GMT"},"fingerprint":{"sha1":"AA:08:7A:49:9C:78:89:DC:2D:EF:BD:81:5F:91:A3:95:00:C3:7E:A1","sha256":"8A:20:13:A6:C0:3C:50:DD:EF:63:A2:FE:49:56:25:FB:78:8C:35:1E:68:5C:A0:D0:AA:CA:F6:F8:B8:78:C5:A4"}}},"request":{"raw":"GET //1_71_0/static/js/widget.30e5efe384839d3598e9.js HTTP/1.1\r\nHost: widget-v4.tidiochat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Jun 2021 10:08:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60d0651b-7dc4e\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvxwDjq5EawZXp9gZ1x6NPLILfCTmhWDVa1pGoeFSM4wcABgoPrmBctVLRIvmYXE4As2%2BHP%2FEPwOJom72pkINos0VujqqukzvNzIDM60SpxgGbOA\"}]}\r\ncf-ray: 9b3d66ed8a4556ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515150,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"4e5e7dde6f83a299d5826de2b690c155","sha1":"8857a148f144378c8393078cbddc5fbb6b0e6da4","sha256":"f80625d8c47541869c054eaed0331743061ae8bc1908a9abbb03f13431b682d9","sha512":"438d2a3ca96c4245aa6a91ec6ad654398a0cd90dc090e639cb2e76d4580e1af0d221cf6ce0ceda5872cb82e5998a2aeb4e126bcf81c76e907781a15d897668cb","ssdeep":"6144:xBQWNvCRlwL5irwaqGwN0GKVl5jANRTbfrl09L+kVo0sleppIFbeTw:jQ6n5irwfN31fkoQpIFbeTw","tlshash":"69b409c876d6f0a647f321b5406f140bf33e696a680d8550f211e8e57cb898ea237f6d","first_seen":"2025-11-29T12:34:13.562225Z","last_seen":"2025-12-26T03:13:58.563218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/all.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11743\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55785)","md5":"af179794bdeaf2585bcb16dedc95dbd4","sha1":"def7e1ef0d04f7d15c7bb9a9913a57d3def892ad","sha256":"b08b7e34195ddda845579d2d6a434eb6471fac1359470f8f3e39f6bcffaef0f3","sha512":"c265190013baf944a02927b748e1d87c2e52e0b6420595111ba89e0b7ef3981923657722f07bd8b5ae3b860151902e2afdbffbeb02837d20c5fc5aad3b2fcd97","ssdeep":"768:suC31sPizPq4/vnUAUHJvkQCg/xMQyjJrX759sGZQz6:suTPUC4/vMHBBC8gd7nsD2","tlshash":"cb430bb8e54c41c9a731c44fbf82b2bc61baf73de5910d95f00e691c2ad26a811c5fb9","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.448614Z","times_seen":19,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 04:05:50 GMT","end":"Thu, 05 Feb 2026 05:05:47 GMT"},"fingerprint":{"sha1":"CE:AE:8E:FE:2A:86:03:2B:16:43:FF:98:36:53:B2:ED:10:BF:FD:23","sha256":"95:CB:A8:7B:9C:88:98:F1:EF:D6:C9:79:E1:98:63:76:71:B7:BD:E2:89:6D:CD:55:61:DB:C0:4E:B1:1E:67:F7"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9b3d66e54849783d-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 08/01/2025 14:01:18\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7f5e7d4b602378a8bcf762a2fe144b56\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-22T02:37:55.900652Z","times_seen":288916,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":62,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:300,400,500,700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Rubik:300,400,500,700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 26 Dec 2025 03:13:23 GMT\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9976,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"97340ab5ce8730767341c296a9a84ba2","sha1":"8d48dd580a624c66bbb91a9e9653c597b7178b74","sha256":"8722bd46138d967abe2ea9498473123dc81d7f47f07b0fb2766d540eef999465","sha512":"24126072a18b79c4d4908546be4895601767fbd12a56e365520e4536943ef8913c21cdd46881da7efd33f58e3448dd3c0f801951a95cee5adb0d2ab6d4127bdb","ssdeep":"192:OhClzs7pCAFhhCl+sGAvAEuhClxs5rEAv8hCl3sflWAJp:llQAlVnlyBl8/","tlshash":"a422bbe1981e94447f472cc263ce2d37de0e6255309485299afd1f9aacbbc2233617ce","first_seen":"2025-09-11T14:47:32.373317Z","last_seen":"2026-06-20T10:53:20.675622Z","times_seen":302,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":190,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 19:43:25 GMT\r\nexpires: Thu, 24 Dec 2026 19:43:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 113399\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-22T01:43:55.125011Z","times_seen":66363,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/index","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /index HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an3/5.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an3/5.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3594\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"59401fe8c4d5142b47e28152a9747bd8","sha1":"15b09416fc8696bf073720ad63305ad90581324f","sha256":"c3f0e020616af3b96993e7f60dcfcf962e57182da00bc392f9b31fdfba857c1c","sha512":"6cc441c8b649fe7fc2c236d311716cfa8fc69d9a6b54f95a786acbacc54c429490ef4d0f34c01e558c4b2e301e77535d654535f6c91ae6190eda1c669da80c18","ssdeep":"","tlshash":"4f71fbb8d53300f2490e5dca9491eefee5031cca96f09732f8ee4b2967d22f52a05496","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.419866Z","times_seen":18,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/scrn-2.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/scrn-2.