{"report_id":"89741019-ba7f-4bb7-9152-ce6ea23617e7","version":6,"status":"done","tags":[],"date":"2026-04-04T16:36:16Z","url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"title":"Tardven Token","dom":{"size":51779,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26106)","md5":"c3e0b0d6fd912e1a214b1f4967736546","sha1":"cfec11cb0c9167d57401b3aaf8f927d90dcc1050","sha256":"deb70fde5cce9f5424faca253a52a863701327ae50135c7402ecf7b1bebfb7a5","sha512":"a8b633026f00c2f8ed970babcdd98559ef8e86131af956145b9e22f1f01f1bacb08740156aed5529c2ba009fdbf88cfab4b3e783cbb6c5a164e0f34f196b914c","ssdeep":"1536:psMAUdeGtD2LQdzQORQCSA3v20mNtbqfNeLCOIhIFgfE9:pjAWeGIEehXA3v20ctINe2BIFgfE9","tlshash":"813319f2d1f02667418f07c8fa5baa08fde7539e9e468d88709cc7d41bda992d5ce084","dom_hash":"domhash313b720af0adc24f4c3d32889824be5e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T16:36:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"arclight.vimeo.com","ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2004-12-15","domain_rank":24414,"first_seen":"2024-11-18T21:51:17Z","last_seen":"2026-03-30T04:54:38.371396Z","alert_count":0,"request_count":1,"received_data":262,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-04-01T14:21:31.955419Z","alert_count":0,"request_count":4,"received_data":1397229,"sent_data":1804,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-03-30T04:54:37.071014Z","alert_count":0,"request_count":2,"received_data":51278,"sent_data":1152,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"tardven.cyou","ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-04-04T15:49:26.701719Z","last_seen":"2026-04-04T15:49:26.701719Z","alert_count":90,"request_count":90,"received_data":3754239,"sent_data":38666,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-03-30T04:54:38.155883Z","alert_count":0,"request_count":3,"received_data":14876,"sent_data":1607,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tardven.cyou/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","size":5467,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-04T20:20:48.868442Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2cb804d40ec5f33bad5ed8ca104f8d4","sha1":"0ac477654db19cc5f3e258d212105e2803f682fa","sha256":"4e9a11b3c3aba5332383e1959b11b49792762e05ae123bc625002eafa96d4dd4","sha512":"98126b5fec5801fb72427882588810b8b0d472332e909435ca8cd62a3700591b8b9591f3017ec5bd9259adbf56644668a93b34ed53b4cd1fa2f869afaef5958c","ssdeep":"","tlshash":"cbd05e21e6033c878081d47573f45e87238e9268448268329704fd4c9a9e860dae4939","size":256,"data":"","first_seen":"2026-02-13T09:17:01.825408Z","last_seen":"2026-04-04T20:20:48.931184Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88bc79d0132e8e86af611e62b82e9c95","sha1":"009316ed784b790a502348229b60a6aa94efafee","sha256":"d04e9adf9035d590e27e9914e730c2ee1b6c9324e99010d544c1097fc512196e","sha512":"212d24a869990762abc5289d06a970b7c61a6966e49b59cd96f227949874717f789fae5b234af0c8cd7f6774b413957def85deaedabcf9ee012ec9f6ed2c5220","ssdeep":"","tlshash":"ca41bac35bec80f88826321a5d395659e6bacd7303480876de5d2c8cec24927c7d76b7","size":2266,"data":"","first_seen":"2023-07-21T16:36:41Z","last_seen":"2026-04-04T20:20:48.931704Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T14:12:06.922148Z","times_seen":690113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c196103547da77a797826a7aa9c4f2ce","sha1":"2513f5d74a497648ce2a90eb7385043ef154917f","sha256":"9fe59867813dde78a03da53ea5b279e41a3685dc72aad20cf573af4a1816c695","sha512":"63f4d7b58451e096d0052bc1c3427fdb7c6e950067f3215f180290b312736a991f29008f5cd7c5f6dc270654043ef3369e4569d75e259408905df5c3ba49d48d","ssdeep":"","tlshash":"71c09b77608a6494095b7776907b414f323455906f4a2808146416e5476f579002fbd5","size":133,"data":"","first_seen":"2026-02-13T09:17:01.829128Z","last_seen":"2026-04-04T20:20:48.932221Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-fullwidth-loader-1.js?ver=6.8.2","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd950b0fb6f0a02c14fb8c4622fc869","sha1":"aeb6d4c0fc034e30e8e06604dfab2ce0b480246a","sha256":"8b38dced62abc735aaac44d0aa8c6d4905533404bef9e5f3148be860079ca2bb","sha512":"7f27917140fb68564e394af28528298629a4fe6df63bb5d603c573bce83a50a0802632c87149930938fb86a4e9de94accbbf74ab319f7c2c417d3f070c3b545a","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkf1ikMLM:inrIt8D+kgdn/Mo","tlshash":"bca1661d747000fa597ba33ad5bb458ffb7510271306c4a0b8ac9c992fb1da125e6fd8","size":4924,"data":"","first_seen":"2026-02-13T09:17:01.814409Z","last_seen":"2026-04-04T20:20:48.869557Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/js_composer_front.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","size":20637,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-06T08:07:13.236765Z","times_seen":2161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/raphael.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","size":60293,"data":"","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-04-04T20:20:48.870085Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.carouFredSel.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","size":54800,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-04T22:53:03.965106Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-04-06T14:26:55.664521Z","times_seen":31508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.37/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4ea61648d86a1581260c70029fcb0dbb","sha1":"e6acb5018b942132d802fc8473b1c364829b6903","sha256":"75fd4478b91247330e79dfd6ea1a7056dd94fdc24eb9f20086da0e628059d7da","sha512":"fcebf9ae2a66a7e3e750fd9336d0a276e2cc6c22d6f9c75f97fce0724ed0503b3a2fc138d04e431645f0e842c2acfc65ea7675f6ebdf57dbbc5880746a25a6b0","ssdeep":"6144:WxrQb8XM5U5dAbYwlkc9IERDGRDox12r/l5lD:Wx/85uclGmroD","tlshash":"1264f7dcb2d6f07143e774a6403f200af23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326740,"data":"","first_seen":"2026-04-03T12:39:14.65652Z","last_seen":"2026-04-06T13:49:01.660123Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac2f8f4edd001a91bde956fea68d3220","sha1":"5cdd8973f800a0061298f28e73fd21c0dc4edfc6","sha256":"23e26cf88e8d3ac4d80445c8d99260b902c29b2973abaa815b6da45bc639c614","sha512":"37d3c9da2104f864478cfda9a514a506b91e3c4d53cbc1fa1f5d6563d91fb51cb6dfacb1c4abe8e2122750c8a6c0433624834bc4f6a04c9ef46c851898e73bb3","ssdeep":"","tlshash":"5ac09b6760de54d80d577776f47b428f333455d06f4b240c486415e4436f5a90037b95","size":142,"data":"","first_seen":"2026-02-13T09:17:01.830776Z","last_seen":"2026-04-04T20:20:48.932704Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/quickfinders-effects.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","size":7834,"data":"","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-04T20:20:48.889061Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.transform.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","size":15261,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.925365Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89c9c21293ab68e6f60747223f7f99c4","sha1":"5e9f1493a3fb7e1bdf9a980e65cf0f2d7af89ae2","sha256":"24f12cc9f615529ced7291d4f5a561c5bc3303dd18ea6a72188c3dfccca2c3bb","sha512":"79a627669e084992dbad71ccb95e8f228a8993558620cc93f0a80a444772ebd929855c7e9ef6993aef1c4d0ea093adbd8a481fd37e5ebf53fc64ce8a2abd3c20","ssdeep":"","tlshash":"70c0c0f52100b0bd1c84894628345f0c8d8641163203c816e61017cc3711fda470c0f1","size":185,"data":"","first_seen":"2026-04-02T03:17:59.486008Z","last_seen":"2026-04-04T16:36:22.200742Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.37/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c33e59c000384df6714d0d7aa1e965","sha1":"c6cbf453a5f1ebaf57c38c75530037ca21a13e7e","sha256":"15ebc07139bdf2de9e08849d0645c4bcb4ac846a9795ae9ca37282491a05e238","sha512":"9619465d806a2290fff9ab41b763d1c489eeb9796ce5a64907638ab584c9fc7f63769c134fc3805f454dc5a1c873b3e660a52392d639fda1c20379b5bc04cc4a","ssdeep":"12288:Erm8hIIeep/F0StwHR+HTpfnD+nqf6V5zw8oxGQMfQG3ez53O7TU/85jwrFNYbSO:ceeb8HR+HTpfnUY4T7vzzpvQAbyU","tlshash":"ed056cd672c6f43182d645a5a47b1203b33e169cb80d874cb03dadcd29ad945b2bbfb4","size":855210,"data":"","first_seen":"2026-04-03T12:39:14.670921Z","last_seen":"2026-04-06T13:49:01.658555Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-fullwidth-loader.