{"report_id":"c5d238c3-78e9-4aa8-a89e-4c92868a7ca7","version":0,"status":"done","tags":[],"date":"2026-09-19T04:52:30Z","url":{"schema":"https","addr":"parik24.yug.odessa.ua/","fqdn":"parik24.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"104.21.76.4","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"title":"Парик 24 (Parik24) | Обзор официального сайта онлайн казино и БК","dom":{"size":136977,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6024)","md5":"4a82925d8d57e3591eb512a59ee1e7c1","sha1":"5fa2141ba67ab100b670f4dc8cba99058fa80e49","sha256":"3adfbabf2533c7f0aa82606f9b5e47c54774f154ecdaa6d85bb12f5169c285ab","sha512":"dfe8c75bb00d5e8ac02c03e55ff0677cf4eff040c2f072c882cb984e786abbc138cb922c3808b673a2126b2d48179ce8693b46205f853ac3dc4733234ca4e35e","ssdeep":"3072:c8x1WG+zs4g7CLnJEtSBqp7vDbajxG0GR3SE1Lu/zw+0Akc2a:c8xJ+Q4kanJEtSe7vXaVcR3SE1Lu/zws","tlshash":"4dd3d771699d189f1303b08ad9187f0e39a760ffbf67471315f82dbe76e2468c628219","dom_hash":"domhash5c4eb732b417ea7e98b90ad4e0fcc43e","first_seen":"2026-09-19T04:47:49.352229Z","last_seen":"2026-09-19T04:52:49.352475Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"parik24.yug.odessa.ua/","fqdn":"parik24.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"104.21.76.4","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T04:52:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"parik24casino.yug.odessa.ua","ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-05","domain_rank":0,"first_seen":"2026-09-17T05:53:19.667113Z","last_seen":"2026-09-17T05:53:19.667113Z","alert_count":56,"request_count":28,"received_data":1700192,"sent_data":16186,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]}]},{"fqdn":"cdn.usefathom.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-04-15","domain_rank":129518,"first_seen":"2018-08-31T10:04:23Z","last_seen":"2026-09-18T16:07:55.050367Z","alert_count":0,"request_count":2,"received_data":8220,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":2,"received_data":17104,"sent_data":1089,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":10,"received_data":260010,"sent_data":5705,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parik24.yug.odessa.ua","ip":{"addr":"104.21.76.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-05","domain_rank":0,"first_seen":"2026-09-19T04:47:45.155663Z","last_seen":"2026-09-19T04:47:45.155663Z","alert_count":2,"request_count":1,"received_data":537,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNtdXNoX2RldGVjdG9yPXsiYWpheF91cmwiOiJodHRwczovL3BhcmlrMjRjYXNpbm8ueXVnLm9kZXNzYS51YS93cC1hZG1pbi9hZG1pbi1hamF4LnBocCIsIm5vbmNlIjoiZGQ2MTlkZTBjOCIsImlzX21vYmlsZSI6IiIsImRhdGFfc3RvcmUiOnsidHlwZSI6InBvc3QtbWV0YSIsImRhdGEiOnsicG9zdF9pZCI6Mn19LCJwcmV2aW91c19kYXRhX3ZlcnNpb24iOiIwIiwicHJldmlvdXNfZGF0YV9oYXNoIjoiMjc5NGRiYmFiMGMwNDk3ODFhODkzZGExYzQ4NDk4ODkifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5350db4b106b968a5bcad08af37616a","sha1":"51517585e8971842bbaac5a760f76633ed7ad224","sha256":"70ef216a5b7ed994a11163f132e84f9b4ce6c9756fa55fdbf6578b92d46c8275","sha512":"198cdefb397d5326def79600e6d6dcc633e0d73a6aa89412afa703573480c22e860bd5ac8583c0df9485c126f735344841737b9c28ccd62332786abc0465c6dc","ssdeep":"","tlshash":"4dd02bab3c6a4b93916a3ed8741c2032d6653166a5507e118196ed480b48477310025f","size":268,"data":"","first_seen":"2026-09-19T04:47:49.407961Z","last_seen":"2026-09-19T04:52:49.418048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/fa7e0a855185774790cbb84b7e94b92c.js?ver=4b92c","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bed8e9655fa47a1973e7d7fc2bb0e35","sha1":"4c32afa176e96b89bb667771becf22cddac303fc","sha256":"947315ac670f0a998e8fffd8cf026c166aefa6199ed63f166a7afe084c1269c6","sha512":"7a5620ee85779af80367328ea5d4fcf447fcbb0dddd2b005daa453a5f08001a90b08358085b7590de74d979a6c8584d577fc13184ef69ae241398307e1852066","ssdeep":"192:TdMCJqdgQlWIn9hQ5KmtW+5IzWgu/sH+fISdmbiu8Kk5xiCpX4zLoRJ02sABjan:ZqdN59pmtWTlmsH4IFblC5iLKU","tlshash":"6962c4ddbad5b07213d770b2802f210bf37a9855a05d90a4c62ae9d16c3899f4233f3e","size":15300,"data":"","first_seen":"2026-01-14T22:21:01.020087Z","last_seen":"2026-09-19T04:52:49.411506Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/8756cac77c3f368e8e18b761e352995a.js?ver=2995a","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7471b9dc901965f253728eec1f14a4d1","sha1":"5a7687473668f37a80c248455373def7ba0753d0","sha256":"fe1a905248dea41035c4e8a4f37ff17c3772e2bdd6d9fe52a4ccdd29809578b9","sha512":"a3ca2af8ffe0c271795378bb5918f4a9c65d8ecb09ee82a18b561d508620dc205f4ff9d80372c78dc21ef5c02268edb78c64dfe0cc66acc67f676f145f72b4cd","ssdeep":"96:8917x2jp/KLuCr9/sl3cD8B1hD7B1JOFOe2OCOlqODh2OCOlIMRDRbrJ1ZOVOyUn:8vUh3sK1CIetRLNtRWQ1ZOUyuxeyXz","tlshash":"62e18650730378b6299b9a9b8097f1c87471538c9e358062b23ff45515b8d8433a6efa","size":6842,"data":"","first_seen":"2025-07-01T22:55:40.274752Z","last_seen":"2026-09-19T04:52:49.414703Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"79fddf4a58da97836fdd23c4311bae99","sha1":"4469d6932699d206335fc585b4ebff1b901ce9de","sha256":"8cdccc5eef91cb114f8b52d72c9e2e3932f02954dbe02f2e1155157ed2f17f59","sha512":"e15b295da90ee37d79aeb51ff2aad5a58f0b9d23eea021cb7ad7093577bbdb2f953d0768b4d6f6a4c1cfe9d7d4391c444195586ffa67ee6097d3b98febf16fa1","ssdeep":"","tlshash":"260126af31cc093d6afeb26d23b5db4c3c28a0a15c89802d451837704d20987af5b6be","size":672,"data":"","first_seen":"2025-04-24T04:54:00.578225Z","last_seen":"2026-09-19T04:52:49.418788Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-20T09:12:56.059328Z","times_seen":33336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ca1a351738a908aa34e0b07b695ce74","sha1":"95651d660253360c9129c5bff7065b8ed8bd31e2","sha256":"a6645b9a1656508b252a15c79d0eff7b6c2e32913480ce95994489c9ea8fadcb","sha512":"f3c27b6a2011c1251ddf3aaf831889f126e37c45b2850d9bb6f22e7385236c20c9d54ea99e3f1bb200417bebb0a29e2a630ee865aedebc39d3dabb39077fd8f2","ssdeep":"","tlshash":"ae600000000f303f003000c3003c30c03c00c00303c000000000000c330c00030f03cc","size":15,"data":"","first_seen":"2023-03-07T01:24:22Z","last_seen":"2026-09-20T09:06:08.577108Z","times_seen":10986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-09-20T09:12:56.060186Z","times_seen":30204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHBzZXVkb19saW5rcz1kb2N1bWVudC5xdWVyeVNlbGVjdG9yQWxsKCIucHNldWRvLWNsZWFyZnktbGluayIpO2Zvcih2YXIgaT0wO2k8cHNldWRvX2xpbmtzLmxlbmd0aDtpKyspe3BzZXVkb19saW5rc1tpXS5hZGRFdmVudExpc3RlbmVyKCJjbGljayIsZnVuY3Rpb24oZSl7d2luZG93Lm9wZW4oZS50YXJnZXQuZ2V0QXR0cmlidXRlKCJkYXRhLXVyaSIpKX0pfQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d3f83d10957197db3e0a4ef0d0a6bc","sha1":"1b2a5dd7dd1d29b9a7546fca743ec4f87f817995","sha256":"1bfbb37f2c164842807454c40381431989fdc1406de308ae641e03430fd01419","sha512":"55dffec56642d8e0fc264856963b0d2a95f51a69531dfeca19136d3b50e683b0da5937e01874de01de1234d6aa77297d1b68ef377b8d3da64136a6719f88a39d","ssdeep":"","tlshash":"9ad02232771824b60d2e01faff0d3288d8b3128a8c03dc084a405eca3858b9b068ae30","size":208,"data":"","first_seen":"2023-03-10T14:21:46Z","last_seen":"2026-09-19T04:52:49.420973Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZnVuY3Rpb24gZGlzYWJsZV9rZXlzdHJva2VzKGUpe2lmKGUuY3RybEtleXx8ZS5tZXRhS2V5KXt2YXIga2V5O2lmKHdpbmRvdy5ldmVudClrZXk9d2luZG93LmV2ZW50LmtleUNvZGU7ZWxzZSBrZXk9ZS53aGljaDtpZihrZXk9PTY3fHxrZXk9PTg4fHxrZXk9PTY1fHxrZXk9PTg1fHxrZXk9PTgzKXJldHVybiExO2Vsc2UgcmV0dXJuITB9fWRvY3VtZW50Lm9ua2V5ZG93bj1kaXNhYmxlX2tleXN0cm9rZXM=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be3c9a0809a363f3efdd58d4c0a54262","sha1":"458de2d2e7b7de245939f9d87336e1e5dd69b74c","sha256":"de1d5e553c594e2bc0aa90bfcd623156c01ce5e9dbf4bc07a2bc4cb672017e36","sha512":"3d6dd6a1ffd872d1efd234ded10d0deda4b7b97464bd7d8ab943c61e78a87f152a4d6c0254d9a9d24743904843109be525fccda561bf9e8ab4ff5e9b8f30e709","ssdeep":"","tlshash":"43d0a7d9634274a1547e646f277bfa597a7c004264e5502a638b4d34ed4f422d15784c","size":230,"data":"","first_seen":"2025-04-24T04:54:00.580341Z","last_seen":"2026-09-19T04:52:49.421463Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f4cb9cb88e714a77f6b3c43cf11f710","sha1":"d47d6a74c7dc82ed6f3b92663f1aba6912c35aa1","sha256":"1688f4151d6fc5671ac67391b0451caf425a085688e467285f9e49a4f69682e0","sha512":"eed9141032f86b152353a9ea1696a789e558584276bb0d3d7a798bdbc897ebb79cc27e28b2c8066927d6496d3378c60dee5b25dd0c81be3f7b5b647f5e0de394","ssdeep":"192:AENoZydhi6RXEPKE5bXvc7HYt5wM64n+/IxCs5paBwf6xLwEC:AnZxpMHfIxpaGf4ER","tlshash":"3222c723ea2d863f1be71bc0eca1756cb9d6524ab2565830ccfe6d2dc3dc640508672c","size":10839,"data":