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61176\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 421, 8-bit/color RGBA, non-interlaced","md5":"71ca8b1600cbd27ef05abb709f5afc18","sha1":"3b11e1d74b923557a495bc5cce438dd50ee20904","sha256":"a452232c6a1482816f2162a74862e03b8896ffa4f3e2b98c496e1c3988c11de7","sha512":"cf488986648ccb9c33b5ac3c8d572d0539b14021013649af72d39415610af8542035d4b5226615601c0792ef461a10802e6983ebeb164593235c3190cf368846","ssdeep":"1536:Tl8RpQFDVfmn4IRlLw8AVZu/lKmeohDHe0t9Ami+NhRK+g6/X:TLUnlHEuNKmtBdHC+Nhh/","tlshash":"1653f1ed2c78d49e0ccf2a73c59b0f4b4957a0f6afdeab98e15a0c2d0114f2172a51d6","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.406029Z","times_seen":18,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1766064608","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1766064608 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 338898\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69428756-52bd2\"\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-25T23:24:40+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1539379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"429683434ebe5a56917c270fd4fff3d9","sha1":"1100b963d71a5ed5142a3f27fba72a332037cc26","sha256":"3fdd0cc3ccf0cbc7c076bbd91fdb1ad1438d013a0c5215cadda28f3926d8f959","sha512":"129a00414e4711ea8910d9029ac44c4c7999637537a506872582514f539ac9bcbef6a7370f9e4b8533d6ab5b1f94971d02522b1162797d46aa25522c7b7cd6e1","ssdeep":"24576:j/hLnS6Ulw3nfy8iEKMQZiyIf9CQ/E0zOVch1meapEuo2Mdomrt7ku:jJLl368iEKMpyGP/E0ueapEuo2Mdomrr","tlshash":"67254ac5b1c1f46503d355e6643b2009f23a285e7809b064fabcddcbea6659e6233f39","first_seen":"2025-12-18T13:47:04.087198Z","last_seen":"2026-01-28T05:35:47.405785Z","times_seen":629,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/0a66b6c/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/0a66b6c/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 25391\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69428755-632f\"\r\nexpires: Sun, 28 Dec 2025 13:26:53 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:01 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-18T13:26:53+00:00\r\nx-node: m9-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2663656fdbaed65d0bd1369033be00f8","sha1":"82de76cc3b444f6e51a15a70bf08dd3dbfaca506","sha256":"2236627a941a3b0104041db8bf5658394a87a6597106e3565f7ad4e296d2edb3","sha512":"d074ae221b098b3d037e0baa169942774dcdd263c9aef1123bac326dd6b91d964f37d43a5fce40a984be8950825bdb3274a9109bbda9034b99c459019e63a0de","ssdeep":"1536:KL5xTKw/y16y6hrhJDu/yd2g28S3pWyg6I6/V+ulR45US6IFYPQliJOYO3DN6+cc:85kPPrPgl","tlshash":"c5d3f966ead2993ce91e541ac985aa3ca63dd403cf230daff744e3d147c76e31276809","first_seen":"2025-12-18T13:47:04.082621Z","last_seen":"2026-01-28T05:35:47.400551Z","times_seen":634,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:25.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-1396\"\r\nexpires: Sat, 24 Jan 2026 23:24:38 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-25T23:24:38+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-21T19:35:18.517488Z","times_seen":16436,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/btSAZW7tD7","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/btSAZW7tD7 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6199\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69428756-1837\"\r\nexpires: Fri, 26 Dec 2025 05:13:23 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc71\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18065), with no line terminators","md5":"fbd96dd326c2a5d25cee0038f3288bec","sha1":"d0f2bc4be45bc2e7a054bab170e21b4412ef7a91","sha256":"d95411e817031304101360d4319db31b280f5a705d80e9b3685c7218f1033182","sha512":"34342f64d66d25f2beeabf20ad33fbb3d93896481e128a1f5c075609348cfe62bc763d2dc39643cc322317745c4154b730a0902263fba34e1316a26844ba9c66","ssdeep":"384:boU4JkQamum0400rAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMVAfX7WO8UFWcPY4","tlshash":"84822b6e7959b97743b208f9606f6209733549ebd404c920a401ea4d7db8ade813fef8","first_seen":"2025-12-18T13:26:00.120545Z","last_seen":"2026-02-18T15:22:47.278487Z","times_seen":932,"resource_available":true,"data":null}},"time_used":1017,"timings":{"blocked":442,"dns":149,"connect":63,"send":0,"wait":86,"receive":1,"ssl":273},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/css/roysha-icons.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/css/roysha-icons.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2509\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"86ccd292e5e332ddaf57895e8a7ae39f","sha1":"e766df3fb24a8e79d39be2beed7db95d293aa98a","sha256":"794fc3748fa38f320bf7a2f98874a72692aba71f128728f4cbedc91b54449f99","sha512":"d801e22b6851cf9e112744503bf81520cfbf5d65ddb6b01a831125d8996fb6bab3b5c83821916195948104a65f6679e7ccad7f20c0cd47154bbbf3be4ebf7ab6","ssdeep":"384:KmY1TfZWzrT0UAo886i2jZSFNxx9NJLtnmmZSxIzXMa:2Axx9NJLtnmmZSxIzXd","tlshash":"8c03f9d08a7d048147cbc2e415d1917e77857a964e2fc94b8bb238dcdedaa09f8931ec","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.440103Z","times_seen":18,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/nice-select.