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd950b0fb6f0a02c14fb8c4622fc869","sha1":"aeb6d4c0fc034e30e8e06604dfab2ce0b480246a","sha256":"8b38dced62abc735aaac44d0aa8c6d4905533404bef9e5f3148be860079ca2bb","sha512":"7f27917140fb68564e394af28528298629a4fe6df63bb5d603c573bce83a50a0802632c87149930938fb86a4e9de94accbbf74ab319f7c2c417d3f070c3b545a","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkf1ikMLM:inrIt8D+kgdn/Mo","tlshash":"bca1661d747000fa597ba33ad5bb458ffb7510271306c4a0b8ac9c992fb1da125e6fd8","size":4924,"data":"","first_seen":"2026-02-13T09:17:01.814409Z","last_seen":"2026-04-04T20:20:48.869557Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbcc6978e7d248146c72889950d25f98","sha1":"9b31c20aea1df87f57ae5ada001a6e888b81236f","sha256":"e84f1e6c297fd4b9bfb0a95cc640a8c5a3f956c43de1f4073613385cda49a3aa","sha512":"8dead4a0736c403825dce4ae716d6576a63cc609624fb5d68cd1f77f6ebbd81a28863a32cf3f85c7657314e33082728d6a7d6d579b1aee8099167c78823df2db","ssdeep":"","tlshash":"69e05cb58b22301a818a1847cf57141c1151b24fb3d3e8863f4c93265f46a6bba365cd","size":434,"data":"","first_seen":"2026-04-04T15:49:35.403219Z","last_seen":"2026-04-04T16:36:22.20156Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbefeb3697b6bdf2e9d1e237950be7b5","sha1":"3de43eb4eba2d5533869d8ee5816e5d13d7d0b8d","sha256":"ad163ecf0c26521a155d27b415fe20a8a7b50777fea6eb56dddbd9acaced6406","sha512":"fbf32383cf7d7192ac5463baa20efb95faa868a82927393c667040b54da2f51a280b1893890b9e8756d11fe0bc5650f0d8d7e7511586eb67672c1f667e99122a","ssdeep":"","tlshash":"d3c09b6770da6895095b7777907b414f333455e06f4a2808187416e8476b57d012fbd5","size":133,"data":"","first_seen":"2026-02-13T09:17:01.832336Z","last_seen":"2026-04-04T20:20:48.935529Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"282eb776892e2a48c7e3df7955cd9489","sha1":"6cf31ac230181759dc19c76b6538aeddc710ae5d","sha256":"c8fa7fdc89accd803ca53830b3e439079dfb78b2c7a413d6f2686d7147192a98","sha512":"7f06736666bc244b3d19534d74913fdd5b91f3ba76e7597608969379b365d048f16cc5d12de044297e9d8cba17cb090c1dd6fdff86c8c2f4aacf51993239b546","ssdeep":"","tlshash":"6ec02b6360ce44c80d5b7736d47f014f233005902f0b24084c6010f403ef2a50037f80","size":142,"data":"","first_seen":"2026-02-13T09:17:01.83377Z","last_seen":"2026-04-04T20:20:48.936137Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-sticky.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","size":4075,"data":"","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-04T20:20:48.928313Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.mousewheel.pack.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","size":1396,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-05T11:12:46.59027Z","times_seen":1466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-waypoints.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","size":9237,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-06T12:58:00.287554Z","times_seen":6207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/effect-drop.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","size":753,"data":"","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-06T01:19:18.297636Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b49e624e7ebb8832a68cf67ee5338bdf","sha1":"ec3056854eed1c3d4709d7adfa491e7aab6f0528","sha256":"8e2fe6c18bec8f2cf350a9ad3d25874589631eabd9c086e92388ce009d40e33c","sha512":"f7733cfe471c2b71180273f06f2df177b21e1fee09433b586988e4830ee1c94d0b98fdccba7ff95b49e62a066785a592bca627d93f68f96e323f119d2f165eeb","ssdeep":"","tlshash":"40e05cb58b32301681861847cf17141c2151a24fb3d3e88a3f4c93261f46a6bba3658d","size":431,"data":"","first_seen":"2026-04-04T15:49:35.408234Z","last_seen":"2026-04-04T16:36:22.203742Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-menu_init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","size":18496,"data":"","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-04T20:20:48.862624Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/index.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-06T14:14:49.865772Z","times_seen":149756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11bf45357c852510e20d1d87c6ec9f5c","sha1":"b7cf7b475ebd7264aeabfa27cf287b2fa9e4322e","sha256":"eb0f452e2e9f27baa5e5b31f937ad9fd0846ba547164f171df58332453704b73","sha512":"46b5c092b30d86b88758e81413e85cead83420bdab6a6074de78929b9e5798cd6e80a5c56e22bd627cf3d87355582e5cd0b3348ba2e86bde71f01f58f32b6ef2","ssdeep":"192:i4Kcja0Dibw+iSCyeZwXfXAJCQPHc3yCvUyX:LKcjhYPATA","tlshash":"abb21bad46f22125b553b23d5befa2443632a103084bed113d5ca3884fa15765fbafbc","size":24468,"data":"","first_seen":"2026-02-13T09:17:01.839485Z","last_seen":"2026-04-04T20:20:48.938283Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-tta-autoplay.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","size":2545,"data":"","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-04-04T20:20:48.913617Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-tabs.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","size":4192,"data":"","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-04-04T20:20:48.859804Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-accordion.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","size":17314,"data":"","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-04-04T20:20:48.888045Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery-migrate.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T14:09:40.805228Z","times_seen":642940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"adb4abdb8e5f221dfe4eb2561a0f2499","sha1":"45c4f03d1c8ecc12fb7712695c9bf981ab5d8e33","sha256":"14f3c40cb168d03f02f8c3b9dfac5808279e4e6b67a895f75a2b9ddb838aa624","sha512":"76f08b4494ac0e800a331040ca393c25c4981d8edcf6ed0f2c762867da1db9a2670c68e7663aa3e9e81a53b393daa79e59d69590533e666ae906af0b1cf1d291","ssdeep":"","tlshash":"38c09b67609b7494095b7776907b418f333455906f4a2808156416e4476b5be002bbd5","size":133,"data":"","first_seen":"2026-02-14T12:01:42.44808Z","last_seen":"2026-04-04T20:20:48.938936Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.easing.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","size":4198,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-05T11:12:46.574245Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.fancybox.pack.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","size":22639,"data":"","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-04T20:20:48.891189Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1556fd02c62b3813b462e28f1ea533c","sha1":"bd63d4ebd5db4695a57bf1562f4b932b56b2231c","sha256":"1ea75523d41bec25da109b5759610c59bbc74b3e4e2db5bc8fae7f0b55e8c101","sha512":"2dd13b31e1e160d30c46d67751fcd9fd10adf2fb3aede902f3cf827d72dffaabf99a547dad68497d438fb28f52be217fd4f9e78c75f0e1163937400fb597134d","ssdeep":"384:nlJlJuVUMUwlpjlp5popv7IYWstEINtbqf9XCJ7j7:nlJlJuVUMUwlpjlp5pop0BINtbqfNY","tlshash":"8742d833f5d86d7ad7d42a8d2d4ebc0a21fa110b6dc19d64a6d7870d11ff696324b088","size":12368,"data":"","first_seen":"2026-04-04T16:36:22.206066Z","last_seen":"2026-04-04T16:36:22.206066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/js_opt/modules/utils/vuid.min.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83583a4061ddc27e8b6ee0dc269519cd","sha1":"8b1c0acc28729208f640473eb5d8fb82c4ba3e15","sha256":"c051b8b5eb2a0aef699780f15a449491868faa6f8b39b684b5ae8f64f345b94a","sha512":"3652ab4345c138245677f415607e6447358dc064b8b3ad7820f34bf225a0d70b0820afd87e5d2235919afc703248da54f126df8f793dfda529d1fa336fba22c3","ssdeep":"","tlshash":"55318449b1e270b743e7029505ab245ab2f49e527cbf24049802f5e038357b2de7fe35","size":1862,"data":"","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-06T14:26:55.64678Z","times_seen":25892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a7858ef71d44fb3ae24011967d12c40","sha1":"ca738ecb268725f74236e4c9ac581c493d89750f","sha256":"407630823f5a28abb0b4e5f10f339cd926d05bfd4e99fb21909106d026675b08","sha512":"1b38a4e648b596e0600e6f9eceef566cbbac583d4726c6f03c77184a3cfd1bb7ac1d357336dcaabe73fbc5954dd0dcdd46a4a2488613c5b69ce178a973dd8a67","ssdeep":"","tlshash":"a7b09267609aa89509abbb36a07a418f603451906f8a280804a510e843ab8aa0027ba4","size":118,"data":"","first_seen":"2026-02-14T12:01:42.448946Z","last_seen":"2026-04-04T20:20:48.940167Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-form-elements.