"","first_seen":"2026-09-19T04:47:49.401933Z","last_seen":"2026-09-19T04:52:49.422094Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/d01aaa3ad62cbaa85b8f561fe8d8c119.js?ver=8c119","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f5d6aadb2dbcdda6b3d5637643095db","sha1":"b206c0ce8575da21516fbd28272fea12e8ce74b0","sha256":"bde93b1f0230a6023342d740ccfc8c647c239b26c1c77c7d479ea0c4098e174f","sha512":"7631638b538e26966a52639a4d5728085a57f56cd118baff173e4b53451175877cb6b47075279a047cb9907b0b726bab1acb80f63e2633ebd15e248a74935fd8","ssdeep":"1536:iIT3S4qAFL9acRA56VSm3pmbSxwLD3OYkD6cF:iITdAYV7ZmbLpkTF","tlshash":"7393a5897259b53102db90a2903f160bb73618adb41840acb56dddee6c3dc8d6277f3e","size":89449,"data":"","first_seen":"2026-09-08T06:09:16.32819Z","last_seen":"2026-09-19T04:52:49.402641Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuZG9jdW1lbnRFbGVtZW50LmNsYXNzTmFtZT1kb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuY2xhc3NOYW1lLnJlcGxhY2UoJ25vLWpzJywnanMnKQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c96f90d58172c23229c48fd368c6d3dd","sha1":"77c5e6e0fecdf3c926d25d5e3de4944220fac55e","sha256":"2066855fe6f957b22a26199776b9784fe25b3a0a62e0f78f19201ab2b1817697","sha512":"d5c0873305152017d8baaeebae80076e4b9464075d13a0fe590458c4a556d5c4d0d242cd01e3927534171b0328b82d013d5c5d588e5d08a8b211f1723b18f8ab","ssdeep":"","tlshash":"8db002b278008d794e8e520eb27cc7d83c3504d0fac3b900e0bc348920b0eca0d00f88","size":91,"data":"","first_seen":"2023-03-07T01:03:12Z","last_seen":"2026-09-19T04:52:49.422816Z","times_seen":1250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"952154216070122f5b4eefbd5b180979","sha1":"9d9a6237a5cb1ef7e2596ad8f517160f45bdfc9c","sha256":"f2af0bfbae21f3743f701dcac670d3b99278793158aa884f08adea01b2a14b52","sha512":"3c38f3f78235c8191869a9c7688a4b40c1cb27fab61a3c85bce57a6eec76ea014bfa176ad813951d84eaa8e235e15a13ceb89f2ca6e94eeff364c3b820c36abf","ssdeep":"","tlshash":"34f0a389fb7e6db80782b129820f3316f636866f54460481dd33ebf088556cab50345b","size":453,"data":"","first_seen":"2023-05-11T10:52:46Z","last_seen":"2026-09-19T04:52:49.423938Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/76a2c394c2384e6cd0498d5125344c2a.js?ver=44c2a","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f238efce7b643f7cf59b8f2ba752ab9f","sha1":"6a40fd997a8e1fe01b1bf3c2f20d2094243584bb","sha256":"08b2350f3c07dbc7691de0f7be73eb62600630a8aa993a0bf674fa6fb78e869c","sha512":"2ae1b157ddbbe6743f75e432b277c4ece0eed74e80f26ccfd4ce6bc681f0698b40be1953e5bfbc87a6fcde3cf7edad4959bd3d4c2aa43edbc20dab3d46dc5531","ssdeep":"384:0ncuf8lV5W9Mov8WNpyvI3AxrZSn00P6O1oOAkDoIbgwBjjIwukZ+wBqnQB:0nctlV5ZWNpyvI3A9ZA00doOBDfbhBj/","tlshash":"0b52f76eb29ab07baa9770b5402f210ea33231271949d495b636c4c15e3c98f6323f7d","size":13783,"data":"","first_seen":"2025-06-28T20:29:32.984738Z","last_seen":"2026-09-19T04:52:49.367199Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1f58a201971fabe9c7c892215418d23","sha1":"7b23d383ef9350a099a7a157351d207a7e079e7e","sha256":"941eb2d80b105544a668a3fca2f5f7baa1ffad53527396e10822938bc2760a1b","sha512":"3008cbf01177abd8d086135c08d618c9d1c19703aaffbcf2b98ff47ae3f1e240b5c21440e48ac07d4c7421d1b46d3645336cd437330d53155bb7ae0c73b5e553","ssdeep":"","tlshash":"29f0f0e3e99b471d278537e1e1793c7e21da7096e614d7b7cd3a9a8380482e061e431b","size":614,"data":"","first_seen":"2026-09-19T04:47:49.405416Z","last_seen":"2026-09-19T04:52:49.42512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf4514c03cd574549a9d983cf953169","sha1":"b303ebc16099fce988a7394c34689f10ed3e148a","sha256":"822f6934ee1082c040446d16ca549000ed13ce48f90f2681521268459616358c","sha512":"7116a100dd20523e734f481f311088d0355e632d535ea5fa0a8b0f3f2575204b0e28ce6fb2986abdba4e01bd82401b2faf2efba5c35e7b2c80deff065fe6fc81","ssdeep":"","tlshash":"4711c03eb36c143700a2d3b366efeb8a693b408b740296496f394cc11da4d0a16b1cb9","size":1090,"data":"","first_seen":"2026-09-19T04:47:49.409344Z","last_seen":"2026-09-19T04:52:49.426443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/a4bfc333ff3c2bbf106a3740b69e6608.js?ver=e6608","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f385f021c28b60b3d930441fa9a059f1","sha1":"dde6b7843e45af770bd4f21f49886209df3084f7","sha256":"7d50e0f88b8c6e99ee1a878f9796fa3e4ae36d0d98060bc68629d34692289f8e","sha512":"b605d2101b18284b59f58a83814b34b472f1b4dbcdcee9cc2a910062c599e91a6d0b3774257251fc3c29359f7a925d03ea2537a79013979dd9e2a3a754bb651a","ssdeep":"","tlshash":"ce31a6d83095388a45af1220123f2387b03cdb5a5ccd5599a305e2f23132467c167ff3","size":1670,"data":"","first_seen":"2025-02-05T13:09:58.085282Z","last_seen":"2026-09-19T04:52:49.401331Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/14da7c98baac377ed3ef84c31a128e9f.js?ver=28e9f","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1667f261153eedc46900784765cf239c","sha1":"35d7facd2960fcbeea33869a1d5f73256cda18fc","sha256":"16bfcfa22ea31b2aac1ea4f6a54bf4c705fdf253d202ef308905d3c251177584","sha512":"df142600b42dcffed05e48c383577c5b4e4c77b1376af73e61ab10d4c34f9fd0dfb074414d4873b83737ca703d49dcb63bfe95fb4a84aaf71b6bec86fd20cbc7","ssdeep":"","tlshash":"02f0970bf8112d982ffb2ae5782b76cc79139a181c342452840ec8ac2d2988812223fc","size":487,"data":"","first_seen":"2023-03-26T12:45:50Z","last_seen":"2026-09-19T04:52:49.407168Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-09-20T01:45:01.267294Z","times_seen":20211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea1af5d081b4c264d77f836d673f8d3c","sha1":"ba7ea7c5bb7532237a6e455876706f3292ef1d13","sha256":"0ab06ed30b0a3c7b4f3bd2e2793ac5e35a79eb81d33552bebeb0c9562be5c6aa","sha512":"be5fc945524deb8960bea43686ad1bb0c2e392047a198436c5005c7ba2358af55e84cec82b96553302130f7d674b776a4431a88ec1e75ec20992df6fcd2a3cc2","ssdeep":"","tlshash":"0ef02d31f2498d201084d968f274d41011b1ca46be1de930f3dae52de9a49858277eeb","size":589,"data":"","first_seen":"2026-03-04T01:31:02.07804Z","last_seen":"2026-09-20T09:12:56.061613Z","times_seen":9463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T09:39:04.119324Z","times_seen":436644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-includes/js/jquery/jquery.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-20T09:40:50.380338Z","times_seen":1062725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/2bf35cb3f007488a86ac66850a91334b.js?ver=1334b","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f97061a1c395cab574d744a85ad8761a","sha1":"64498c88c51fdcd3224cf566a6c6c78a66bbe400","sha256":"cc361b07b6f90bd110894345bb56605a3190240a7fdea5089fadd55fcb3eac23","sha512":"351b31178496fc8ff2a06bcffe5ef9d6f47681a0a572ee98f4a0005a864ab3310ad4bcd66786c3922225edfb81507ce9a3c6c9b3f4cd931dfd25467803b3ad6a","ssdeep":"","tlshash":"8511dc08f613687b1c1a1cc47267f1c4b8b213289d3798ffa12eb0aa1c38cc501769f6","size":957,"data":"","first_seen":"2025-06-22T06:14:22.291905Z","last_seen":"2026-09-19T04:52:49.368716Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/28045daba0504c22eaad9e16a1ed8e76.js?ver=d8e76","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2264f1186dc89bbdf19fc49e58a90079","sha1":"4169d05c2059c5637541c61ff976c70c1a185b9c","sha256":"32afb5195531ba8cbf4f0727cbc3919c10884a95c49f84921746bfeabd57745c","sha512":"260cef006fbca6872438ec3559e1307e6fedeb70a0c72fccdb4262daf615328bd9805615c6a0e81e529516dca2bde69ef12cdb798759a427f43568ce012a704a","ssdeep":"","tlshash":"f7e0d8dcf401108a1bee98b1d12b86c576167a164e212596200e58fe051df3561e7ee9","size":364,"data":"","first_seen":"2023-03-26T12:45:50Z","last_seen":"2026-09-19T04:52:49.407822Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/f6d3f76be1250a90f2eb5c03ab856cf0.js?ver=56cf0","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7fd2b9352a5ae7dee3ddee986589f28","sha1":"1ca2df17fdb8b8b66f5ba4c836a0bf0690da97d6","sha256":"9bd24499fb699c5baa7e90ac657ba6fad145f99cfbe5b440e848850712fe0339","sha512":"ca3e1f8623a1e2f737a0687a577e1761c1510fcd9aac2073a74adf79d1533de411c0c0e5a1f5788cbe703d4c21698da6b78ecb51981447559d87c3f3b2ee7272","ssdeep":"384:rOLD4wTE3fD0lHbgRoOKsxqFvRvElKpPtDvz1Z0aZWyIu:rOLD4x3b0lHbgR3AF2lKpPtDvz1SaoyN","tlshash":"ae826469795470f511b33726b1377b1a7023383a968a5110241adcb83ebfd8f1626fee","size":17828,"data":"","first_seen":"2025-09-21T06:01:22.695471Z","last_seen":"2026-09-19T04:52:49.400421Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,V2ViRm9udENvbmZpZz17Z29vZ2xlOntmYW1pbGllczpbIlJ1YmlrOjQwMCw2MDA6bGF0aW4tZXh0JmRpc3BsYXk9c3dhcCJdfX07aWYodHlwZW9mIFdlYkZvbnQ9PT0ib2JqZWN0IiYmdHlwZW9mIFdlYkZvbnQubG9hZD09PSJmdW5jdGlvbiIpe1dlYkZvbnQubG9hZChXZWJGb250Q29uZmlnKX0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