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/nice-select.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 931\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a7ace323b9fc8a831a6e64feb23fa0b9","sha1":"9317ad29306bc72eb3fa92981be8141fcd394e7c","sha256":"c13280e79f74109c5e3854822c0f0c972d0a57245c95b0b3762f9788bd918f8d","sha512":"b87b828a0726bf70724ea050404c278175a4ec4fcd68f60ff821609699173e74506d2b9b26610436087e8ad44361b595d1f519994cfb7c3ffe24375e4050f9f8","ssdeep":"","tlshash":"2781e2779b530141642a876fafd62b582339c003b826cdacbbdd960b8f0d5dc94e6747","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-06-21T23:46:57.121564Z","times_seen":3752,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/images/logo.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10609\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 137, 8-bit/color RGBA, non-interlaced","md5":"b65830939d7ff5de8ad8d6a6b051945d","sha1":"abedc19dec71ce17bfe0f1371dc942b1f5ad4fda","sha256":"5f5dd5dc762068c7677b6f07c5773695d602801db38580f30fa7b1eb7e2da1ec","sha512":"059b079894671663356b322f29a0976615beeccaf6847cc444fe41248c5f230be053488b94917b93caa8ac9c374921b8b836e480f5df01fecfce2983f1fb8d94","ssdeep":"192:RI9WsfiegkmjteNW5q3ciU99HZmHbfY1zxX+pKmRMDLkaZSxP:8WRlxnq3ciU99kjMzxX6KmmDsxP","tlshash":"4222be98fa30e4764ea3817bd05faf432a671aa619d5900ffa046f3e1222def0477d15","first_seen":"2025-11-29T12:34:13.528906Z","last_seen":"2025-12-26T03:13:58.57139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/owl.carousel.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/owl.carousel.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11139\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-06-22T01:46:38.021395Z","times_seen":61147,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/images/logo.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10609\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 137, 8-bit/color RGBA, non-interlaced","md5":"b65830939d7ff5de8ad8d6a6b051945d","sha1":"abedc19dec71ce17bfe0f1371dc942b1f5ad4fda","sha256":"5f5dd5dc762068c7677b6f07c5773695d602801db38580f30fa7b1eb7e2da1ec","sha512":"059b079894671663356b322f29a0976615beeccaf6847cc444fe41248c5f230be053488b94917b93caa8ac9c374921b8b836e480f5df01fecfce2983f1fb8d94","ssdeep":"192:RI9WsfiegkmjteNW5q3ciU99HZmHbfY1zxX+pKmRMDLkaZSxP:8WRlxnq3ciU99kjMzxX6KmmDsxP","tlshash":"4222be98fa30e4764ea3817bd05faf432a671aa619d5900ffa046f3e1222def0477d15","first_seen":"2025-11-29T12:34:13.528906Z","last_seen":"2025-12-26T03:13:58.57139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an1/1.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an1/1.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41572\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 602 x 564, 8-bit/color RGBA, non-interlaced","md5":"4369fad7cb0e6a6c51d185ac4521cbc2","sha1":"d91d87a1554607aeccca9595b061d012c7cee4b5","sha256":"abf3f28c3e8ff618bc9d0c7d20fe72a62b9fe79b33db51c89aaa4e6e8426b540","sha512":"dfdf2fb640317514df631edf2f2d0029f0a0365ad38a59b0b0bc79d72786362357ace6cba1b7481e85d8a6ed7fa26d2d48515471430ec4e3542775e55fed1924","ssdeep":"768:aj481Q5ccvRY0Rno5NTcatOJCSwUbfCQRB2Gwk+2jPtrHQhZBFF:A485c2DdOhbfuija9","tlshash":"0d13d0487d0db06fc02c6434893a74a1b1f49da9a8f416307e9fbbf2b6875c54e27d84","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.424861Z","times_seen":17,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/toastr.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/toastr.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1853\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5217,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"57b703726fe13ac3579b559e7dfc7a46","sha1":"9691d795cfa6c5c4af45f1439a9b3f3782e6ee6e","sha256":"7fe565f3385448e1ec8d57dc2c1639d723561f1aabc2e3d547e284bbf9f9b073","sha512":"c6e60b917e6d285befafa3bd2bfb144a8b1bb8344418498ff86d1c54ff459ee288ef9f9520b03995ff3005094f077edd823134575a63bf7cb159aa899c335a1a","ssdeep":"96:OdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02tfrS:O4BtcvvRqIQcNa74c7rS","tlshash":"b2b18384b220b78b1bb31079919f140b937673b2ccce5440763aa9987e7082c97a7fdd","first_seen":"2023-03-07T12:25:14Z","last_seen":"2026-06-18T05:37:47.023218Z","times_seen":293,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251215","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20251215 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-lSTE5iwqO_dXjzyiyr5EXQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw1JBiEOLhuPJr-yk2gQ3nJt5hVFJKyi-MLylKzCvOSSxJLU4tKkstijcyMDI1NDI01TOwiC8wAAA0YxMz\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=30.SE=CpiuKxY9jxuyLfZF6vr-kPcKFfjJ4-OLIZam2G4uHTI_T9bpGhMKq-tz7g9kKOG9QWxgAjS1pnDoelYvehj1eeu1P5d83t1MwtSeqDN3kM4Hkzy--5tSmSxtyxnDmWUyoDgxEz7pqbygc0UEqDMNFKfmyrF13e3n5Tdn-6GsQWkaD6erjVGDXEn0UoIibFyz523gCQKalh8cLKTeAwz2nZGVK3GhknZ8hn2VIqEdaZnwbLir2drFJg; expires=Mon, 25-Jan-2027 19:31:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.magnific-popup.