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","size":1751,"data":"","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-04T20:20:48.924794Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7666d9d50e42444f8f7cd2ee71afbc80","sha1":"50b4c41b21c442ca5a25422fe04f51d47effe5d3","sha256":"9107fdc2f8be839ca7111e1a5a51c521c0fe7a6e35bea928c93be71308b413a2","sha512":"8d6edb5bdc90e00d7eea00372cd47bfc9147278031d1ab7f4b5c6f395162c19a4604abe73ee93834dbfde362e934f1811dfb2f10a6ff1573405b088acffc0344","ssdeep":"","tlshash":"1ec09b67608e6494095f7777d07b414f333455d06f4e2c0c146416e447ab57d002fbd5","size":133,"data":"","first_seen":"2026-02-14T12:01:42.450966Z","last_seen":"2026-04-04T20:20:48.941296Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-settings-init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","size":2214,"data":"","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-04T20:20:48.890099Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08780fe79d77c138a490e6f4cc0a3f6f","sha1":"9f0af5cc07115c107990b291042832bb7cdb522d","sha256":"a41b60066d7ff52cac5f9715722c072b1c9ea0d7e1c47fe5d88b684aebe15a3f","sha512":"0fbbcd9e38667387b3226cd70ebecfee195b64ff75ae9fb9123ae390290c8881238a0caba988a3e77fee9a80b90c8c18b532bdbaff7e9cc68ba6a19c096ca064","ssdeep":"","tlshash":"fdc09b6760de54d40d677776e47b414f233455916f4b2408547415f4436f5a9003fb95","size":142,"data":"","first_seen":"2026-02-14T12:01:42.451849Z","last_seen":"2026-04-04T20:20:48.94217Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e9f944467b48950613e482f28e5086b","sha1":"a1340f1708da15090498b156a537ead9b797a629","sha256":"ec1037f8c35666d185d969d2c6986bae76ced6c7f5596680c429a4fcfb67e52d","sha512":"f81bd179d0bd737759ab2663c8de583c77df80909f5854767c292461d6beed87cec1c7973736349ae63f95e557f303f9920a1958f67746abbb0c0db064f382ad","ssdeep":"","tlshash":"5db0922760ca98940a9bbb36a47a418f203551902f4a2808046410e84bab9aa402bb95","size":119,"data":"","first_seen":"2026-02-14T12:01:42.452744Z","last_seen":"2026-04-04T20:20:48.942677Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/diagram_line.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","size":1591,"data":"","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-04-04T20:20:48.860321Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-header.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","size":20279,"data":"","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-04T20:20:48.921599Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-lazyLoading.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08613418b4241d070486bf9db7e72048","sha1":"8f960836ab2d971a7ab02d879b0eb335fc7322aa","sha256":"9a257269b238e9ac671775d23d5f5174c4aad7dc97ce8e09b5bf1f62094bd818","sha512":"46d5d908d004b8c4b4e1eb1c2931d26da04c3de10660c01c50ef0c37ef2fb86d61abbd37920a4a9a2513ac8dafbf484bdb21ca605459507cad1237f8e58bbd89","ssdeep":"384:+gpDy3SLtWmO88QCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/ofaQzFHKZuxs25oohbZxG2C7H","tlshash":"a562fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","size":15560,"data":"","first_seen":"2026-02-13T09:17:01.772576Z","last_seen":"2026-04-04T20:20:48.9221Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-04-06T14:36:52.956889Z","times_seen":12605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dc3a0095cd9ab6fca01f42677b4cb09","sha1":"a15902c9cc1ced40821b8ece0f628b5787543741","sha256":"63028dc8c24d236cd644712be1ce64bc82b945bf85fdd265cd177739736851c7","sha512":"a0cf22f49ef83fc7ce96a2c249acd14a2e4c79620692f7e49450a39273f2d6476cbfb03d7f6f2c3dc678aa2ff97a60f83b5372da121d547ed62acf7fe1b9167f","ssdeep":"","tlshash":"d5c02b2360ce44c40d577776d03b014f233001902f0b2408047010f8436f1a9003bb80","size":142,"data":"","first_seen":"2026-02-14T12:01:42.453574Z","last_seen":"2026-04-04T20:20:48.943197Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28fed7c9ac1b534967b5b67117fd95eb","sha1":"fbbc086f1adf965172da9a982e98c7ea8ad5dbe2","sha256":"cdbf1981eb48a12b99725292c00b9175926e0d6a628b4888033039e4e865df37","sha512":"b259d81d9b18bd5de1d4b072c5057aad02cd1d14077e5fd4470e27dfdc8ce23d73120ea6f9e0da967a7ba5ca59bb486e1ada863dfa2f0f3d22d5f091e313d538","ssdeep":"","tlshash":"7dc09b67608a7894095b7776d07b418f333455906f4a2808146416e5476b579002fbd5","size":133,"data":"","first_seen":"2026-02-14T12:01:42.454524Z","last_seen":"2026-04-04T20:20:48.946527Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/clients-grid-carousel.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","size":3902,"data":"","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-04-04T20:20:48.920131Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-countdown.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92572004288bfda60ad8b184cd57e50a","sha1":"08fc3b134ec78d3e18de73497795c459536f6958","sha256":"15588e0ea0a0ddd7a83dff027fe98a528929134ee6ab15d247a5928a46309f88","sha512":"e0a0b632f800ad6cef33107c88f7de7c6ddf2bf3a326b6039335031721834551775ce2e7aa6932b5358762ea840d61530b677fa3df92850f3b0f2822a47705b2","ssdeep":"192:5dmS0RrndfAZtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0e:KFRrdfA3uYFRTdZTaXif2c2D","tlshash":"88328644cb7a13384ba3e25d53cd6a88faad6183d3094c95fcbc8d096f69c7d7118d98","size":11241,"data":"","first_seen":"2026-02-13T09:17:01.81966Z","last_seen":"2026-04-04T20:20:48.914104Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-04-06T14:27:35.836112Z","times_seen":31094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7405cbbc6d1c7d8f81c6236da69b8d54","sha1":"dc68bcb2abaee9de9d62f378c8b409ded1b45316","sha256":"25bc3bbd4186ae8a4b1bedf62de6600c868cd93f00b5e49de361d345add09bf9","sha512":"b698617842bd416e1cb7404d98814ef9156c7e87f8a404a61954eb98f68ee1ef7808ba4a706790f277538f71a72d5b3a742e466ede35026e32da58022f94df0b","ssdeep":"","tlshash":"b2c09b67608a6494095f7776907b414f323555906f4a2808157416e447ab57e402fbd5","size":133,"data":"","first_seen":"2026-02-14T12:01:42.455458Z","last_seen":"2026-04-04T20:20:48.947034Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d9489ac5bb52f5443f6343e7ff2b839","sha1":"943ecb875cf33f4429ce3459fb1c37d46b9fc39d","sha256":"9e48e2a1f656c8ffdddf7cbb4be5588cb574237827849536340252b16d9fe7f1","sha512":"8d31fce1d65c9e5ae7bc0dd173ecaca0df174bd5d4a759fa33591f62a21ccf78c832d1bebac87e5089cb3652e32849c0dc24d3009cd26376e702ed7395f921e8","ssdeep":"","tlshash":"05b09237b08a98a5099b7f37a07a418f3035a6a06f8a2808046414e843af8aa002bf94","size":122,"data":"","first_seen":"2026-02-14T12:01:42.456281Z","last_seen":"2026-04-04T20:20:48.948097Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc_round_chart.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","size":1886,"data":"","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-04-04T20:20:48.863709Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/effect.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","size":10332,"data":"","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-06T14:12:56.014344Z","times_seen":11816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/Chart.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","size":73795,"data":"","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-04-04T20:20:48.870695Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.touchSwipe.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","size":11969,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-04T22:53:03.920853Z","times_seen":435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/api/player.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31fcfe63d08e95c4473050807ddae7fd","sha1":"c517964c30c0b01e0024854f4403b0b2aa8d0d2a","sha256":"b85e1ac1fdd730657e444c4171c138bf16430adc5b697271fbe6f4e8c8fec25d","sha512":"f7ad52926e48b37b2a9b9d1e576ecf38524d57d7fdd3d1e11a8b7f3905658fcbc785a19af0016a370636ffaf6a9baab93bdf5665ef44ceff72f314ad00876c46","ssdeep":"384:XQqRq36B0PoRuCXOLGvn/GeFnqvjmh2XK3EiyiBy45BkEw:zK6OCXOLG/GeFnqvjmh2XK1By49w","tlshash":"30b2faa63397f4b1539b606e683b6207f1340fb9240d9064b629bdf67928dcb845bf70","size":24397,"data":"","first_seen":"2026-03-05T16:02:25.664157Z","last_seen":"2026-04-06T12:31:03.070488Z","times_seen":1844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0395126d187a413bea69be9156065f2f","sha1":"1316909fab54c50dcc4e8d4c552f4b91d1dab45d","sha256":"216eab73876fcb71942bc66e58bdb70c77db63ed5128a23d0cf64bfefcf77668","sha512":"dfae1d4a2f220c89230ba2a278e2cfda6ef60270dd5d072b54d368725132b5f28c64a72f186d720e1952dfc2fc62cdc4a21d952c35e218dd2957d2b4960d5495","ssdeep":"","tlshash":"85b09b27608e549809577736a076414f203552502f4a1408046511d8436b5550057b94","size":120,"data":"","first_seen":"2026-02-14T12:01:42.457104Z","last_seen":"2026-04-04T20:20:48.948576Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/functions.