6941f2a79cb18e971efa21c0b25b272c","sha1":"6ccfb024e2a3661a6afddbf522423ec3de9c3815","sha256":"37f530754eb3ae7e6bfc90a5276d65b4631022eef5276b7501570aaf42ee1ae5","sha512":"d2c928410ca97872ad3c1be379ce686026130f57d51159b8cb2e937438a2be61bf21a891a39b5fdd6d18b3db9fd4c0d24e9aee791cbc17b453c22f567eb66000","ssdeep":"","tlshash":"43c012e22019910a46d6d138031757d1fd152b5200cc220418e462a88cecc5c2931e12","size":167,"data":"","first_seen":"2026-09-08T06:09:16.341049Z","last_seen":"2026-09-19T04:52:49.428926Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","size":6981,"data":"","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-09-20T09:17:22.970519Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZnVuY3Rpb24gZGlzYWJsZVNlbGVjdGlvbih0YXJnZXQpe2lmKHR5cGVvZiB0YXJnZXQub25zZWxlY3RzdGFydCE9InVuZGVmaW5lZCIpdGFyZ2V0Lm9uc2VsZWN0c3RhcnQ9ZnVuY3Rpb24oKXtyZXR1cm4hMX07ZWxzZSBpZih0eXBlb2YgdGFyZ2V0LnN0eWxlLk1velVzZXJTZWxlY3QhPSJ1bmRlZmluZWQiKXRhcmdldC5zdHlsZS5Nb3pVc2VyU2VsZWN0PSJub25lIjtlbHNlIHRhcmdldC5vbm1vdXNlZG93bj1mdW5jdGlvbigpe3JldHVybiExfTt0YXJnZXQuc3R5bGUuY3Vyc29yPSJkZWZhdWx0In1kaXNhYmxlU2VsZWN0aW9uKGRvY3VtZW50LmJvZHkp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"583e42008050553a6a6fed5ce522c783","sha1":"4c7c11035fea969008febc6eeb7ad98437b86cb8","sha256":"7e27ce414bef335958efb869234044f192cd6f9a81623b1bd02c9dec21c80fad","sha512":"f4b90cc58b72c180c5885646b186db8dc5d4d7c576f2b66110f48b5770a199906cf6f585ae34f1f3da3b207e2832e153c49e10f813e66095e4d182aa47cf9c1f","ssdeep":"","tlshash":"54e08649b65132a1145ea1f660a64b04716178ef0f4f2154c93825feac29409b113e7f","size":315,"data":"","first_seen":"2024-08-20T17:46:12.441508Z","last_seen":"2026-09-19T04:52:49.429529Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQub25jb250ZXh0bWVudT1mdW5jdGlvbigpe3JldHVybiExfQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"31f4e0d28d79bdc0a46a79a788454c5c","sha1":"5152dedb8c03b204ff987f7f62a80d0f494f44ad","sha256":"8ff2e11c7ecd5cdf82e81f8b80648b02f981eda7324a5f9a54800f6b1cca187f","sha512":"86d69a42f5c3b7a56476ab7db54e2a6a3987032da7a9e6d2469460996964875fd2f07ce7eb7bebad98aaf5effc438da00a883b1e8b65aca128d3f40b25af418e","ssdeep":"","tlshash":"f890047471c370505305d01c0137c54d373544d17505d014450c00553cf14dcd0d3f4c","size":43,"data":"","first_seen":"2025-04-24T04:54:00.575983Z","last_seen":"2026-09-19T04:52:49.430061Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigiY29weSIsKGV2ZW50KT0+e3ZhciBwYWdlbGluaz0iXG5Tb3VyY2U6IGh0dHBzOi8vcGFyaWsyNGNhc2luby55dWcub2Rlc3NhLnVhIjtldmVudC5jbGlwYm9hcmREYXRhLnNldERhdGEoInRleHQiLGRvY3VtZW50LmdldFNlbGVjdGlvbigpK3BhZ2VsaW5rKTtldmVudC5wcmV2ZW50RGVmYXVsdCgpfSk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"847414acc74f25245ccf861528ad68d5","sha1":"76231d6bc1feeba65dad7cadf657316a935643e3","sha256":"ffe46c03e6014281a8d5370ca13f2fb45361336f687cff45967d91267440a723","sha512":"cf6d1b619b0bce0ead53f3d0402529a018bd2846035b9ff5b1705e655354ce0ea300f91a151686d9194934df85405781c159a9f5549525440d31634574d9ad46","ssdeep":"","tlshash":"ffd02273ae244a74438f494d636dfe61a8b034ce2d819020980e9c8034288262130287","size":197,"data":"","first_seen":"2026-09-19T04:47:49.403512Z","last_seen":"2026-09-19T04:52:49.430599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/80e129c14dde5f60e3c1b55a5153d115.js?ver=3d115","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80fc56f5c8b935f5a5a8725306d874f3","sha1":"14c94ddaf846bbd9a1b4d5bd5a01dfd23e36c1a3","sha256":"390e2796e01ba2795eeb379805a13081918e95f6f932946aa63da1fb0be8f1f5","sha512":"ff8c8c66488060244209da90133facbe1bfc4fea084fd2a55e27133f6f6c1638edb69915e414317384e787ae5c225208e6c52c70b9d24240c1b370a41e0ff719","ssdeep":"","tlshash":"0b512002b62729fa0cef5ccdc14e67c130722766ce4481534e7d40ef29a8ed062e6e9d","size":2608,"data":"","first_seen":"2025-06-22T06:14:22.338675Z","last_seen":"2026-09-19T04:52:49.372925Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/a6f0a7befd477501819dacea7aed2df6.js?ver=d2df6","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d08f87c583be1a97025080fe29b24871","sha1":"4dd0e57e468766bf99aaebb321179549b3a2c348","sha256":"b2a30b439bd9761fd4553a5c6ebbd9e11027d86b3b54c05ba3470c6b08524f06","sha512":"363a87004a7c40bcafa7e934b514b0ad23cd28dfb7b9a52f9feb313ff50f2b0fd237efd2c2b195bb7762a048c79f75d730b55c4a43c82d25a1341f3059444e04","ssdeep":"768:LW+JeP8fPdIt8I5h5t1qkOLCMsjKJzWoBQHpiKugyz9fqrZq3SOm1:KP8flUTSCMVgqle","tlshash":"1a131858f663b97786e764f9746b35092331a853e502881de07ec0e8eda9d8c7117e3c","size":45320,"data":"","first_seen":"2026-09-19T04:47:49.385087Z","last_seen":"2026-09-19T04:52:49.403767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","size":12098,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-19T18:32:04.237714Z","times_seen":8736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/d5ffc60798ef1326a6301f6fc110b5f6.js?ver=0b5f6","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e47ba046d4892408f970f4c0d707d3b","sha1":"03401d2f52aa325a33c70356af5c741d65a5000e","sha256":"d35f4465d5567a05dab9f7783787c08d6eb1fbaa846ae55614a3ce9d75dc43b4","sha512":"1cfe061416a8b76b5202a47a7bb5ec0a185b0b43a711c9a32aeb098c337b7ac29fc4431c3440943bebae2d410954207a6949ab74b22c5eed7813702fc34924c7","ssdeep":"","tlshash":"4ee0cd613068a33541add40d3796f34e75232158311b5941498dcd147631f93d162fd9","size":309,"data":"","first_seen":"2025-06-22T06:14:22.315871Z","last_seen":"2026-09-19T04:52:49.363498Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj45 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[reload:map[configurable:true enumerable:true value:yes writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://parik24casino.yug.odessa.ua/","line_number":253,"column_number":11352},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://parik24casino.yug.odessa.ua/","line_number":253,"column_number":9417},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj48 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.7701413429046473] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://parik24casino.yug.odessa.ua/wp-includes/js/jquery/jquery.min.js id:jquery-core-js type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://parik24casino.yug.odessa.ua/","line_number":253,"column_number":10301},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher17.process7//obj52 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.5117180454980016] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-optimized:1 data-src:https://parik24casino.yug.odessa.ua/wp-content/litespeed/js/55f490a09d3ecb6e491d5530a960b036.js?ver=6aed7 type:litespeed/javascript] attributesLength:3 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://parik24casino.yug.odessa.ua/","line_number":253,"column_number":10301},{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://parik24casino.yug.odessa.ua/","line_number":253,"column_number":31841}]},"http":[{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.281Z","timestamp":1789793519281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/plugins/litespeed-cache/assets/js/webfontloader.min.js HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Mon, 20 Jul 2026 10:35:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCDfAJGfH7zsJYyvR0DfHjwLevcuHOxRo3j%2FbSKT9BkI91JJRW3lepGZffJhiaWqUJKzDwm9axEVY1Ujg%2Fx4EWNXVx0a3lQS%2BMRBuW4WS7s3w69vk2jKRteweOhhTxFkP6qdC64aUx1%2B7SMkzEM%3D\"}]}\r\ncf-ray: a3d5fa77896e56bf-OSL\r\ncontent-length: 4649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12098,"size_decoded":6600,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12075), with no line terminators","md5":"45943f1d780bd7d9db946bdc5ed14a5a","sha1":"41a42d3c32fe16108eb653ae903ae1fb86b7e5a8","sha256":"6f58202a14e2dcb4c672d6e9f0881ddc2b4e88225a97aadd940400a7377ee02d","sha512":"673c809a69dc340bd57d95d2fbf6a43354c141a7de33c4983309d8b4ba5182316a5c4b9872053f9d4badaab4924031a34f71f146d0fb00ef627c4f7aa8f65b62","ssdeep":"192:Y3YEHIcPziAZGmm62zVOr+rdmLdOSjTIghu3oHMBoateK3JELi/QFjOfDzry:YbocLiAZGmr2zUyhmPTIghu0MK/K32E8","tlshash":"0942a7597251b53d42a310b317af010666367b2e2c0184ad7a5de9e4ac70efa226ff7c","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-19T18:32:04.237714Z","times_seen":8736,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.285Z","timestamp":1789793519285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"EWBSpTW+p9MGvh5hBlVzyw==\"\r\nlast-modified: Thu, 20 Aug 2026 21:31:22 GMT\r\nx-vapor-base64-encode: True\r\ncdn-proxyver: 1.61\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/22/2026 04:50:38\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 