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery.magnific-popup.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12078\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41730,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5b23ded83b6a631b06040ed574e43dd6","sha1":"554d5d9da772b0145af586fc73e7e23403aef9d5","sha256":"c24ed0313cd813b049be4a3d06ccb03f34662b3842b4840a4ee37afc1f6c466c","sha512":"0b5cef75bf51e79440925eb108b4cfb7e5a6733eacf9c70ebdcafa1b9ee56e6f0cd9f6e09f64948d425b435ddf1328ee2d58b07bdeee26fc1ad4451fe05d4093","ssdeep":"768:11x9gvJxzPtwiurw50N12C7xSS8XUOU/YDUUevp7g1H:11x9gvJxzPtwiTeN/8S8kR/YDUUeh01H","tlshash":"ce1374d4f7ac215782b2336c9c5e11cd6e3ce132da138cafbc99226810d596c9379e79","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-21T17:02:06.82726Z","times_seen":3079,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/select2.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/select2.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18558\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64125)","md5":"1e3d14fddf0553e0b51f69cdccd4fd7f","sha1":"b36737e7d2a65815c40ac86d0502f0cbb8b9bad8","sha256":"9c04b5c034013c1a9ad5f9d9abcc1dd59e8237e3e09875cb15d328d20da961fd","sha512":"aa228ce8525b239c79f862f90846c050ad2cb918635d53115e71ff5d025a690ea240f7f4e57c5b1411388d2e952733c621183bc511194eb189219564d4c2dc94","ssdeep":"768:voRWDhrrJ/Y6EvKqtB8Nnoc9DpPJRGookOlxNjuvSnJx0ejVrMbusSzXAFo8Jw:/ACno0okOvhrZ6b5KEc","tlshash":"5063b64c7a53723502af20e6356b180922376b3e500b9668b028cded5dbdd15736bf7e","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-06-21T16:05:49.86076Z","times_seen":8096,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/scrn-3.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/scrn-3.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 101204\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 838 x 421, 8-bit/color RGBA, non-interlaced","md5":"c312ae6595e6077afe689caca235411b","sha1":"d84755c385cf8f67d0d5e41bafb63474b40f225d","sha256":"1d4b6dc79db1c3b25d04d6eb69e71f8e16321f630102060e390f7146b2dc146e","sha512":"ac6230c729d43d52058881855b4c0ddd7687c1743880b75c9e68121b10e0bb7da697e3e53f76091caa8b65ce18e7f4e75c1a6d227bad535c146cfbedc321fbcb","ssdeep":"1536:RX5zA5kLvP7JSZF9pC5KVtcFtdQS5356htj1q95jAu7nJF+PkBUs5ALGALf6u9:RX9tLvMLTqGSmb+jAu7z+Pzs5Mb6U","tlshash":"eaa31255e9a5e536fc662b25f5300e1b8d6bb913f329e51a4a0018ec2dcb4738f0c53e","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.327024Z","times_seen":18,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery-ui.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery-ui.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 65650\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":253668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33326)","md5":"80ffc45945634e286174e2e8c812e3c8","sha1":"884e357d6cff8b7de88b9ecae37ce9256d05dde8","sha256":"eaf9709387d61e3c516b255baf988a1a74ce7d83918a9566cf508bfe0f98ab86","sha512":"29e311e0d5baed4dd79c0727905783a7200a07f701ee5707abbf704da60d3989ba9d87e25eb96c3c404106dbf6ccab1b9f1ac1cbb0d3a5b72c0db5d2ea9c46bf","ssdeep":"3072:VkvBNnLO1wG0qOOO8D5BnAcKcv1/i/fXMS6PuQr1Q7SV7opS:4LODl6c/KuS6Px","tlshash":"d644f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-08T04:38:18Z","last_seen":"2026-06-15T02:05:54.423354Z","times_seen":27,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/owl.carousel2.thumbs.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/owl.carousel2.thumbs.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1013\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3342)","md5":"7d922b451a6e40e9a527c04cfe98fae1","sha1":"25120415aabc820193d8ef300546f44da23ccbe1","sha256":"9ff4a4e68c8d720d537ce02871a7cfd72305169f0d2c5bb9129af006a6e7bf51","sha512":"252db50e928b3fd35b2acb26b51de096467bef92a9d199d8d342d82c36aecb7e03d7a5dbc7f56bd1dfaa09fa6ead16adb64b47e6a098c163c3104966f49d97f5","ssdeep":"","tlshash":"d461bbe671152272555b82ec90a5548ff23fa62aee841c2f745466dec0ee90d30eef34","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-21T12:53:33.160335Z","times_seen":445,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:34.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://paramountfinacings.com/\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://paramountfinacings.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Fri, 26 Dec 2025 03:13:34 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/bootstrap.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20941\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"a15c2ac3234aa8f6064ef9c1f7383c37","sha1":"6e10354828454898fda80f55f3decb347fd9ed21","sha256":"60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36","sha512":"b435cf71a9ae66c59677a3ac285c87ea702a87f32367fe5893cf13e68f9a31fca0a8d14f6a7d692f23c5027751ce63961ca4fe8d20f35a926ff24ae3eb1d4b30","ssdeep":"1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F","tlshash":"68e386a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T08:00:04Z","last_seen":"2026-06-22T02:21:21.658875Z","times_seen":42058,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/select2.min.