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f98c6fad4758e0e07e2245cb8d8f9080","sha1":"9fddc211ba32187f0471f38be543194c8918a40b","sha256":"10f6faedca553ee882a56e90d811e1f14a0eba98359f7beb8e57c97bab0c4068","sha512":"35f7fc1430abcfa3337227e1e8bdcb3bd779f00f26cb39ba1f18046f085bb1d13a60c81bb3a7e7cb99518f87555bc5af72b10d71952d3a7c15bc97c7fc8e3ec3","ssdeep":"192:rCCqIqXM37Y79+ne2kxMfOLBNPxtqHhfxoArT6DLI+lZ7Tu:wgLY7KeImdNZtqHhfx96nq","tlshash":"b662a5d0b31eb96e49f73339d03e9548ee3ee531830242b6f4b9902c69d0584a376e6d","size":15606,"data":"","first_seen":"2025-09-23T17:21:13.838324Z","last_seen":"2026-04-04T20:20:48.894045Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf937adaeaad277808d27d68e548e24d","sha1":"c834d13c2adb7b31dd34ad163c559738119b46fc","sha256":"e13dafd4e2b4fa1c759fbff60a67cfe4899dfc73311e479beee79ca8c7f335e3","sha512":"540c43a3570617ae56c9eca18a419329717674ce6f2591849ecd768ecd8a1727833d9319cf1ae1dcdb3934f6236eec0fa1342dfb8140bc4d58c4135cd684728e","ssdeep":"","tlshash":"c1b09227608a9894099b7b36a07a418f213551902f4a2808046850e843ab4aa002bb94","size":117,"data":"","first_seen":"2026-02-14T12:01:42.460267Z","last_seen":"2026-04-04T20:20:48.949049Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/zilla-likes.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","size":860,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-04T20:20:48.910383Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6e6f37cf9a87d32e613f6caff9330ea","sha1":"6f37681daca97226a8fbe1b9e1bfc788deb42c1b","sha256":"b9725e960a7372ff5f2fdb6be11753588b288fe062dbd7eb6f58f7fbf16e339c","sha512":"aa7f8db5ccb745c96af8182edd4133189204de24330ead7ee909a54eac1a01e29eff0c0e697b477434d07f8065a6fd8a2c9f24a9d6e446a3d667bad1310df5bd","ssdeep":"","tlshash":"61c09b6770ca6494095b7776907b414f333455906f4a2808146416f447ab679002bbd5","size":133,"data":"","first_seen":"2026-02-14T12:01:42.461211Z","last_seen":"2026-04-04T20:20:48.952888Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","size":27139,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-04T20:20:48.873158Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc5d6b2dfae584f07dd0d17b891529c1","sha1":"20bde7a6966a9fb98b6f37eed190fef65cacb8d8","sha256":"134b38562c33732d157564865e214c745254fe4c06029181812e1297bb23593b","sha512":"1591bfe57ab41f634c23cdeda0111aa4de6e8464426c30dba46f4e0b130d3cb7466bde1ca41b0a0ed2661c6bd45e8356a6be3f810c6871c46ad6e1b0303a8d55","ssdeep":"","tlshash":"43b09227608a989609ab7b3aa07a418f203851902f4a2808046810e853ab4aa002bb94","size":116,"data":"","first_seen":"2026-02-14T12:01:42.462046Z","last_seen":"2026-04-04T20:20:48.953897Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/svg4everybody.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","size":1160,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.874567Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/forms.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-06T06:06:06.819949Z","times_seen":4844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a6f71f0bdf3eb29b422fec1a79f990d","sha1":"89da67d1b174aae17783d61ba3d5045e4d23076a","sha256":"4e0920a30f83556575a22b9b1762e41c3c4471db222ec00c6090b1e644529484","sha512":"f39807908631db6a8a2a5caf6679826d183633d671dd46880306b112e0b935bb2ac22623c682c7567233af24e9785361907667c05ff1f7a0d9b9a57213b43ef4","ssdeep":"","tlshash":"e7b09227a0caa8d4099b7b37a07a418f203455902f4a2808166410e843ab8aa0037b98","size":117,"data":"","first_seen":"2026-02-14T12:01:42.462795Z","last_seen":"2026-04-04T20:20:48.954416Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5840750d6791d8c13aa59a056d1a9cb2","sha1":"f345a786a46e89ece3a30fbf50de6c1652b1ff9e","sha256":"333d56583b6917d4dc6ef81f6ba55a348d4dc80f2fb3c1f9b78bce44e7be3582","sha512":"ab3da54ed62a43225d16d55994f8a5d3cd9545ba834e8dc12d58a8bd65dbeb6690ab07be2bfc91f32fa371aa3dc54f311f04627f3054601082d9624893011c0a","ssdeep":"","tlshash":"adc02b2760ce54c40d577b37d43b024f233009903f0b240c046010e403af1b9003bb80","size":142,"data":"","first_seen":"2026-02-14T12:01:42.463662Z","last_seen":"2026-04-04T20:20:48.954942Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.fancybox-init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","size":927,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.888531Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81f2d33060b411abfdb2221eb3d774d6","sha1":"2e1aff99beb431e7e1c543ab7faab37979ee6bc7","sha256":"e33cf6e22f336e3eb9f92e58b7fe2e0e9b9bb2ad9cf2c155a8d4ab094d288e28","sha512":"e199432a9eeedf6795e966cf7ff36e09b3c4f7db47fcec673306e1b548c164f26dd56c2ae65174a3f463fbb84898e7b1af5b8689a505f749c393aa6f426d2f8d","ssdeep":"","tlshash":"cfe0c9ccef4f601b11786a629f6f62c9206c81361cc204bb3e4aa7447911c2ed3089bc","size":318,"data":"","first_seen":"2026-02-14T12:01:42.464521Z","last_seen":"2026-04-04T20:20:48.959065Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/hooks.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T14:13:07.814595Z","times_seen":210438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/odometer.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","size":21077,"data":"","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-04T20:20:48.927281Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/isotope.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","size":40858,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-04-06T09:30:55.999052Z","times_seen":827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f851bca59afb7705dc32202092ccc8c","sha1":"c192ef8e2cbe2ad6d2760ec808a8ffc98d258e55","sha256":"200a47fcd3537f1b23a5b09481455719856bd19cadba8533c3068da453958234","sha512":"9f6161b2f7e3302cbed5ddf18bf2f8919f08babbef0a373e688f6b2dd2dcbbf33b88e3d2b715e0d022a854f2db58937b216dea633f11a1f3121466ce9cb66c3f","ssdeep":"","tlshash":"87e06194bf5c382a0144215d369596cf973d5671184184cfef7c28438870c16425b97d","size":393,"data":"","first_seen":"2025-08-03T07:31:22.872889Z","last_seen":"2026-04-04T20:20:48.959648Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a87867ef6a8d7063aeb13a8e2cc6fa48","sha1":"de2465a866074fc85d9892c9484d07e6ea3c7778","sha256":"5b0ba47b96243b47a80dd50b6fd5d121d659081dada924cb68042308bf2426bc","sha512":"0ee20957d124057df80ad58a66eefe85ff17b0d850a6c6ba881ebdc060d85af3e19d7661b5234df9f44c04021179b5f6bc3645b911bf1e45afe7619b83ff96ca","ssdeep":"","tlshash":"20b092688ac9a893d064b7f1b699c712605b4694003d8d4dcb9cf8891aa18988c8087e","size":122,"data":"","first_seen":"2026-02-14T12:01:42.466747Z","last_seen":"2026-04-04T20:20:48.960678Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dd23103c55f0d28653b900d8392d173","sha1":"1680a21ebff2a63bb01dc497ec28caa8f6f1b8c2","sha256":"8cfe24a3034b346548e0536c141fc8d882a95949644f61f676d265068ddb3bc4","sha512":"3b6b4f90b97de03765b6d74c688f176d2fa0bdf08dd31b4199fceed28dc62e140626aee1f54c294191dcd37f0d63c7def6082245cc5f11e78fe214ba88f97704","ssdeep":"","tlshash":"3501cba487323016804b38178f4b10181161a16f7aa69c463f0c87946f96727fa7aacd","size":715,"data":"","first_seen":"2026-04-04T16:29:57.529662Z","last_seen":"2026-04-04T16:36:22.227345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.dlmenu.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","size":9087,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.920659Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-vc_elements_init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","size":1187,"data":"","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-04-04T20:20:48.92887Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"tardven.cyou/src/ct-reset.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-reset.