33c74bcaf1000ca05b3dd305551a8bf3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6981,"size_decoded":2928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6981), with no line terminators","md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-09-20T09:17:22.970519Z","times_seen":324,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":8,"connect":10,"send":0,"wait":3,"receive":-1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/d5ffc60798ef1326a6301f6fc110b5f6.js?ver=0b5f6","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.290Z","timestamp":1789793519290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/d5ffc60798ef1326a6301f6fc110b5f6.js?ver=0b5f6 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00VGtqGI%2Fz2RF8kQgEMK%2B61VdIhdY5IIWo%2FtQh%2FMM46sIw2FzIdgrZP4FMZ%2B1epEwmc1l8FQPMdyZK2fychS%2FnI%2BgkWuXR9RVWFEvEpeXCyQlDxjz24TQAsgpH1wcLvxRlStQqu14h2A2YkcfaM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77997156bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":2106,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (307)","md5":"9e47ba046d4892408f970f4c0d707d3b","sha1":"03401d2f52aa325a33c70356af5c741d65a5000e","sha256":"d35f4465d5567a05dab9f7783787c08d6eb1fbaa846ae55614a3ce9d75dc43b4","sha512":"1cfe061416a8b76b5202a47a7bb5ec0a185b0b43a711c9a32aeb098c337b7ac29fc4431c3440943bebae2d410954207a6949ab74b22c5eed7813702fc34924c7","ssdeep":"","tlshash":"4ee0cd613068a33541add40d3796f34e75232158311b5941498dcd147631f93d162fd9","first_seen":"2025-06-22T06:14:22.315871Z","last_seen":"2026-09-19T04:52:49.363498Z","times_seen":221,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/uploads/2025/10/parik-24-logotip-3.png","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.245Z","timestamp":1789793519245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/parik-24-logotip-3.png HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 303\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hakBs6MglsfokNHKzjgWiY1KLZJcWyOAdiM2lGqkjUqy205PEzvmI9QV59iYzFGj6wH%2B3rTaBodsPjYsouaHhn33XA07O4ZzOxK%2B824hGWqBa%2BTW23uv0%2BLk%2BRgHGPoqAvDjJF5EDTMG3BiM3Zc%3D\"}]}\r\ncf-ray: a3d5fa77496c56bf-OSL\r\ncontent-length: 4682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4682,"size_decoded":6574,"mime_type":"image/png","magic":"PNG image data, 220 x 48, 8-bit colormap, non-interlaced","md5":"4b9ac07a59f58b3ba5c93f0f6ae082dc","sha1":"89b7ad3f7a239499031d41eb0f8c5fcac43dca9a","sha256":"48ed1981e6935627458de90527ba46f873233d2b1784f563b8a587b2c2d30082","sha512":"1f96806279c0749adc420803dd31309ce751bc29e7979ceeb15ba4dcd372400bcbc6d0a5240e158a6a84a955002a5abe721ba22b498083ea201665e08b5859f1","ssdeep":"96:Nc5hmv2iN8iwfpH9KLbRsqxAC/kO9xxF3ULA0T/6wD2pIBDyv:IhmbN8iwfBubxAKr3ULAHwwv","tlshash":"11a19e373610d5b64a5e8df6c3b8ca9ab1b1ec4c4382352185d27e93ae191b2d4ca5c9","first_seen":"2026-09-19T04:47:49.387072Z","last_seen":"2026-09-19T04:52:49.364597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/76a2c394c2384e6cd0498d5125344c2a.js?ver=44c2a","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.307Z","timestamp":1789793519307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/76a2c394c2384e6cd0498d5125344c2a.js?ver=44c2a HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnjJhc9j91BU21G8Us1qnMQYqeOLh7ti28IAGk8qJs5s8mnunxedkebyVC%2FzOcGplwNgSuRBGyOaGhJAHRCo%2FKoiMZI2FKGnuw1r6ZBXvVQGd96UdCeVtRyoAPjkCvKJQXsc0JWy83Jp%2BTP2qhE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97956bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13783,"size_decoded":7579,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13733)","md5":"f238efce7b643f7cf59b8f2ba752ab9f","sha1":"6a40fd997a8e1fe01b1bf3c2f20d2094243584bb","sha256":"08b2350f3c07dbc7691de0f7be73eb62600630a8aa993a0bf674fa6fb78e869c","sha512":"2ae1b157ddbbe6743f75e432b277c4ece0eed74e80f26ccfd4ce6bc681f0698b40be1953e5bfbc87a6fcde3cf7edad4959bd3d4c2aa43edbc20dab3d46dc5531","ssdeep":"384:0ncuf8lV5W9Mov8WNpyvI3AxrZSn00P6O1oOAkDoIbgwBjjIwukZ+wBqnQB:0nctlV5ZWNpyvI3A9ZA00doOBDfbhBj/","tlshash":"0b52f76eb29ab07baa9770b5402f210ea33231271949d495b636c4c15e3c98f6323f7d","first_seen":"2025-06-28T20:29:32.984738Z","last_seen":"2026-09-19T04:52:49.367199Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/2bf35cb3f007488a86ac66850a91334b.js?ver=1334b","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.314Z","timestamp":1789793519314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/2bf35cb3f007488a86ac66850a91334b.js?ver=1334b HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFmccAcjdJDhj9jApScqgzOmGsMC0179a0n5mb%2BMptcX%2B%2B6rSKSHK4v%2BVhjBs3w42zJBNgq4VX3mnLkq7CvPyEM5BA6Lisr3u1orQ6UukoZgbhDLKmMQRIfdbeTaTg3tJhOrIK5KAvfyqafq2CA%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77b97e56bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":957,"size_decoded":2315,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (955)","md5":"f97061a1c395cab574d744a85ad8761a","sha1":"64498c88c51fdcd3224cf566a6c6c78a66bbe400","sha256":"cc361b07b6f90bd110894345bb56605a3190240a7fdea5089fadd55fcb3eac23","sha512":"351b31178496fc8ff2a06bcffe5ef9d6f47681a0a572ee98f4a0005a864ab3310ad4bcd66786c3922225edfb81507ce9a3c6c9b3f4cd931dfd25467803b3ad6a","ssdeep":"","tlshash":"8511dc08f613687b1c1a1cc47267f1c4b8b213289d3798ffa12eb0aa1c38cc501769f6","first_seen":"2025-06-22T06:14:22.291905Z","last_seen":"2026-09-19T04:52:49.368716Z","times_seen":118,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:wght@400;500;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.352Z","timestamp":1789793519352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Rubik:wght@400;500;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 04:51:59 GMT\r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10504,"size_decoded":1578,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"46aaadfba37a3a73122557f8e28d741a","sha1":"2e994e0370e9798c828ba8dbe01c45fede8cd88d","sha256":"3cb693126f6da9ea2aee7fea47d6943b8df94564981496ff8ea2faeefc7c8001","sha512":"cad66eca6363c683c7697364d965d9b8bc7b7d6a8dc0ef95b56794fa344c8c040ade8cfaee7054325ed35ad6865fbd6e9f98b9cf59081c95fec3782330d4211d","ssdeep":"192:BhCl8s0KtAuMhClDsb5uAtWhClls9nkALXhClgsImRAip:SlHRlg3lealT/","tlshash":"d422bbe0481e5040bf4b2cc263ce6d27ed0e62553490c5699afd1b9aacbbc22336578e","first_seen":"2026-01-07T20:21:56.773683Z","last_seen":"2026-09-19T04:52:49.36975Z","times_seen":6,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.499Z","timestamp":1789793519499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:40:47 GMT\r\nexpires: Thu, 16 Sep 2027 10:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238272\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-20T07:47:17.481233Z","times_seen":34297,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":63,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.670Z","timestamp":1789793519670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:40:47 GMT\r\nexpires: Thu, 16 Sep 2027 10:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238272\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-20T07:47:17.481233Z","times_seen":34297,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.508Z","timestamp":1789793519508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:40:47 GMT\r\nexpires: Thu, 16 Sep 2027 10:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238272\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-20T07:47:17.481233Z","times_seen":34297,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.503Z","timestamp":1789793519503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 13:36:09 GMT\r\nexpires: Thu, 16 Sep 2027 13:36:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 227750\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":15841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-09-20T07:11:13.86937Z","times_seen":2984,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/uploads/2025/10/parik-24-logotip-3.png","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.522Z","timestamp":1789793519522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/parik-24-logotip-3.png HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 303\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhVKwpMc1IpqTykpqHdo%2FKXdaiSY29bVzvzV2gnXN%2BFaRwBPI0PLa6UumDxo6tglHssWnFSQXQTRDmasiaQVAcN%2F5AT9Soq86czCeX7feXWheqz6SvGWJ4dllG6KLKYrS7U%2BrbdeB%2FNV9MH%2FrbI%3D\"}]}\r\ncf-ray: a3d5fa79098f56bf-OSL\r\ncontent-length: 4682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4682,"size_decoded":6576,"mime_type":"image/png","magic":"PNG