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/select2.min.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1851\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15822)","md5":"809b4f5299218eab37a7c31e4c20478b","sha1":"c9448efbf22bc6f6fbbbbfebbd656642bab13767","sha256":"907f4395f54e25a1da1181672f1a498e98b26f7bfc6dcb6c209a737472451e49","sha512":"c88d9738b88b4d0b4503d21878f5344355add0c8e6fd492694a332e13538a0d5c4c2cd0bc9ba9b89f6cef2df6b10853ae6a766b68990110f9bdd77cb7c2ccd6b","ssdeep":"192:1EaNSbuenTfc3aq6JYhKQ9CPxWqAUJKk3BcH9t39:1EueTfXnYwQ9sWqbxRcdp9","tlshash":"7c62c935bacc2235b0bf8e7f6cf1b4946729ed5fc4111b9ab8e9e194c8e04540a4b60f","first_seen":"2023-04-09T05:17:53Z","last_seen":"2026-06-21T16:05:49.871429Z","times_seen":8371,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:09 GMT","end":"Wed, 25 Feb 2026 15:50:08 GMT"},"fingerprint":{"sha1":"70:35:5F:58:F3:50:B0:2A:0E:11:9A:FD:D4:67:00:94:17:0E:03:EF","sha256":"01:93:34:8C:59:AC:52:25:54:81:E8:50:E1:E9:8A:11:1F:3C:82:81:00:B2:90:35:17:5F:25:9C:C2:2D:D2:E2"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79553,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"9be9477b23826704ec28553e50e1b142","sha1":"7d0bdb6513967b86ba9d238379ab4fe6ace44e09","sha256":"14dceb20fd22927b6a9eb23fe8745e0555e7eaa1e12b6ffd0a2748018cd31813","sha512":"65c8ef66e5c849a24754bed99e72112e4a9fa8f131c531b43f063af2aa4861aa6e9d930f74c310f79912df19e00d86a33c6fde6f4de6f16d5ecb7c28f4f6dc72","ssdeep":"1536:XNHbUV8ZV7mgU1l4C0KGY8D60nKucbR7ChiqwNWrh:Xt7C0KGmehimh","tlshash":"f173b7ccb6a675618263f5b5513f000fb27b599af8084cadb288d8e1adb494c413bf7d","first_seen":"2025-12-26T03:07:48.173445Z","last_seen":"2025-12-26T03:57:29.774237Z","times_seen":3,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":142,"dns":1,"connect":28,"send":0,"wait":140,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.countdown.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery.countdown.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2238\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5339,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136)","md5":"5d3ff3c3fbaa67cc639501f44eeb07be","sha1":"bd66e4cd58de09c198e7abc77fa4c883955d189e","sha256":"2249399b2268c260d0698542503d16afebc80e437c846239f12196744ebbd40f","sha512":"96d7ae443f9a50436b64f4d758544f4c17030f120659ee6ebb46a93c49fedd92980f00da104ac82bdaef474433506994439e4a144d91a864d5a19b0a72d18c57","ssdeep":"96:kbG5QHArNbeRFMSiM3jG6Ghdynv/2bBqz2eJxMxHxqxAxixw3xexIxrxAxW7qD2O:fQH+UpxGhdBqztJxMxHxqxAxixw3xexx","tlshash":"71b1c6ceb3b213d5089553b101ae1506613bf25be4e6001cb5fceac87a65c5d607fd78","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-22T01:46:37.909428Z","times_seen":10527,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.onscreen.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery.onscreen.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2510\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1294)","md5":"33a3914cff741cb7f7bb323b8433233e","sha1":"35ca576406057ff8580b4ef226da8a40b501940b","sha256":"8f7d3d9629606ef4a561616eba0c18549fea801cc18c3a74e0ee4a3141bcbda2","sha512":"26dd35fcac4ffaad971e44de38827abef31072740650095de1e0b53a84c0743d8490032249d5adeb4da51346f2398734c704e62ce64fb1c3f4336cf9c6a8f73c","ssdeep":"192:ZuSa4h1NgiqIlTBka4TUKnlst135eFhi+1q2UfVJyB/:MCgisVl5efVJc","tlshash":"1d22137c29e37230a967b85d4b9fa4056e24a053b108dc103e4dd7e0efe586456e3aed","first_seen":"2023-03-08T01:40:50Z","last_seen":"2026-03-16T06:49:27.457724Z","times_seen":16,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:03:44 GMT\r\nexpires: Sun, 20 Dec 2026 11:03:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 490179\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-06-18T13:32:36.803927Z","times_seen":37897,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Dec 2025 19:09:03 GMT\r\nexpires: Sat, 19 Dec 2026 19:09:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 547460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-22T00:43:07.983436Z","times_seen":30011,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":74,"dns":1,"connect":21,"send":0,"wait":22,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/fonts/roysha-icon-14044.ttf","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/fonts/roysha-icon-14044.ttf HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/frontassets/css/roysha-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:23 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24329\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49736,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, roysha-icon","md5":"672d2a099f53b27c7153cc5e9263488c","sha1":"8de242218b515394c25cf274c352207e59639c10","sha256":"8aa3db5fba1d4316f81ac0e626bf613e593f279b0f15d281189c936d9320f82d","sha512":"f9e8111a2e913159626f1822baa31f46e342fe5d5527225563c97bd4d0ab0798d00563fe6bef86304c583579b08f3f3fab4ca057aaf75c6c5c01a1d8337f9f1c","ssdeep":"1536:1XkO50P6edh6QFTADzv/wwi9Uo5b0sWmcP:1XkOaP605AvQwilN0sW","tlshash":"f9237d2fa78bcfafd55219fa0d4413791debeb281737d3036d865d28e0461948c287ae","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.442976Z","times_seen":19,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/pe-icon-7-stroke.