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"9ba70fe8b234178b5292238adb5852e2\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C25LPlUnjXt%2FY4TEDBIHCjzUZPLXxlJKEawR1bG579teYAfbtoukuEQobTdP66YGDIyBVggzHZ7WuBroNqks9%2FxFQWlAPvWq0alXn90bNBBtxzjcgI%2BxQTWSuYQv%2FkU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cd61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b3c589bc9c1635c3a6679dd054a4682","sha1":"6ad887b2f4dd83c695bc661ff1eded4131d3f632","sha256":"be4f6284aa304b9becf68fc6c817f9384ce831d9d14f708a1211c4e59c3056d7","sha512":"f7e4cf88a10192ded4d9289440acf82a17a2962b0370bc1fe6c33dce258a91d67258a06a149a2d641480e082a446b7845498c5b70147e4b5a1781ef168f258d3","ssdeep":"96:GTBNWefkzbdR+tIMfW/5cG1JqBdDEcPTDEXLgEH7:GTvW1d/MfkDuDVDkgEb","tlshash":"ee8101fd660012cc93229f58b7f2af645e1001718e1f817ef890adad92c69152af2776","first_seen":"2025-07-04T07:44:29.918936Z","last_seen":"2026-04-04T20:20:48.895341Z","times_seen":160,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-vc_elements_init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-vc_elements_init.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"d55cfea9c716536fd857751be9807669\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nt%2FuHnENAPFTs6yK6auP%2Fc%2FDCPXndU5Kz%2Bw%2BUkWG5jKmeZiSXZirmO40%2FMpHO5kuFUghaQehbw5JehHMe9dT0ZkZP%2BR5T8m2RXvbezML52SzNdB0qNrHs3Rcjho8mPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-04-04T20:20:48.92887Z","times_seen":160,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-accordion.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/vc-accordion.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"9680d2753b15a87de5d3b7331dc0d4bb\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQCTMXd%2FLPm%2FpcJ3%2B3RSqKvqK40Zy%2FdlfjJI3XUJ8iI6LpKl143AH1hD5ZV9nmF4jpszvHZ13PD5vkLnSD%2BcIlHc0%2F%2FhQFiKV0QUCOVsy1%2B%2B%2BNcwTuPk0zjRD37JS%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ed1b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-04-04T20:20:48.888045Z","times_seen":156,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/1.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/1.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 47841\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b4a68c70c432eb9c8dd9ce7a09c479fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eV7Qw7yXOdqu6PqGfwZrk9JBmSI099ahirAdLC230nTkzhdYXBf4u0StLXQrQRhjjZDyy58qLygoicDH41uaTwYs96RzhsynSFi6KzzyTsDzJEAy5qtMRx7oWyqrEj0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba952d921525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 584 x 532, 8-bit/color RGBA, non-interlaced","md5":"3e770683cfdf6b856c6101560d065757","sha1":"87a8eb2a5c9e54841dc04280afa807fc033397da","sha256":"25cdeed5590c5ccca1e9302bf849a1a56dbb6635e0d2dfc9a0cadc9d3e510b37","sha512":"1f997a496650e4767d09ebfd6a6983558973d7b0aad5e3ce77d48ccfe8c1a017c11202338ebc5c11523a201068ec0d4c0ba85480533065921fa0c43a047d34c4","ssdeep":"768:sKR6uVo3tys0aTrIkJDxlM4bfit0g99KP0n0AsWju/5B/BvqTUyTm+e+fT/8:sBuVodlD02DbLLmEotHa/5eTlTmjg/8","tlshash":"8723f257e2fc9d8c2ad51383204678a2b6ff75f94d8081504ae2f1b37bd69213a16e35","first_seen":"2025-09-23T17:21:13.834634Z","last_seen":"2026-04-04T20:20:48.914567Z","times_seen":155,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/4-3-ct-person.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/4-3-ct-person.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\ncontent-length: 4330\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"183dccb4656ce9001dbb7daf4489a2c4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbXIT6ySyScEtZq4Rx332nF%2FcCxRA0KlpF6Hc1Gd8B8ikq1YbuFyCxOM4TbsFVC8gKvyeUT3Rk74ynXTWynZ2wRaLenrvKTHNopl8t3nx1N73mB1R9waDYbybQFyQQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba993e151525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"71f5c1c49263d5057bb25f58466fd988","sha1":"e4c41617bed780a190cf1ddbef03327ea9e943bc","sha256":"f0e1503933eefca5525489e23b5e0aa6ba9b381987dcbe50fc2d0da6267ecfbe","sha512":"d4d18b9cd5839abdba8dd83a773a2eb1eb5b8810179b85ebc885a5ac3d8f29e6aa5a2960ee529b06cd4aa895a0532baa5cf9a71d99b78425f52a02c64796477e","ssdeep":"96:y15qh/dTsZh2RDpyz5D9P37IY3OTzItfcNC23LytdeW6:25qvsZQolLbOTMpcNC2b0dE","tlshash":"82914c2eabd48e25d9e92e31dce9f64aca5715f1078993b68dd3070f4d0a20f54c2283","first_seen":"2025-09-23T17:21:13.896993Z","last_seen":"2026-04-04T20:20:48.912209Z","times_seen":145,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/custom.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/custom.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"022307951df197df4b2a9326aeed2e4a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzhP301m0385Tk31ydX7qjWan%2BW%2Bqz65Fv8B0DK%2BEKbI%2F1PA4XcIKI03UK7atesL3i3hwTk%2BM1sVhdcB0lZYQkabQupF28Hz3K%2BAC3f97e3oO%2Fy%2B%2BZQfV5Y5g8V3Fws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929cde1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8115d79b41d838bded6d1a1126ed51e1","sha1":"ec06add4a5a3c847716a5e33c8529f9980361fd1","sha256":"57296865cacf7ed59a8a50c6b9580f3db6c6cf2e548b6765afb7bc7780176a01","sha512":"85c3ae3e42080450fdd6fb1248f71581d8ed7007f6a8375d59ceb889bc01d855d3ce40ab0cec5df9aa27cd0ebdc563b6bbb9ad53ecc47c00fb1fc8091a21b476","ssdeep":"1536:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvLuZNLCDVVx3AVaV5MGAXrWZfY72In9bgF:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvH","tlshash":"e293411b96152daa2e77532d998e7880ef127373c381d42bbaf1c2154f7884897b2f4d","first_seen":"2025-09-23T17:21:13.94536Z","last_seen":"2026-04-04T20:20:48.930586Z","times_seen":154,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/3-2-ct-person.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/3-2-ct-person.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\ncontent-length: 7534\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7aca8608bf1ab7855f307a1b84f60052\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zI2Hc1oN9ArVohB2DxMse%2F1Dj4Si5qarvVKlIL7gEDku%2FlcRvW8QYwlIPxD8UGN3GDZEWaDsLozFHTdt0S12Zc4lpkpj0SZRZrX2wqo9UR1mQm1hG%2FcpM3OqEWqhc8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba993e161525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"320dc3eb07326903bfbe06fda8242a05","sha1":"da0ec61f0b0d5ce4b6a93983d5686b3bc563aef3","sha256":"f59e579de32ba2c8469073d12ac77c54adc8d5a1f43e03e7921351c8469b8037","sha512":"9f0d5be981bc53aca2288a1f8a8b53878bfcf5b64a40185de5209a8d0023aa53c7681719019bfe9f2935092867f2fbe902ce00023d2e454880a3c238ffe653e6","ssdeep":"192:h/CrfYOk55HplUhIXxuflDv8N1zwNmCZtxV:hcYOApgI8p8NKoOf","tlshash":"65f1af8dcb58042fe5a31233c51fee375f6a029936bf19e95a73b2c6540b228f0718c8","first_seen":"2025-09-23T17:21:13.840373Z","last_seen":"2026-04-04T20:20:48.885347Z","times_seen":145,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-preloader.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-preloader.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"60f9e5bc9a217740606bfcc3f97c7ab9\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0L4lUOdDQfTia7isBTqWNjIM3eFLbLpGNgPzts25gCZyQE4WL3mvqwmQea4APHFFYtewqKuMwYFSdIKC8qlLYiDkcQm8oEyJJBG6RE46GonTJhJNpEcl3wh3ULUKIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cd51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f67d979c93da4ae5cb1ca62261d19df4","sha1":"8ad553fb8f726daa1bf40c730c0627806d530adb","sha256":"567319f85d81a0b9d661c472bd31e41854318372040fae4d140eb96301650b37","sha512":"a15e574490b23878614345d2b82d17bf4a4893921de79c9b9598b2f32d56a66814e57d573ae42fcbf6bdfc994ed5900d708e432862df9dd45f22506a0a4e1156","ssdeep":"","tlshash":"5b6168b87965c1825622ef19b7f44e300fd872739d56c4b7f0922c1dc2c06ec9a329ab","first_seen":"2025-09-23T17:21:13.857918Z","last_seen":"2026-04-04T20:20:48.929486Z","times_seen":159,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.easing.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.easing.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"aa6e3aff818fc3bd3653acb09687c7a5\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=igZQ5kXBaHXtXU3kVRIsxgFTUAQQTCNWRbyFWKCIuYam1OGDODPdxKMnEgQ8kY1ViUPH%2BZHza4ZnduCfrFLpezdjrYctqzfMWgldCfvaZucmvKchlDqk8iDoPg52b2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd001525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-05T11:12:46.574245Z","times_seen":954,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/hooks.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/hooks.