image data, 220 x 48, 8-bit colormap, non-interlaced","md5":"4b9ac07a59f58b3ba5c93f0f6ae082dc","sha1":"89b7ad3f7a239499031d41eb0f8c5fcac43dca9a","sha256":"48ed1981e6935627458de90527ba46f873233d2b1784f563b8a587b2c2d30082","sha512":"1f96806279c0749adc420803dd31309ce751bc29e7979ceeb15ba4dcd372400bcbc6d0a5240e158a6a84a955002a5abe721ba22b498083ea201665e08b5859f1","ssdeep":"96:Nc5hmv2iN8iwfpH9KLbRsqxAC/kO9xxF3ULA0T/6wD2pIBDyv:IhmbN8iwfBubxAKr3ULAHwwv","tlshash":"11a19e373610d5b64a5e8df6c3b8ca9ab1b1ec4c4382352185d27e93ae191b2d4ca5c9","first_seen":"2026-09-19T04:47:49.387072Z","last_seen":"2026-09-19T04:52:49.364597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/80e129c14dde5f60e3c1b55a5153d115.js?ver=3d115","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.308Z","timestamp":1789793519308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/80e129c14dde5f60e3c1b55a5153d115.js?ver=3d115 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IRThszxBP9NES1HPPk2jO5tAdoLP4xrkprxaEKRjjTpy608rsQciuzWMY%2FsFP9NEErqk21x6N%2B46D%2FslO08aI%2BRXG8%2F812yezuTnbL6wjtBOBlU4FnrSfm8pyar1Qfz99QkFL9vNL5juABtG%2B%2BI%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97a56bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2608,"size_decoded":2969,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606)","md5":"80fc56f5c8b935f5a5a8725306d874f3","sha1":"14c94ddaf846bbd9a1b4d5bd5a01dfd23e36c1a3","sha256":"390e2796e01ba2795eeb379805a13081918e95f6f932946aa63da1fb0be8f1f5","sha512":"ff8c8c66488060244209da90133facbe1bfc4fea084fd2a55e27133f6f6c1638edb69915e414317384e787ae5c225208e6c52c70b9d24240c1b370a41e0ff719","ssdeep":"","tlshash":"0b512002b62729fa0cef5ccdc14e67c130722766ce4481534e7d40ef29a8ed062e6e9d","first_seen":"2025-06-22T06:14:22.338675Z","last_seen":"2026-09-19T04:52:49.372925Z","times_seen":168,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-admin/admin-ajax.php?action=smush_handle_lcp_data","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.260Z","timestamp":1789793519260,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php?action=smush_handle_lcp_data HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 953\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":953,"data":"url=https%3A%2F%2Fparik24casino.yug.odessa.ua%2F\u0026data=%7B%22selector%22%3A%22div.wpb_wrapper%3Earticle.article%3Ediv.hero-cta%3Ep%3Eimg.size-full.wp-image-112.aligncenter%22%2C%22selector_xpath%22%3A%22%2Fhtml%2Fbody%2Fdiv%5B1%5D%2Fdiv%2Fmain%2Fdiv%2Farticle%2Fdiv%2Fdiv%2Fdiv%2Fdiv%2Fdiv%2Fdiv%2Fdiv%2Farticle%2Fdiv%2Fp%5B1%5D%2Fimg%22%2C%22selector_id%22%3A%22%22%2C%22selector_class%22%3A%22size-full%20wp-image-112%20aligncenter%22%2C%22image_url%22%3A%22data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIxMTQwIiBoZWlnaHQ9IjM1NSIgdmlld0JveD0iMCAwIDExNDAgMzU1Ij48cmVjdCB3aWR0aD0iMTAwJSIgaGVpZ2h0PSIxMDAlIiBzdHlsZT0iZmlsbDojY2ZkNGRiO2ZpbGwtb3BhY2l0eTogMC4xOyIvPjwvc3ZnPg%3D%3D%22%2C%22background_data%22%3Anull%7D\u0026nonce=dd619de0c8\u0026is_mobile=\u0026data_store=%7B%22type%22%3A%22post-meta%22%2C%22data%22%3A%7B%22post_id%22%3A2%7D%7D\u0026previous_data_version=0\u0026previous_data_hash=2794dbbab0c049781a893da1c4849889"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T09:41:50.917993Z","times_seen":18565777,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T04:51:58.971Z","timestamp":1789793518971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlast-modified: Mon, 15 Jun 2026 14:29:19 GMT\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5hjnhpbHtrH1fopQarF%2FjaLX2hkiKNOXfn1tLNpG0BUuzNw2Kja8UysNhehq1SAspoadjvXq0h6wyLUoFot9V5VKGddACwcXHJW4GAAsof8I2eOF1TOiDecNAT%2BXQqSLclAuP7S83xbBaNHLmI%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3d5fa76a96856bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Web Font Loader","description":"WebFont Loader is a versatile JavaScript library that provides enhanced control and flexibility in managing web fonts.","website":"https://github.com/typekit/webfontloader","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137174,"size_decoded":40440,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6092)","md5":"3d217499c54e9cba2bd01b7c2382bfa4","sha1":"6a6d609cbd8d5d5f6d2fea700df6466bccab7b67","sha256":"33eb2b9215673141cc0a775484d92a22dfdcc03b6f73c05d54d7aa928d52947a","sha512":"ecfab72cdd713371cb133c776bc4a0c58703437fb26d5cb56ec20a35a494df59df55568c2bd44e3097d4a623a819fee07053d2f50d8be97b6f21d6d42847f0bd","ssdeep":"3072:5qV/JuVHfsG+zH4NKFLnQAtS8vpiaDbvbuG0xEDSU1Lu/zw+0ABO2s:5qV/Ju1fZ+z449nQAtS0iaXviLEDSU1/","tlshash":"35d3e6716d9d189f1303b09ad9187f0e39a760febf67431315f82dae76e2468c62821d","first_seen":"2026-09-19T04:52:49.396245Z","last_seen":"2026-09-19T04:52:49.396245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":161,"connect":165,"send":0,"wait":77,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-includes/js/jquery/jquery.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.288Z","timestamp":1789793519288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:55 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 303\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPEFdzSiph7W7eiQZr4WDn9i%2B70ofG58ZPtJE%2FyixcdGShMLe34zEco6aR%2BIKiOeSjmKoj1x9iFYLE3jzKpLfd1CSgL9LWQi66IUa83D4wROMcioLtm2fKuHrIVFnQZ5xDHJw3elQWiFBM8K95o%3D\"}]}\r\ncf-ray: a3d5fa77897056bf-OSL\r\ncontent-length: 29744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":31694,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-20T09:40:50.380338Z","times_seen":1062725,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/f6d3f76be1250a90f2eb5c03ab856cf0.js?ver=56cf0","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.301Z","timestamp":1789793519301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/f6d3f76be1250a90f2eb5c03ab856cf0.js?ver=56cf0 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b66Gf2l9A4j5YKZyZJ6N8V%2BF9D47mgOmryOWNBTTW%2FYHIDOsl3nQZ%2BjOMl0E4DSV9%2FFt0X3MAENGsGTbWfTb44NjeKafU9kJNkL%2F%2BETjOvlb767bNgtr7q5OC1pATyVYklZreSwZNbF5pNlSDqo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97556bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17828,"size_decoded":7182,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17826)","md5":"a7fd2b9352a5ae7dee3ddee986589f28","sha1":"1ca2df17fdb8b8b66f5ba4c836a0bf0690da97d6","sha256":"9bd24499fb699c5baa7e90ac657ba6fad145f99cfbe5b440e848850712fe0339","sha512":"ca3e1f8623a1e2f737a0687a577e1761c1510fcd9aac2073a74adf79d1533de411c0c0e5a1f5788cbe703d4c21698da6b78ecb51981447559d87c3f3b2ee7272","ssdeep":"384:rOLD4wTE3fD0lHbgRoOKsxqFvRvElKpPtDvz1Z0aZWyIu:rOLD4x3b0lHbgR3AF2lKpPtDvz1SaoyN","tlshash":"ae826469795470f511b33726b1377b1a7023383a968a5110241adcb83ebfd8f1626fee","first_seen":"2025-09-21T06:01:22.695471Z","last_seen":"2026-09-19T04:52:49.400421Z","times_seen":74,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/a4bfc333ff3c2bbf106a3740b69e6608.js?ver=e6608","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.302Z","timestamp":1789793519302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/a4bfc333ff3c2bbf106a3740b69e6608.js?ver=e6608 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFnexcS5M0zBEtxrIF5tPG%2F39cWTkwITFTLE9kYXofGKGTkXkBiqRuO1CvSxiV8JggyIRcq2hmoqhJ4QC6k73DPZCepjnMXTe0Xgv%2FASJ9%2FhCDkbMEYGUkGNIyFfxRSU6bYnq1m4jnVwlfuZY4c%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97656bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1670,"size_decoded":2780,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"f385f021c28b60b3d930441fa9a059f1","sha1":"dde6b7843e45af770bd4f21f49886209df3084f7","sha256":"7d50e0f88b8c6e99ee1a878f9796fa3e4ae36d0d98060bc68629d34692289f8e","sha512":"b605d2101b18284b59f58a83814b34b472f1b4dbcdcee9cc2a910062c599e91a6d0b3774257251fc3c29359f7a925d03ea2537a79013979dd9e2a3a754bb651a","ssdeep":"","tlshash":"ce31a6d83095388a45af1220123f2387b03cdb5a5ccd5599a305e2f23132467c167ff3","first_seen":"2025-02-05T13:09:58.085282Z","last_seen":"2026-09-19T04:52:49.401331Z","times_seen":29,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/d01aaa3ad62cbaa85b8f561fe8d8c119.js?ver=8c119","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.313Z","timestamp":1789793519313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/d01aaa3ad62cbaa85b8f561fe8d8c119.js?ver=8c119 