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/pe-icon-7-stroke.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1701\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9755,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"029dc332c1539ef11a0ca3e57954b796","sha1":"62ca11cf1604d062e6d7205abdf8c4ed31aa5fe5","sha256":"4f57174021830742b2710bebe16f78e2d6c2d310778bd7a75638e5d8530b6d0d","sha512":"1f7e6a0918abe7ca9ff871ae8d1b4ceaec1de1cac5a1e910d0d4c78db75d5c8e63c3ec5a1fbaec32dda639fb301b81c8d434f5fb22d52e53bb7d711023b89f6b","ssdeep":"96:wSRjpSCRnzuudOeo9qjwYKoZc3AHdOJz5BJOSTrbI2RLcwR/UGkqmMMO0s+9o/47:BjtzCTq18t05xpoCr6vHO","tlshash":"7412caa4fd2f38a25791e0d16ad82b552f0de26d9f012c79c81b7e7cb3d321ca5806d8","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.40889Z","times_seen":17,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Dec 2025 19:09:03 GMT\r\nexpires: Sat, 19 Dec 2026 19:09:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 547460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-22T00:43:07.983436Z","times_seen":30011,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":44,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/btSAZW7tD7","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/btSAZW7tD7 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 721\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Fri, 26 Dec 2025 05:13:23 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc11\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"d9f4a4f608a6289fcd816bc4542dfc97","sha1":"719158d0e4a261958293f62b9b35b4c9f121faa5","sha256":"e18d0de2d1dc19c43de895cd2a95e0a2ab2d9837b66a12f4d9d45ad9830281c7","sha512":"261541ac8c3ca17319199d2dc1f163094135c82f83103e526c3df7cf0c01ac5db5eec4b286240a3e5701540ea8fba28b6405c561a4374d470aa7f7bd354778d0","ssdeep":"","tlshash":"ef2114e24c4c58774d82bec7622bfe03253c8367ef824e74db949d2c11563d9130b64a","first_seen":"2025-12-26T03:13:58.589155Z","last_seen":"2025-12-26T03:13:58.589155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":124,"dns":1,"connect":59,"send":0,"wait":256,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v4.tidiochat.com//tururu.mp3","fqdn":"widget-v4.tidiochat.com","domain":"tidiochat.com","tld":"com"},"ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidiochat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 19:18:36 GMT","end":"Mon, 26 Jan 2026 20:18:33 GMT"},"fingerprint":{"sha1":"AA:08:7A:49:9C:78:89:DC:2D:EF:BD:81:5F:91:A3:95:00:C3:7E:A1","sha256":"8A:20:13:A6:C0:3C:50:DD:EF:63:A2:FE:49:56:25:FB:78:8C:35:1E:68:5C:A0:D0:AA:CA:F6:F8:B8:78:C5:A4"}}},"request":{"raw":"GET //tururu.mp3 HTTP/1.1\r\nHost: widget-v4.tidiochat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 10:32:14 GMT\r\netag: \"690c792e-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 3796530\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FH%2Fgz22NIruorV6Rw20jhytSVfOWn70L70J6OD5kFhz1S8AuJU96FMPtOgNepmRKiYMLt0uJNfcZlNlS5NMgFuVuJk%2FyTv5P%2B5dBsHpfhO4Zczn5\"}]}\r\ncf-ray: 9b3d66ebd9a556ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-06-22T00:20:21.923143Z","times_seen":8702,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":24,"dns":3,"connect":1,"send":0,"wait":8,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:25.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-eb0\"\r\nexpires: Mon, 19 Jan 2026 23:58:02 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-20T23:58:03+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-21T19:35:18.739698Z","times_seen":16436,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/css/custom.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T02:29:52.920518Z","times_seen":16623839,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/scrn-1.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/scrn-1.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107886\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 892 x 533, 8-bit/color RGBA, non-interlaced","md5":"d5f4472c16343a631ebe603cd560ee9e","sha1":"2b3c766a322e5c58083d8f715fc992c03e6b4a25","sha256":"e759793d81a67d06524b535f338d3cd43c40a543578d2b1041881af6fc999c2a","sha512":"8b0085d2baf6c440da541e775f5e5a1e120721d2e3249ee68d7b0a3031df78ee956dd0c723f1230973bdc0458dd374cb81407c64838d49ca36bf35585cc89056","ssdeep":"3072:vaz7+W5X6ZtF+WDkop3fGQGqUVnm+T+YuWXMy1rO8:Cl5k+WTp0nm+TsWHx","tlshash":"8bb3126f53f0d6dfc84f3db7d14c2be3230783254a81986549dad09e16cae0692b9b47","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.386354Z","times_seen":18,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/bootstrap.