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"a649e8a13ccbc58e57c188aec60ae06e\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsAl%2B3nkOMQXQDHYBYzYRp79FA9gPaS%2BYjKc%2Fc19ONjxkn3iXlxkIML6%2FIdpwoGCvS%2F6eob7fqOhrIj5gKotRvFe0mRq9WXhLYlkR8j0F4NjoLxSgaBcMfHERIbTzWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T14:13:07.814595Z","times_seen":210438,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-fullwidth-loader-1.js?ver=6.8.2","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-fullwidth-loader-1.js?ver=6.8.2 HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"3e40b3a34b3a60a80f14409d861b185c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMg5O9VIIUnRj8cuLherhiSWck3vU9N03QwpY%2FpNWP2YAa%2FtGH38BZ%2BW%2FnHWN2ZSiGfIn17ZHjl3BA0yECMMpwPe6XXmk8VdeSAu%2BIDsAj6QbrIOYF%2FcB0lwPik034U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd121525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fbd950b0fb6f0a02c14fb8c4622fc869","sha1":"aeb6d4c0fc034e30e8e06604dfab2ce0b480246a","sha256":"8b38dced62abc735aaac44d0aa8c6d4905533404bef9e5f3148be860079ca2bb","sha512":"7f27917140fb68564e394af28528298629a4fe6df63bb5d603c573bce83a50a0802632c87149930938fb86a4e9de94accbbf74ab319f7c2c417d3f070c3b545a","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkf1ikMLM:inrIt8D+kgdn/Mo","tlshash":"bca1661d747000fa597ba33ad5bb458ffb7510271306c4a0b8ac9c992fb1da125e6fd8","first_seen":"2026-02-13T09:17:01.814409Z","last_seen":"2026-04-04T20:20:48.869557Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/diagram_line.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/diagram_line.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"c294c0fd7455462e693acc048178360c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWzWmU6tKP6sTP1aO7uTWGSKNt%2Bk%2BfgKrD33iIOBcTCUegvsVKGpl00WMGC%2BdCD%2Bi%2FY72aRNZV9tEPe%2BLTf%2B9%2BCliqn8zQKJ%2BdVgiEq80JM3el5mWEUYyM71PA1FBzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd2a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-04-04T20:20:48.860321Z","times_seen":156,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-hovers.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-hovers.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f246b24fd0ea8215b1f8228c5e7693c1\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mo4HUTYqXv0nblWc3ZYXl4m%2BefWn9w4kKhqnyYNXfxc1gQphy51L5JBlJuEYFpreZGUb5mIAerV4vSzBOyfZRBGV3MgWciajB8ffXjeFMIX9MRdpSM2ZNe2P6uffwBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9b48e06470f8617170ed7681312868af","sha1":"68d3b3cbab72dadc5ec1df59560fa3b2c7687f5e","sha256":"942d403c2442a35bd98c7a6779225cf5140f85cd2d07a6a3929956cd96a4cd73","sha512":"2f609a1881033c33394c83bf684b30360411b646f0f2e72f7e4d78227905ea1674c362cd70570ebcb541cbaa7d3e9c9fdcf470bbcf909495d0f06ae7d68a7d44","ssdeep":"1536:/dNd3d+dNdodqdcdpdHdgd5bdLdOdedudwd3d6d5dId7:M","tlshash":"7773ed3e1704254493ab4a04b3fe9738af2ea171fed615ef755a5a4f8333b1421237a2","first_seen":"2025-09-23T17:21:13.891107Z","last_seen":"2026-04-04T20:20:48.861429Z","times_seen":92,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/kucoin-2025-Q3-1.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/kucoin-2025-Q3-1.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 6197\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2d19ce598c8bf2975706daacdd759c8f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f30%2B8hqTPiCP%2BNss7QpWDjV2YDqW1IWSnm2ypH3FpKTWH6jwHfiFU6Nark7y4ht0axcru4I0hOKPJLw0ADSd4pM%2BO6iTmhvaWtRNZNshx3ylapkdpWD600zKDgMtTQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba92bcf41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"6f9b9ff6a1b58b6dccfccd8b604a7786","sha1":"84d86875daf4b9d0c4cd747f853042ca112c3203","sha256":"3beacda052cd33143eddf9f883290d062389872378ad4266d8dd1bb823318687","sha512":"e1b529adc765f40bee1fd345ea8b39d53b6299714e2b1e605f941591aca86cea66efeec82703c9afbdb9d28ccb71551cbd5599c8957e877908ab3cf927ab43d2","ssdeep":"96:SSI+ihXUmG8Ws0Vy3iv0rwcLKh0lzq0kqG4YlouzO1nfH9LwxC/dRe4kTPaTD4v:SSh5k2ySFcwEkqG4YlozFFLwxCn9WaHS","tlshash":"13d15b585568287092a5138bf47ee38a28b27cb0dae936c3d231f61349baf24f50043e","first_seen":"2026-03-06T11:55:03.736511Z","last_seen":"2026-04-04T20:20:48.917698Z","times_seen":11,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-countdown.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-countdown.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"27311a0169a21ebcc40c7109a3dab217\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oR1oSnDcr8z8x63XoSYkmQMG2l0%2F0DkT7W%2BV05S4mRKiMV6v5Q7Y%2BchuBFXEIlWNhdC2ki6DgTjdrOmq%2FWOvWGLy75OAW9lsXfNSjzeSGmLUD7W%2FHyr6ht0My6G%2FrNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcf91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c31a892d0a01babeea0871aba951a00e","sha1":"23e0238b8ae3ce0661fb1c9d49390f149382bf22","sha256":"21ab083fd5b52f1126073fbe4f8a72624f2d4f8eb8ad028f2041f2801870ea94","sha512":"d1c33f86106b377823d091473397ec845fb2bfd1d5ab100517e36c52ef0de8832168ae8409f021e822561c8dbd3276d8006458a03f612645c5a91ec37b49a0bc","ssdeep":"96:KV06ic6zsTJq5yGIClfjK6T/C4IazUSlAnC8MowvYSMAN0JK/JV2L4alwC:KVlS51K66MowvYSMAN0JK/JV2L4alwC","tlshash":"f612d0c45a31133a6e93e0187bcc270c1fda5903f70f9c5972efa51eafae4b4426a549","first_seen":"2025-09-23T17:21:13.861277Z","last_seen":"2026-04-04T20:20:48.893546Z","times_seen":89,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-tabs.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/vc-tabs.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"c6e781052ccd1115bb92b4ab5bf5fead\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C24sNbzYWlQratEvOTJP35RzjGIgHNdybv%2F5L%2BIPTGFrHp%2F92qT3r7mCRpBtjG6DF%2Fc3bqT%2FkSNoaZNTrxYH%2F1B1a5efVhMjM2tpW%2F9mR9d09u3ktDqGA0JrkSwtC2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ed231525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3973)","md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-04-04T20:20:48.859804Z","times_seen":186,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/clients-grid-carousel.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/clients-grid-carousel.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"45a3838ca8c1e318ef55c67b16534155\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MOfoZK%2Bcl0BKX0T96m9fyxALAEwpIkez5xv8WMYBsAPuQJrbr7jLiqUvSvSkvm3uWeWLrHgcbzdFUsVT22tTw%2FPo1KChs6Ot0t%2FTc9kPk3JTRnFM8zxSNCCYpuyFIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba930d341525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-04-04T20:20:48.920131Z","times_seen":156,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-settings-init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-settings-init.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"16bfd548c070201d2c03eec37e8285c4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKvzQjzoaKTnwvFxBZYEoH%2BhTotNl2yF1T56eYhUHW3%2Faai09JOOaJQrZck8404QMLRTK2YahLkRoQ6yDJVVdJNGAEmZ2rbJRWqNnQpJ2wgpNqQxJDAqR9sVZ6uxpXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ace81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-04T20:20:48.890099Z","times_seen":160,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.fancybox.pack.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.fancybox.pack.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"74ff329c6708e45f5739f227244115fe\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ihSl1sqqlJFW5ClEII%2Bl4r5d62Oj7lrLFMatNmzTeuWRdg7C35rAxGQhlXYOAALW66RkoIr5ce5cOP6m%2F2ktAI0z%2Bcow1CEc6Ie83LUKUHZ96W8iYb3NDBA4WbIBPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators","md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-04T20:20:48.891189Z","times_seen":348,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/style.min.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/style.min.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"41a62bf11d878f2707789e0f45796302\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d10FYsFIPOVZTfp47JsPzbS3akbS7r6g8dwyi61ysPXDbnSCLqtWpohmBK%2BXQtAOFi5yU9dYK0NxArvIt2JFd6UtPbie%2FEOgGiwfDpmdcT2Fc4be1NF8yjH20LeA1Jk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-06T14:13:07.806448Z","times_seen":164492,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/effect-drop.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/effect-drop.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"dfa2e3ed71f6e6d6ecbc1502f9b545c2\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGSa7FNJFDSwntoDq6fgzPe%2BPeUwVfvHuXmtZ%2Fo8kbGaaCHPYQnRslcfSWKUel4rNhDHTr3z%2BJEp90u8792DXLPXgkuULugOQxvJYUL%2BDLesQi%2B%2B0NFEVIFQ9MWdCzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-06T01:19:18.297636Z","times_seen":2624,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-header.