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6soipCkU1Ae5doiral5%2F7J%2BgyM5K6KITkGkf1Ixa%2BRS3RtHo5Ec9g8%2BlE77HS0B1KNg3NPbNnVSiTIsmCvNB5MSOKGq3Vw1yHERIVIxuzzEKVBRIhe%2Bu%2FXg%2FqqyPn98kDcuv0MXCwlYZ191a2U%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77b97d56bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":89449,"size_decoded":25223,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"2f5d6aadb2dbcdda6b3d5637643095db","sha1":"b206c0ce8575da21516fbd28272fea12e8ce74b0","sha256":"bde93b1f0230a6023342d740ccfc8c647c239b26c1c77c7d479ea0c4098e174f","sha512":"7631638b538e26966a52639a4d5728085a57f56cd118baff173e4b53451175877cb6b47075279a047cb9907b0b726bab1acb80f63e2633ebd15e248a74935fd8","ssdeep":"1536:iIT3S4qAFL9acRA56VSm3pmbSxwLD3OYkD6cF:iITdAYV7ZmbLpkTF","tlshash":"7393a5897259b53102db90a2903f160bb73618adb41840acb56dddee6c3dc8d6277f3e","first_seen":"2026-09-08T06:09:16.32819Z","last_seen":"2026-09-19T04:52:49.402641Z","times_seen":6,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.672Z","timestamp":1789793519672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 13:36:09 GMT\r\nexpires: Thu, 16 Sep 2027 13:36:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 227750\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":15841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-09-20T07:11:13.86937Z","times_seen":2984,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/a6f0a7befd477501819dacea7aed2df6.js?ver=d2df6","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.311Z","timestamp":1789793519311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/a6f0a7befd477501819dacea7aed2df6.js?ver=d2df6 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thj0lVKgMa3jYHmPIDPJsrG1%2Fo9rNDbl96S6tMBZ8sTRZ215%2BoiirbaOeeMyddJBh9xJX1zeTj5Lb9S8jPybxRdcIx2jYvhqbDQMmPdGZrkz3A9brXe6jg1Zs3o%2FH6DKeVtdrkoa1nd5Y4paZ80%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77b97c56bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45320,"size_decoded":16728,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20812)","md5":"d08f87c583be1a97025080fe29b24871","sha1":"4dd0e57e468766bf99aaebb321179549b3a2c348","sha256":"b2a30b439bd9761fd4553a5c6ebbd9e11027d86b3b54c05ba3470c6b08524f06","sha512":"363a87004a7c40bcafa7e934b514b0ad23cd28dfb7b9a52f9feb313ff50f2b0fd237efd2c2b195bb7762a048c79f75d730b55c4a43c82d25a1341f3059444e04","ssdeep":"768:LW+JeP8fPdIt8I5h5t1qkOLCMsjKJzWoBQHpiKugyz9fqrZq3SOm1:KP8flUTSCMVgqle","tlshash":"1a131858f663b97786e764f9746b35092331a853e502881de07ec0e8eda9d8c7117e3c","first_seen":"2026-09-19T04:47:49.385087Z","last_seen":"2026-09-19T04:52:49.403767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.501Z","timestamp":1789793519501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:40:47 GMT\r\nexpires: Thu, 16 Sep 2027 10:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238272\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-20T07:47:17.481233Z","times_seen":34297,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/uploads/2025/10/cropped-parik-24-fav-4-32x32.png","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.628Z","timestamp":1789793519628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-parik-24-fav-4-32x32.png HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:57 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVEkM3UoQ9XXsNP%2FMup0WeXmCmSsv2nY0ikPGNVaJJoOXA0lpwhQ%2F95bTTJDPTz%2FEERNOFif0F3LfRJckk0XSq9WgOSfBKRf%2F0qGcjadf93tWHTHb3rIRIETU5ZX%2FBHpsj1hI%2BxIHuFo%2BGajYw4%3D\"}]}\r\ncf-ray: a3d5fa79a99456bf-OSL\r\ncontent-length: 696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":696,"size_decoded":2594,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"65b5686d9abf6a7e1b37d3ecce626e1c","sha1":"a086c49948a6a4bf6d1593a7c70ea0cc8a7a6e55","sha256":"597745e12c61137fc7eeaf2683b5b7ec4e82faeed4e1de6e476bc30ecde07d05","sha512":"79d3984340b9f9e19a6888709ee0766db887289b944d57bd9aa341f79d015909c66f8a578a5ff17d398ab6209e211c24d18b5a7133970c812f8e6c31aa5a7b44","ssdeep":"","tlshash":"6c018893511d6d5ed50ed4724611f818bcb440cd1206e2811e98cd376b95305a8cc9c3","first_seen":"2026-09-19T04:47:49.357355Z","last_seen":"2026-09-19T04:52:49.405043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.668Z","timestamp":1789793519668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:40:47 GMT\r\nexpires: Thu, 16 Sep 2027 10:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238272\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":36161,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-09-20T07:47:17.481233Z","times_seen":34297,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/css/2925eedf8e882bcad8cd6d6d2118c943.css?ver=6aed7","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:58.480Z","timestamp":1789793518480,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /wp-content/litespeed/css/2925eedf8e882bcad8cd6d6d2118c943.css?ver=6aed7 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T09:41:50.917993Z","times_seen":18565777,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/55f490a09d3ecb6e491d5530a960b036.js?ver=6aed7","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.103Z","timestamp":1789793519103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/55f490a09d3ecb6e491d5530a960b036.js?ver=6aed7 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:55 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:45:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 303\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CSrSpj%2FNXzRpMZb35n1zRpWV%2FQBFmvmw5j%2F0F5agExE9wXg64wytfQeJbeNrjBQEnj8pGR%2BGbCVOXYnZE0O4vzyQLAwVuVT4WF5IjN9Kp1hUmsAc9I0lhOVi8RJnfNpShxQlGDxN4GyDudWWfQ%3D\"}]}\r\ncf-ray: a3d5fa76a96956bf-OSL\r\ncontent-length: 57965\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":209990,"size_decoded":59917,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17827)","md5":"55f490a09d3ecb6e491d5530a960b036","sha1":"1fd0f3f588d6df58d225b6b2f9e2bfd61bac0425","sha256":"aec10f29325a26ec43b06dc52d2058c0237c12bbd4c215c22ba12aa7f3b74043","sha512":"b2393a90ec149595bb354029c14078d18dd9839328233ef0f830d7dadc30639bd1ceaf3afebc75187ab5f1a4a21a99cf5983d200f3066e4d74f643d686b8fb15","ssdeep":"1536:cgMZa4x39dKpj2yIx0HgbtfI4RL/R2uzyvI3ATA00dvbhBjjMuYBJfP8flUTSCMS:rql3GiUACT9oITdAYV7ZmbLpkTH","tlshash":"d5241a997259747203e760e5a03f260fb336246aa4098068b57ed8ed6c7dc8d6237f3d","first_seen":"2026-09-19T04:47:49.389622Z","last_seen":"2026-09-19T04:52:49.406099Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/14da7c98baac377ed3ef84c31a128e9f.js?ver=28e9f","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.305Z","timestamp":1789793519305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/14da7c98baac377ed3ef84c31a128e9f.js?ver=28e9f HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0w7XT%2Fv4Lbw0OrieZmxeB3IMvbMkacTzhSEvT11o5oeW%2BYKeONMbtXztVXGnxI2CbLuwaMoRm1PJvvot4AxIpL3K6nRBmNdAw%2F%2FDH3biMdeXkZQJ9mk7iMmg0ANmfOT3VUAsHNI%2FB5snQFohEE%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97856bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":487,"size_decoded":2193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (485)","md5":"1667f261153eedc46900784765cf239c","sha1":"35d7facd2960fcbeea33869a1d5f73256cda18fc","sha256":"16bfcfa22ea31b2aac1ea4f6a54bf4c705fdf253d202ef308905d3c251177584","sha512":"df142600b42dcffed05e48c383577c5b4e4c77b1376af73e61ab10d4c34f9fd0dfb074414d4873b83737ca703d49dcb63bfe95fb4a84aaf71b6bec86fd20cbc7","ssdeep":"","tlshash":"02f0970bf8112d982ffb2ae5782b76cc79139a181c342452840ec8ac2d2988812223fc","first_seen":"2023-03-26T12:45:50Z","last_seen":"2026-09-19T04:52:49.407168Z","times_seen":316,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/28045daba0504c22eaad9e16a1ed8e76.js?ver=d8e76","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.315Z","timestamp":1789793519315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/28045daba0504c22eaad9e16a1ed8e76.js?ver=d8e76 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4g7F5AYMRrQqPalZKDMH%2BoJbeokjcKcWSsVtjOxZMsya83w0Yb7P43Wh3GJ9HC9hHLt8ZfeAx3zjI0PAwUriWyNMEsSbDeAl7CvrbCZlHPh2yYYQwsi4GNWfg4BSyTsJ47n09pFwzCu0mQS07I%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77b97f56bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":364,"size_decoded":2113,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (362)","md5":"2264f1186dc89bbdf19fc49e58a90079","sha1":"4169d05c2059c5637541c61ff976c70c1a185b9c","sha256":"32afb5195531ba8cbf4f0727cbc3919c10884a95c49f84921746bfeabd57745c","sha512":"260cef006fbca6872438ec3559e1307e6fedeb70a0c72fccdb4262daf615328bd9805615c6a0e81e529516dca2bde69ef12cdb798759a427f43568ce012a704a","ssdeep":"","tlshash":"f7e0d8dcf401108a1bee98b1d12b86c576167a164e212596200e58fe051df3561e7ee9","first_seen":"2023-03-26T12:45:50Z","last_seen":"2026-09-19T04:52:49.407822Z","times_seen":270,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/uploads/2025/10/cropped-parik-24-fav-4-192x192.png","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.626Z","timestamp":1789793519626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-parik-24-fav-4-192x192.png HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:57 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=27HJ88ObZ7VO4CZL8gqhP%2BMrWxCxebQSq8OIM3xztujqdBvQpgkksECNj%2FGCSGtFyFD8VHq95f1aezswPV0rv8it84q8K1XULmueCU1DJ2ZqniSR%2B%2FFNHPpyJ1v9m37ppQ3tAu3ZVlwedwryoY8%3D\"}]}\r\ncf-ray: a3d5fa79a99356bf-OSL\r\ncontent-length: 7406\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7406,"size_decoded":9299,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"a240812fb35272ebea8aee3d08e96b2c","sha1":"c0cd1c345248c793e29733b795297677b64d523e","sha256":"c1523a7ccae029a3d6b94e2f340a7ab3c46b5fd380858cb0f454b081d245e718","sha512":"1209461572b7b6ad977d434459e133bffbc74734d76ed8207086a73ba1defe1aff6999cc30bd76ec6b54bd2ce7e2aa2bb88d08cfed6221f1afb2814a0b88d0a2","ssdeep":"192:xj2/VdJM/k1dx3swETdqAKfnWyCLb9wNUsLspJ1R3p9syl:92dwMr8w+hMnWyUb9U5Q79L","tlshash":"a6e19e27141a0cd7f84ed03c65689ab235dcb2b918d1c428b12737ee0f17cda18e9d41","first_seen":"2026-09-19T04:47:49.366161Z","last_seen":"2026-09-19T04:52:49.40932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.506Z","timestamp":1789793519506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 13:36:09 GMT\r\nexpires: Thu, 16 Sep 2027 13:36:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 227750\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":15841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-09-20T07:11:13.86937Z","times_seen":2984,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24.yug.odessa.ua/","fqdn":"parik24.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"104.21.76.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T04:51:54.694Z","timestamp":1789793514694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sat, 19 Sep 2026 04:51:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://parik24casino.yug.odessa.ua/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deDVuhZ4cXxZXn5snGbSngEcDsTt1uWxFNwE2UTzKQJz3z8yXqbunDZ22sobtW5EaAVolRPi3RcNDAkbCHsMO4pDoURpD37%2FJPFTonGVRlalC36skyMgU5u3sChnMCfrK49oDktQ4ZQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3d5fa6e7ec43181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T09:41:50.917993Z","times_seen":18565777,"resource_available":true,"data":null}},"time_used":3162,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":27,"receive":0,"ssl":3127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"104.21.76.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T04:51:57.865Z","timestamp":1789793517865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 04:51:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nlast-modified: Mon, 15 Jun 2026 14:29:19 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkjgY%2Fo%2BzLFxBFHcccLTEkVWrmv598ctXqMlwq1j9Xbr%2FD%2B9zWdnxHiGdDHApn7MMbUs2HX4GP2D5MTG3nM9e9GFVFYhdM%2BCSJG%2BI4TPxmlUN1ErhDaA2ojJ7qXEmhiOqX5Jyz%2FHdr231%2BV1zDU%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d5fa6ecf1f3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":116058,"size_decoded":31338,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6388)","md5":"828570d6d9c7db33f54e2d10bdf39ede","sha1":"19755a20c14ac582e37d6fbe1d1c8fdd1e501c58","sha256":"3b28375170731ba1fd23df29d12800bee917b38cf46110d3fdc3285602b47b74","sha512":"b738541aea6e6fbf0c01583e88c76738f288fd1c8f585ba45992641386bb1aea274dba17d6447f80b648ed7650f313d8613c590d5baf2cf6eeeb9e3fd00ec3ca","ssdeep":"3072:jiP/JuVHfXG+zH4yKFLnQAtS8vpiaDbvbuG0xEDSy2n:jiP/Ju1fW+z4V9nQAtS0iaXviLEDSBn","tlshash":"b8b39571699d58af1203b09ad9147f0e3de760ffbf67471211b82dbf76e2828c628119","first_seen":"2026-09-19T04:52:49.410176Z","last_seen":"2026-09-19T04:52:49.410176Z","times_seen":1,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":15,"dns":15,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-includes/js/jquery/jquery.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:58.984Z","timestamp":1789793518984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:55 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAkFGTQcS%2BtmfLyvh6XCqNqpa4g3UsUhhITklRyQTCRJIs1jbntUZxF%2BEPI6U7AJ7Lz7d0%2By%2B%2BK%2FxA7kg2vcNsvPj0NWRzg4UQPzsoFKPeQvgVCxx1Dlf9A%2BXx%2BWudz3bP8j7%2F%2FHj8mY864ttH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d5fa760f15c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-20T09:40:50.380338Z","times_seen":1062725,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":63,"dns":0,"connect":2,"send":0,"wait":32,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/fa7e0a855185774790cbb84b7e94b92c.js?ver=4b92c","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.298Z","timestamp":1789793519298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/fa7e0a855185774790cbb84b7e94b92c.js?ver=4b92c HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zLII8BMdc%2B%2B0EoEWLPshXxOmwK795WO1PvKCt3KuMsEtHsumTFlK2Rln%2F6fD%2BVrzm8CWOhq47SL2xdfD3dTzvpPIAJEFrZKKLz4Gy7MwHz2iYKLpCC%2BUMnfFxTMqkguC6HeM20m9ElJTgmqu6w%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97356bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15300,"size_decoded":7808,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15251)","md5":"9bed8e9655fa47a1973e7d7fc2bb0e35","sha1":"4c32afa176e96b89bb667771becf22cddac303fc","sha256":"947315ac670f0a998e8fffd8cf026c166aefa6199ed63f166a7afe084c1269c6","sha512":"7a5620ee85779af80367328ea5d4fcf447fcbb0dddd2b005daa453a5f08001a90b08358085b7590de74d979a6c8584d577fc13184ef69ae241398307e1852066","ssdeep":"192:TdMCJqdgQlWIn9hQ5KmtW+5IzWgu/sH+fISdmbiu8Kk5xiCpX4zLoRJ02sABjan:ZqdN59pmtWTlmsH4IFblC5iLKU","tlshash":"6962c4ddbad5b07213d770b2802f210bf37a9855a05d90a4c62ae9d16c3899f4233f3e","first_seen":"2026-01-14T22:21:01.020087Z","last_seen":"2026-09-19T04:52:49.411506Z","times_seen":12,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/uploads/2025/11/parik24-head1.png","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.300Z","timestamp":1789793519300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/parik24-head1.png HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:54 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:09 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 304\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6RXs0q4eva07i%2F9OMpJmzc7F3JpBXPq4UWsAfVQytaSCb2pjwuWzzapMiwjWznXNu52BJoE15ckbiWBR6D8TUfUkifaScjbkz8UiW53ee97jse%2BzGv0iuMlEmhsIqE3VrhCaUA1FLbPN5Dasco%3D\"}]}\r\ncf-ray: a3d5fa77a97456bf-OSL\r\ncontent-length: 153729\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153729,"size_decoded":155617,"mime_type":"image/png","magic":"PNG image data, 1140 x 355, 8-bit colormap, non-interlaced","md5":"06e3f20225528093f23f3e92daaa63ab","sha1":"c8fe3d5c62fe019b1d35a9702053037471cfc8fe","sha256":"49f02c14a9d309f05b6621c383b1939985739d424ccd7e8cef7ac68b3fad05f2","sha512":"308400a2765da3122aac449921eadcfe4788b8295ea989c7d4ca22c9a9eda54c34ec8dfa1bd4f064227285e4e74cb08af720412735453fed86a33355c3839a3f","ssdeep":"3072:oASuj2bPBaLniTckb3yVDOefGqE7rXutBMoo1hSwgfxsBOJ4rQLcqwuT10SPrkc:oV5siTckgOefp6DBoESwU6IfaUrR","tlshash":"05e312c004895e1873dd2b669f4dd799ccfe24a395b8e24fba8dfa08d902215fc8794d","first_seen":"2026-09-19T04:47:49.382089Z","last_seen":"2026-09-19T04:52:49.412913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.510Z","timestamp":1789793519510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 13:36:09 GMT\r\nexpires: Thu, 16 Sep 2027 13:36:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 227750\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":15841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-09-20T07:11:13.86937Z","times_seen":2984,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.295Z","timestamp":1789793519295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 21 Sep 2026 04:51:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAzVf%2BSq0n6eVgNhsrvfgY0uFjKqvw9FpdWZaS%2Fu%2FSxmDCYrmre4QYxIAkZUUFdEBd4tZh19hJ3gR0jNMUpnvx7Km0YNSGxmrP15GD6r%2FX8TDvo%2BgKB%2BzX97kSzbCPWKgqYYVDveqpwQg8VwSRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\nserver: cloudflare\r\ncf-ray: a3d5fa77997256bf-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1314,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T09:39:04.119324Z","times_seen":436644,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/js/8756cac77c3f368e8e18b761e352995a.js?ver=2995a","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.305Z","timestamp":1789793519305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/js/8756cac77c3f368e8e18b761e352995a.js?ver=2995a HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:56 GMT\r\nlast-modified: Sat, 19 Sep 2026 04:46:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOCExWhSs1GYykxZO6qAGZKfKV6C%2B2vG4GdmaZ24PkBpN%2B285k06MiWh44sCYgn3ByWRKuSgYSfi1pjiQS%2FtNrfCCpk5UwLXKSUAOXr3YrTJdWjlSmZOePY18TWlLnqZh4AGfWSLiNh8KI1CFus%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d5fa77a97756bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6842,"size_decoded":3771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6840)","md5":"7471b9dc901965f253728eec1f14a4d1","sha1":"5a7687473668f37a80c248455373def7ba0753d0","sha256":"fe1a905248dea41035c4e8a4f37ff17c3772e2bdd6d9fe52a4ccdd29809578b9","sha512":"a3ca2af8ffe0c271795378bb5918f4a9c65d8ecb09ee82a18b561d508620dc205f4ff9d80372c78dc21ef5c02268edb78c64dfe0cc66acc67f676f145f72b4cd","ssdeep":"96:8917x2jp/KLuCr9/sl3cD8B1hD7B1JOFOe2OCOlqODh2OCOlIMRDRbrJ1ZOVOyUn:8vUh3sK1CIetRLNtRWQ1ZOUyuxeyXz","tlshash":"62e18650730378b6299b9a9b8097f1c87471538c9e358062b23ff45515b8d8433a6efa","first_seen":"2025-07-01T22:55:40.274752Z","last_seen":"2026-09-19T04:52:49.414703Z","times_seen":69,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,600\u0026subset=latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.466Z","timestamp":1789793519466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Rubik:400,600\u0026subset=latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 19 Sep 2026 04:51:59 GMT\r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5252,"size_decoded":1470,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a545fc96df2d48bb7d1e690e0821c870","sha1":"4b3fdce6c7f425749d958a1a7f2dac728b339c79","sha256":"bde62fc7255738867e1ff7c14aa9561dfffdfdb9b1455a8d30ba13c5a342f749","sha512":"d585ae3f7cfcd67f2e0c5036b7ced2e20f2c3c1034235690deba61bd323ed0761a80a64bd26030a4d45084cca67e008b95e7cbb91ccf33ff9593106620c05f39","ssdeep":"96:dQOEaKA0Zl8DCK9cHoQOEaGHwQOEa/FZSQOEaxQOEaEJc+uJQOEaGNUQOxMaKA0r:BhCl8s0KtAu1hClGs+ALAkp","tlshash":"d2b1bbe0481e5040bf472cc263ce6e27ed0e62553490c5299afd1f9aacbbc22336578e","first_seen":"2025-09-30T00:15:26.792284Z","last_seen":"2026-09-19T04:52:49.415293Z","times_seen":94,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/themes/woodmart/fonts/woodmart-font-1-400.woff2?v=8.2.6","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.512Z","timestamp":1789793519512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/themes/woodmart/fonts/woodmart-font-1-400.woff2?v=8.2.6 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://parik24casino.yug.odessa.ua/wp-content/litespeed/css/2925eedf8e882bcad8cd6d6d2118c943.css?ver=6aed7\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:55 GMT\r\nlast-modified: Wed, 28 Jan 2026 14:44:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 304\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMP5lAzJWvL%2Bf5tewK%2B4XVON9NF6N5vqBx3fTcWHEDXlS5noUqpixFe86jMLb4wcydAVbGo5jQjzyflYp98jI7zPUl8vndkj7QxWzt8S5mqpaHcXfL3wY8%2FK6r%2FvVwSushu32v5sPWYNUN56mN0%3D\"}]}\r\ncf-ray: a3d5fa79098e56bf-OSL\r\ncontent-length: 12080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12080,"size_decoded":13975,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12080, version 1.0","md5":"1714ad61469de2c1cc2776e5e0eb7394","sha1":"4a46acc1862dc44ea87d7463127204df1d0d12e4","sha256":"653b7cd0c5a50ddd30af79c1cd7c3ad8374a828190427924d5b1efe0d3458637","sha512":"17c889c83bb812cbbc41a40cb5ca448f39a85abb990fe013b400b8c1db4e043d71fa4a67561c79c1ac3984e785693360d1041bd6d21b4025a5bf9da6911dd8e6","ssdeep":"192:oYMUzOaXwfTLHEzVfDIRlzoxdeY1TcSFi0+eYXaOdT+UNEygkQtF:JMUzO4wfofmNcEY9c1XeYqOdCU+wQtF","tlshash":"da42d048b7c5ab43ca738f7e3203bfa73ee16e12e95ca776e6106049759a707182805c","first_seen":"2025-06-09T17:38:38.487283Z","last_seen":"2026-09-19T20:47:47.722183Z","times_seen":2809,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/?h=https%3A%2F%2Fparik24casino.yug.odessa.ua\u0026p=%2Fru%2F\u0026r=\u0026sid=XHPMAXAJ\u0026qs=%7B%7D\u0026cid=15614137","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.735Z","timestamp":1789793519735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Sep 2026 01:02:47 GMT","end":"Sat, 05 Dec 2026 01:02:46 GMT"},"fingerprint":{"sha1":"43:5B:C1:B8:A6:70:09:52:2D:8E:1B:CC:47:73:B1:C5:70:3E:79:8A","sha256":"7D:0E:28:A7:EF:D3:72:8B:E9:A1:88:8E:25:24:CE:3A:87:C9:00:FA:17:B8:69:AF:FC:02:5D:A6:34:15:08:CE"}}},"request":{"raw":"GET /?h=https%3A%2F%2Fparik24casino.yug.odessa.ua\u0026p=%2Fru%2F\u0026r=\u0026sid=XHPMAXAJ\u0026qs=%7B%7D\u0026cid=15614137 HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\nx-vapor-base64-encode: True\r\ntk: N\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/19/2026 04:51:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 79af8bf165b12606371af2a1b5b54d87\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":594,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-09-20T09:17:22.952695Z","times_seen":71257,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parik24casino.yug.odessa.ua/wp-content/litespeed/css/2925eedf8e882bcad8cd6d6d2118c943.css?ver=6aed7","fqdn":"parik24casino.yug.odessa.ua","domain":"yug.odessa.ua","tld":"odessa.ua"},"ip":{"addr":"172.67.184.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.283Z","timestamp":1789793519283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yug.odessa.ua","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:01:51 GMT","end":"Thu, 17 Dec 2026 08:01:50 GMT"},"fingerprint":{"sha1":"A4:E2:28:A4:9D:9C:70:ED:75:2C:06:9A:30:E9:97:FF:3A:CF:78:72","sha256":"E7:B0:E8:54:6D:A8:3D:73:3C:F8:C3:61:E6:CF:10:D8:16:F2:AB:92:8E:ED:0E:47:F3:E9:E3:39:F7:15:E4:42"}}},"request":{"raw":"GET /wp-content/litespeed/css/2925eedf8e882bcad8cd6d6d2118c943.css?ver=6aed7 HTTP/1.1\r\nHost: parik24casino.yug.odessa.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://parik24casino.yug.odessa.ua/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=720e63748d7fafb38af9616f07bf2270\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 04:51:59 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Sun, 19 Sep 2027 10:46:54 GMT\r\nlast-modified: Thu, 17 Sep 2026 21:25:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncross-origin-embedder-policy: unsafe-none; report-to='default'\r\ncross-origin-embedder-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-opener-policy-report-only: unsafe-none; report-to='default'\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-security-policy: default-src 'self'; img-src *; media-src * data:;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 304\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A0xuNN5pXPEKPMAJyQ%2F3biXakOgdz0x9jqpL6oOR0aN1hMrut2rbNbYdvwS4Bg8wvXO5wK1R8TYV9O2BDf6PkAsKhZ9nQNin%2B84QdFbF3hyvuXoCUxUufemBrFlC%2BzKfv9aNbWBoupu2JTVHyG4%3D\"}]}\r\ncf-ray: a3d5fa77896f56bf-OSL\r\ncontent-length: 72788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621706,"size_decoded":74724,"mime_type":"text/css","magic":"ASCII text, with very long lines (34299)","md5":"2925eedf8e882bcad8cd6d6d2118c943","sha1":"549309b31fe30cccafbecc0f481c3a942c964a97","sha256":"78fa87082680c0ade0131d6450bb25d75f54fefcfc47e1c55d3aac8d155ab088","sha512":"23a2d719b585a1c0e4625011c0ac50b03ac0570a7004f57124362a689ec32a9628f452683cdad5a5942092fc470ff7a80021013810941cb71a1db1d8aa7b3e17","ssdeep":"3072:MOcZdiJPIe+GDLnvKEY8OCtVGNz+iosqqxvEtkwRy5X9HLtkBJHQbXBH6QUt+eWW:uZdi119nRyEdf","tlshash":"dbd4b7b2f894241f27634cbc30e0f92a7e1701f2d9c25fae7465e6549a4586f363a738","first_seen":"2026-09-19T04:47:49.360748Z","last_seen":"2026-09-19T04:52:49.417163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"parik24casino.yug.odessa.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://parik24casino.yug.odessa.ua/","date":"2026-09-19T04:51:59.674Z","timestamp":1789793519674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://parik24casino.yug.odessa.ua\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 13:36:09 GMT\r\nexpires: Thu, 16 Sep 2027 13:36:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 227750\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":15841,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-09-20T07:11:13.86937Z","times_seen":2984,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}