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14764\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"e1d98d47689e00f8ecbc5d9f61bdb42e","sha1":"6778fed3cf095a318141a31f455c8f4663885bde","sha256":"0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b","sha512":"021e615983f30ec5477fd8b611e8c5045ac6d9900f9a9bb8649b56e0c7d282965a727f8cf501c3b7e1ddff02f5b44924d5481bcea7a926be8a9e166314a07ed0","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk","tlshash":"1243c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-06-22T01:57:35.976033Z","times_seen":27302,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/js/jquery.fancybox.min.js","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /js/jquery.fancybox.min.js HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20999\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68253,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31972)","md5":"49a6b4d019a934bcf83f0c397eba82d8","sha1":"6181412e73966696d08e1e5b1243a572d0f22ba6","sha256":"cadda460ccb4c3c01bb45f3d5976f63f5adf8dc3ff1d31cb4fbd3ded4f18e5bf","sha512":"b94465f995cc06b17803019a5a611eb73addf89e7ff0d464580bc9c79b1b3d24ae39bd1b64ba9ffad3b39e239b3b4d018c76bf743ee0b9bf6808630b3d01ed40","ssdeep":"1536:HVzfGevmRzMMdZfupgfjJ3kNEO261NyYMk5Sl5BSENlfmqxGcTJ7PBTf:hfGevmRzMMdZfupgbJ3klNyYMZlvIqxH","tlshash":"5863089eb710742582bb15a4a30f610ed1377526f10285f378add4951ae4fc822ebffa","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-06-22T01:54:47.632876Z","times_seen":26178,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v4.tidiochat.com//tururu.mp3","fqdn":"widget-v4.tidiochat.com","domain":"tidiochat.com","tld":"com"},"ip":{"addr":"104.26.9.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidiochat.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 19:18:36 GMT","end":"Mon, 26 Jan 2026 20:18:33 GMT"},"fingerprint":{"sha1":"AA:08:7A:49:9C:78:89:DC:2D:EF:BD:81:5F:91:A3:95:00:C3:7E:A1","sha256":"8A:20:13:A6:C0:3C:50:DD:EF:63:A2:FE:49:56:25:FB:78:8C:35:1E:68:5C:A0:D0:AA:CA:F6:F8:B8:78:C5:A4"}}},"request":{"raw":"GET //tururu.mp3 HTTP/1.1\r\nHost: widget-v4.tidiochat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 10:32:14 GMT\r\netag: \"690c792e-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 3796531\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCSPqNSVqIlYNKArgM7sUEO2leMdu%2BDFU%2F763P%2Fg9AOvi8JJIrHzt72RTJzVkAnJY4H%2FdkOFlPskSumcfb8y%2BZ06YPCeahj8vrUTBqhE9dED9Yu2\"}]}\r\ncf-ray: 9b3d66f06b1156ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-06-22T00:20:21.923143Z","times_seen":8702,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:34.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://paramountfinacings.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1187\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1187,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20251215\",null,null,[4,0]]],1871,[[\"1766718804116\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"90FF5AF2-F34A-4797-9A0F-1D5FBAD01DCC\\\",[\\\"https://paramountfinacings.com\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,377000000],[null,377000000],[null,377000000],[null,377000000],[null,377000000],[null,377000000],null,[null,475000000],[null,476000000],5160,4985,24956]],[\\\"translate:page_load_to_initialized\\\",[null,476000000],[1,692000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1766718814118\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://paramountfinacings.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 26 Dec 2025 03:13:34 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-22T02:28:01.784246Z","times_seen":561856,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an1/4.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an1/4.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12184\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 602 x 564, 8-bit/color RGBA, non-interlaced","md5":"664908d651562593fe7ce5a1cb232a76","sha1":"452f3f65364cb41b7f150eba4ba18f83447f78aa","sha256":"0129a9406f86c5acc019cf3d9e771c83522f590ec7682c0889946b7ecc03faf8","sha512":"9e7b889aeff503ad41992b2aa18007deababb35065ec3e7504e329dc2674d9a78d8a9aa21d9ad1bc1899d60645a54795ccf2bab08e44dae6af441a7584c12559","ssdeep":"192:4eDFE62sVrFXR7BwoP3gjAaU45EvMVETerBOsD8Mmi06T:jDd2QfdFKAaPd2eb8MmXa","tlshash":"e44209c1f4d515e9697c2c5ec3255a1096399a84ffb423b8787b332e381b0dadaa48c7","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.325514Z","times_seen":18,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an3/4.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an3/4.