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-header.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"e78109ffa9af3776d8db7e15c16b477c\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gngABbBRReKFV5ShhtpxkbVIVJal5zkd8iJTCgtnVEYzwk7aeooE%2Bc3HhfJrCZRcSTY8W1hNxSve9zUr0jqvdtSUw1%2FkB1iGDvoe77yG0UBXuwnXd1ObE0Loe4pqzpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cd91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c1b74ac3c28ea6e13c46f55460c046f8","sha1":"12fc3cc175bd95fe327b9d8d703c0308b20a7a75","sha256":"a44bdbaeafd8b3eacfb06bdadf22054a16b9109781775b189b59346c3b702322","sha512":"b0a3c0905a5f272654b450f1c0736f9afa29c6366c840e838180f4c7745227b38019fb58693b30dff1f9b4f839489b1b15fc64ac989680079c68c2eb5b97d78f","ssdeep":"384:KdTtBtzbtD4dDAGit9Q5r8k3uiXtYlY0IVGVYO8YNl+BvQeYQu+SBS2+Y2q9E9MX:KrzbtD4dDAGit9Q5r8k3uiXtYlY0IVGR","tlshash":"a992735ced9835681312ba69f3f26fb06f384054ff135864b2e5272f8249a5c5273acd","first_seen":"2025-09-23T17:21:13.968289Z","last_seen":"2026-04-04T20:20:48.93005Z","times_seen":92,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/rs6.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/rs6.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"1ac00ab14491057f42cbb9b97a2bfdd6\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pikH1%2FzKQZpOxbslehacDd2c6hBG7cMW6AJu8rya%2FzYlP%2FSx5NPZa57JXN6IlYmk3AXrKGey24oKsvQ%2FQSs4cwxUrDCyJysHWnURshsFzPvus1Q8IMBgBw8VTCJ7OU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60385,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"084f3cb0b9bab270c99e34d5b5ad638d","sha1":"b133ec70610a1d45ec05d62e223e9a6be24cdac1","sha256":"797e1bdd6c415fc9790cda7b23b6d3834f5208ff79a9b4350451e91a5fff1203","sha512":"8222fd6c7bc4e91b1119b4c74e34c3f28ff147f0cf00bccb76d3edfbeee6d265fc64d8c95e13d3114d3e4f813544e5890605906d244a323bb047ef4baf3ada1e","ssdeep":"1536:2shMbEX0uzVQw/kubIukhqQ9HmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:Hb/kubCs","tlshash":"6143c67198921da82327ca81e7ec0bd4ae25cd329e030cadf597321dc39e599467d7ce","first_seen":"2023-04-07T09:28:44Z","last_seen":"2026-04-06T09:33:01.456676Z","times_seen":772,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.fancybox-init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.fancybox-init.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"eeb30d84fa04c63738963d0e6f6e6afd\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFQDoUOa%2BIPWn0vsE6ROytsGnJFzIa8kzP8z%2BcP6qPlMzY8XILXSOgIiNgA4cMWnBh8CG0SsXT%2ByBODlCg3I2USHiuKK%2FJRwBBlWw6s8A9BoV%2Bt148law2Jy6VRV8Zo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.888531Z","times_seen":171,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery-migrate.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery-migrate.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"321b68866ffdc200e3da26150bde9441\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qH7FihLEHDXoBeMo%2BnK07cnYOZ6ABgUBoO%2B42dLAmO2zQkwiWeBlwFVkg43XcFPiXjKGvBNUanm5tcw5R%2Bj8QztxSijMppVFgEGJaYZParu5GexxPQ%2B1SXh6juemDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92aceb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T14:09:40.805228Z","times_seen":642940,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-lazyLoading.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-lazyLoading.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"e016728f2d104629d8f3a7524476b2db\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ty1yW5KPLXwQCLmRa%2Bv%2BugrZvBGQeHgpKnlLAVBY%2F45FGmIoSxra%2FERgCwd%2FkX1mGzGqfdkMirWgfSH9%2BNi4k8rDFe2g84ovrJRWsNjs0WpNRX5RPDHU1m0gf11fCXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd011525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15560,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"08613418b4241d070486bf9db7e72048","sha1":"8f960836ab2d971a7ab02d879b0eb335fc7322aa","sha256":"9a257269b238e9ac671775d23d5f5174c4aad7dc97ce8e09b5bf1f62094bd818","sha512":"46d5d908d004b8c4b4e1eb1c2931d26da04c3de10660c01c50ef0c37ef2fb86d61abbd37920a4a9a2513ac8dafbf484bdb21ca605459507cad1237f8e58bbd89","ssdeep":"384:+gpDy3SLtWmO88QCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/ofaQzFHKZuxs25oohbZxG2C7H","tlshash":"a562fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","first_seen":"2026-02-13T09:17:01.772576Z","last_seen":"2026-04-04T20:20:48.9221Z","times_seen":15,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/3-1-1-ct-person.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/3-1-1-ct-person.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\ncontent-length: 5624\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0e471bded8d37dd72f4c2ef2b3519ce1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eF5pr%2FewMxM%2BmPXCxhNSIE7dH%2BGok6zMyQ8jqsITtv897TIg2zTmlNa7KaPJR2NzU%2Fh1EeU%2Fi359%2FOCHdXmlHlfyoBnGgZmcaU4huiL%2Blhj1kA4Q6YB5Q9U9yPZ8UzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba993e141525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4d7fae2b69d7f2708f23ea6f60ca0cf2","sha1":"56c4dc2418ac289bf07ae1c0c6f2099d2d377fc4","sha256":"c02de1dd4b4a4accd2e314cb2ca0d94996feca82fcc6f5627ba6628359c958b1","sha512":"f0b628dee6cfc292b14719879cabc481d59e22a6abed1e1319e5c4d03f598334651b275cd022dfdb29ff58f079bad1aad4e79eeb2f79fb29f7a7906f7f039e54","ssdeep":"96:yhWFI+nPzb2DyrShOcikTUXMF90AswesSOeQ46mgvXGlsK6c:YmIUsgtcfUXq0A6snD4jdF","tlshash":"68c17e6559b6b870c482fefd83b0cbf581b64a1d1e150b2f5df998a16db2208c9133c8","first_seen":"2025-09-23T17:21:13.926126Z","last_seen":"2026-04-04T20:20:48.911705Z","times_seen":145,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-widgets.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-widgets.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f361f2771c365227203228e219939483\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4c3CobjidAo2fSSOmRCXQ5bF6%2BIgmOQ6TMZqrLtCLUegBhrbJy%2B03b8OB6hZFL9knJhA3aKHBJa9D4QdEefF5BNijWajc4R60Zcs8d%2BLPJA2%2FBacxm2Q5IsI0CIHMMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cda1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93bdaf73f3fc24703ae635e8a95d20b1","sha1":"f8ece8ea1556a3b467adeede8cba565448f20d8b","sha256":"d36e14f8e75d0bf691403c0d5b463aa7d292697f7e46f7cae9709b877a777a24","sha512":"df032802f6961ae979500263eb8d33f74a5eab81170db6363f899b60b7db3759082cd8091bc8ea73981c97a21b0171b50de881491e312cc8861b6f22d1ba7f0f","ssdeep":"768:NjO/RpmKWcIo9x0nk6kAkikmJnk4jdO5B2lcemJFSmAe68:QHxok","tlshash":"488353aeda1915467237991967aa7ea1ef9810d7ce03096cbed073014f7a4cc0a73ecc","first_seen":"2025-09-23T17:21:13.851769Z","last_seen":"2026-04-04T20:20:48.923692Z","times_seen":159,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/effect.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/effect.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"79517631503b0ef8e65478b9dd840aff\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLGTumcLNU5FMiVEh9%2FTWM5IWStuMMHNTJJQ1X4e%2BBKlT5znlyfzZemNTsbp31%2FWaf3H6roiH4Ar8%2BU9acbp0gitQkLOe7SLTbnKsl8G3G50LeyWyxbLURTmB39u7vI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10332,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10150)","md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-06T14:12:56.014344Z","times_seen":11816,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-waypoints.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/vc-waypoints.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"e64f263cb15522fd1b4c9fdde09e7071\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtsL9x4%2FbYYyVy6kV%2BMu8JFT2nbB%2BDDEbb0PEweP9A81v0mgWJHx%2BuXWbG7g1H%2FgAgsWhZP9mUMIWUEGyTSy1aivDxFWgXGpXaeF1f58rKd698xDLybLSsk%2BK1jLHMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ed251525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8853)","md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-06T12:58:00.287554Z","times_seen":6207,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc_round_chart.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/vc_round_chart.