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3923\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3923,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"c79bd3e8b1fbe2228f2f14633e2d2509","sha1":"e29893ea8871fe3c259bcd407762408c3956be39","sha256":"9ab1d2e33ab2a014888ad563cbdcff839ad4e4e09d10a2132943c2a6b2df34ea","sha512":"7319d14f2bf907a95717116150cf792ad127155706fd61f514136b981b8788aae32c911cc81447a0608f97b77ded17533df8173c4c5484bc96cd9323b6d5d081","ssdeep":"","tlshash":"41812dbce53304f6454e5ec98182eefee9135cca86e05332e8ed4b2827c23f53a16494","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.43632Z","times_seen":18,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":276,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:42:47 GMT\r\nexpires: Sun, 20 Dec 2026 10:42:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 491437\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-22T01:43:55.143725Z","times_seen":49976,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-6.jivosite.com/widget/status/2444956/btSAZW7tD7?rnd=0.9586078787354992","fqdn":"node-ya-6.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"158.160.53.45","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2444956/btSAZW7tD7?rnd=0.9586078787354992 HTTP/1.1\r\nHost: node-ya-6.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://paramountfinacings.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://paramountfinacings.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 176\r\ndate: Fri, 26 Dec 2025 03:13:24 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"910ea2edbe6ff07de6f741bb24583dd9","sha1":"d3b180157f2d557d2d97efa45457e907ef2fd5a5","sha256":"19d9624c6e236dc04db89607b05b36dd8a7c9087d38b19dbd9c3548c51bf5265","sha512":"69813a932a2ce87b4e6828c4d3294c77e60bad82d5ae12e046e0b247bad650b1cbd388b3829ad6fa9dac77b1d82a040afd003b91ce01a09855e8cd05b876c6b0","ssdeep":"","tlshash":"5cc0803e043554f60f948570f2c77747417c190319d3d754d681ec55509e6d1844f007","first_seen":"2025-11-29T12:34:13.531698Z","last_seen":"2025-12-26T03:13:58.595548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":133,"dns":59,"connect":33,"send":0,"wait":32,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/frontassets/images/an3/6.png","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:22.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /frontassets/images/an3/6.png HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Jan 2026 03:13:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Apr 2024 09:53:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3632\r\ndate: Fri, 26 Dec 2025 03:13:22 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 593 x 490, 8-bit/color RGBA, non-interlaced","md5":"d3b9ecb460ab958794f9236bce4a402a","sha1":"bcabd536b71637a01538ff6e7fd2d9389eb31506","sha256":"cc7bdbe5952b1837bba84b50fd77e69c6c21d885981a39304b9513d78345ddd7","sha512":"9d8ab9daf72ee99423017f1ed57cd6d862bbcf741bbc324e561000badbc0a501faaaa2baebfc3beffb197991c990ddfd89ef78fed712fd3b883acb5b34d8499c","ssdeep":"","tlshash":"0771dba8d47314f3041e5dc98492eeeee5430cca97f04772a8ed472923d63f56e055a6","first_seen":"2023-05-24T22:25:38Z","last_seen":"2026-06-15T02:05:54.389508Z","times_seen":18,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"paramountfinacings.com/inc/switcher/css/switcher.css","fqdn":"paramountfinacings.com","domain":"paramountfinacings.com","tld":"com"},"ip":{"addr":"69.10.62.204","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:23.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.paramountfinacings.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Dec 2025 01:46:42 GMT","end":"Mon, 02 Mar 2026 01:46:41 GMT"},"fingerprint":{"sha1":"52:98:5A:55:65:E1:C1:02:83:A5:E7:07:46:11:5D:AB:45:AB:A5:23","sha256":"C7:EB:4C:1B:BE:1B:9F:91:7B:FD:A5:01:7A:2A:8C:06:31:58:55:23:06:10:11:37:5B:F8:67:4A:A9:1A:D3:C8"}}},"request":{"raw":"GET /inc/switcher/css/switcher.css HTTP/1.1\r\nHost: paramountfinacings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/index\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 26 Dec 2025 03:13:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-22T02:37:38.931534Z","times_seen":135091,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"paramountfinacings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:57:46 GMT\r\nexpires: Sun, 20 Dec 2026 10:57:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 490538\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-22T01:43:55.172508Z","times_seen":70964,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:24.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAQD/d=0/rs=AN8SPfo9mDPo5pOm0HC4yPcwcdDdHSiNXw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:03:44 GMT\r\nexpires: Sun, 20 Dec 2026 11:03:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 490180\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-06-18T13:32:36.803927Z","times_seen":37897,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://paramountfinacings.com/index","date":"2025-12-26T03:13:25.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://paramountfinacings.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Fri, 26 Dec 2025 03:13:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-16b0\"\r\nexpires: Mon, 19 Jan 2026 23:57:24 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2025-12-20T23:57:24+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-21T19:35:18.554059Z","times_seen":16437,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}