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"bca3fd8837b525c9fb1c2ea2bb2c0b56\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZ%2BI42g6a%2F2eWN8zxmlfnt8oxSQCG%2F6tB4zJJ%2B%2FckWVLQaum5J6vf%2Fd7KvBFji8wjnucDdRVKxf%2FYEV4KPqsRjGa4TWfX4AwXlmgrzSAYyX6aqjc7NHwRP%2FxbXYHfj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd301525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1667)","md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-04-04T20:20:48.863709Z","times_seen":155,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_14.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_14.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 20399\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fd250b6602004aeaab2b9e0772274e08\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRM8p90S1e2dPuCnBzDOj4MxyGQ8Zgi1R0Ges14aIvlHkNOEsEKZ7Lj%2BDQneQz6VsnhtWw%2B6taM9YBn5wTaV1sny0sIn3EXZLGvFgD%2B2kWGV2w%2BeDCHwG0TJHTXMzYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba94ad751525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x577, components 3","md5":"4ebb60c90b921e74f1ccc5cf12f8fa0e","sha1":"0ee975023d22ca00478be58824bec08e6caafe71","sha256":"50323967d41b7789c88c0322c8636bc7106294b15f0df21f31b22f9ea8832db3","sha512":"ede18a7b347596aca735e06be50894db65391196d61a0aaf809eb9e52d061c46f9763425867e6ea53957e1549ae9443b9c5712e1e55d49103d725a2173fd27af","ssdeep":"384:2Zkv8K4B85oTDhVvf/sHborXK81QpvntlDpcAxvF3sQl4NeKRw:2Zkv8xB8GJVn/sboDK81w1tXxN3sI4Ns","tlshash":"57926c120715871bd88da3b22c874260be659d4df525400bf2a720b5af9d3fefc2d1d6","first_seen":"2025-09-23T17:21:13.950169Z","last_seen":"2026-04-04T20:20:48.884724Z","times_seen":155,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/portrait/124307731_60x60?subrect=0%2C0%2C195%2C195\u0026r=cover\u0026sig=d5dea7099466fec54bc80e335f84badd3b1f3a6e2a2012b887b36adbe59fa222\u0026v=1\u0026region=us","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:55.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /portrait/124307731_60x60?subrect=0%2C0%2C195%2C195\u0026r=cover\u0026sig=d5dea7099466fec54bc80e335f84badd3b1f3a6e2a2012b887b36adbe59fa222\u0026v=1\u0026region=us HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"9cb27a1920836ed7b477ea7cbb9ebc71\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 174590\r\ndate: Sat, 04 Apr 2026 16:35:55 GMT\r\nx-served-by: cache-dfw-kdal2120103-DFW, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 36, 0\r\nx-timer: S1775320555.153240,VS0,VE1\r\nvary: Accept\r\ncontent-length: 1247\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9cb27a1920836ed7b477ea7cbb9ebc71","sha1":"e80d65dc3d893ac89b12a273214d4b4ff2c3ffa3","sha256":"125e38ea10673bec0dba7a1188495d1e1b326da1207cd46dcfbb90955c8d09e6","sha512":"54b42a6e4a10950e2c0c230212868fb3c5090fdf5d82b4b75e9c8b72b776da6637723c974ed5c9cf4c83277ffbc8dcc49b774a95abe10eb5e242bc6584e7a459","ssdeep":"","tlshash":"7921aa753753696be88605321ee241620e12f06546bf77af5385b307843d3f905b2cf9","first_seen":"2026-04-02T03:17:59.383322Z","last_seen":"2026-04-04T16:36:22.142608Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2130636459-9f25540755bad1b1f8df8fdb3d8f282342dbf0a57eef60a7f125ce1f9413934e-d?mw=500\u0026mh=281","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:55.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2130636459-9f25540755bad1b1f8df8fdb3d8f282342dbf0a57eef60a7f125ce1f9413934e-d?mw=500\u0026mh=281 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"4aef198f29d43f183d22f922597b9bbf\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 1830653\r\ndate: Sat, 04 Apr 2026 16:35:55 GMT\r\nx-served-by: cache-dfw-kdal2120072-DFW, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 52, 0\r\nx-timer: S1775320555.028954,VS0,VE1\r\nvary: Accept\r\ncontent-length: 10429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10429,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4aef198f29d43f183d22f922597b9bbf","sha1":"95b3e9d537acc50daea187a65eb09e16f58357d4","sha256":"323ffd0f534c1f824332c557f4034af694cdb28c9f6bdc5de3e6f4b2ee0f70b9","sha512":"19f846c03babe52f3ae855306fb66ccfb49564714c782db40d37629e797169dfc4f6c977cb2334c889a4f2ea4effbe72987da4da7581c77dce7b275338829621","ssdeep":"192:+WAp5jdqa0oQPskGvAdlAFMceaqHN1ayz8Qy8tJXzJCHNoBgv/dKo8yaMHzA:cjdsMvAdlA+ceaAHzc8thzJCHSBgN72","tlshash":"4322b0362f999162c6cea3733e540357fe7af6fdc9e05e488e11272044b539604aebc2","first_seen":"2026-04-02T03:17:59.409518Z","last_seen":"2026-04-04T16:36:22.143201Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/style.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/style.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"3e1657df201e53b61358cf890aeda60a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ba6QYuqXouMxiNolgu2p9UHC5QFxAlS2MmSydKYf6gZFlaFm1oibq2mmHu%2Bv9BEQuULSgffjQAaljic0G1BQTEv7648hj40tcLqD8n7Caob%2B33wNbqMT0cUxz6g60I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cd81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33549), with CRLF line terminators","md5":"193116dadb826f5adc63643444102f9d","sha1":"519e8f57730ada4257154802b757b00979401919","sha256":"ad56f6337cd54ed3796cdf55340a267e9aba31380033bc635259588f249196ef","sha512":"0163062e2f2b7c675fc057d8bdaa37f5435f6a7663912b00219a32c93a53dfb5c484c34aa6f72a66d2d2a08e77bb6c7bfc3189930fe4b356230ea05bb6a57133","ssdeep":"3072:Nd8rcHtmSVN5AW4/YK78eY7wfwOSqxfd9h961RR1Ro:N6Q5AWFsfwOSy","tlshash":"5a64b7a9aa0106465333df34e3d5b775ee2a21b3cb0704e9f694d5158fba94c027aecc","first_seen":"2026-03-06T11:55:03.692966Z","last_seen":"2026-04-04T20:20:48.909512Z","times_seen":11,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_15.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_15.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 31371\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a96f4cba7fc0940c15591b63de6b0462\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LB30w57anegtWCJ8BQk8CIKoBcYSTwDJlnju%2FUpbCWIFYOt2Fv05eilAVAqzb1jRtUVjmnYC8lktJnop5wJqt4yrryZLyyaZoomyjrNIXKeWWxo9BzwfLWMV0yBnURU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba954d9b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x999, components 3","md5":"786b62a430113bce0d29bffdc7b74c11","sha1":"5d788d55b79fc7732739decc608d5fd595930132","sha256":"6738f45cc12be7faf1a7072db6140caf8cf9e55ca4f59f9fffcf9d802eddb5f2","sha512":"ecb33c182acfc6c4788a528e0f367c38e31524861f13e13bba7dffd38b109e84863c8f1a2ed9f3fff29eb6801614f4785fa2e666c376114a2419e66a7fd7f5d7","ssdeep":"768:pcHpb7mDKuJDEOp7h62aAg4B+S/mpXljR/:ypbKuuD1pdng4A","tlshash":"84e2be3ef20cd486e46b46fb6892b3696d36bdd2740d1b24e50380df2782b3849345eb","first_seen":"2025-09-23T17:21:13.818499Z","last_seen":"2026-04-04T20:20:48.915055Z","times_seen":151,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/Chart.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/Chart.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"2bcf1d999450929ac2c0b89c928326ef\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhekeb34xKk%2FLtHUzS1Xw4GVnK8dWVBkXjT9ifQyVeRQ8Ec40pfL34Ch34SIQaW0g45PpjovIEWl1pQkR8q8DZ7SRTid6XfnxKHiJ595LdIXG8qEDOGWztAS4OFif%2BQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd2f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-04-04T20:20:48.870695Z","times_seen":154,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arclight.vimeo.com/add/player-stats?beacon=1\u0026session-id=aa4a9b76b53ff655839498f0d4dd60ca5ad1c4e61775320554","fqdn":"arclight.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"34.120.202.204","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:55.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arclight.vimeo.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:01:37 GMT","end":"Mon, 18 May 2026 14:56:10 GMT"},"fingerprint":{"sha1":"0F:56:92:F2:1A:F0:3A:84:A6:03:26:67:F1:DC:D1:3D:28:26:59:F3","sha256":"3E:4B:51:EB:26:D9:75:AD:03:CC:39:DB:B0:8E:24:21:BB:6D:0D:B0:23:42:94:F9:4A:86:31:B3:2F:37:8C:97"}}},"request":{"raw":"POST /add/player-stats?beacon=1\u0026session-id=aa4a9b76b53ff655839498f0d4dd60ca5ad1c4e61775320554 HTTP/1.1\r\nHost: arclight.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1355\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1355,"data":"[{\"autoplay\":false,\"background\":false,\"clip_id\":1171206421,\"context\":\"embed.main\",\"device_pixel_ratio\":1,\"drm\":false,\"embed\":true,\"has_sd_drm_fallback\":false,\"is_mod\":false,\"is_spatial\":false,\"looping\":false,\"owner_id\":250449159,\"product\":\"vimeo-vod\",\"referrer\":\"https://tardven.cyou/\",\"session_id\":\"aa4a9b76b53ff655839498f0d4dd60ca5ad1c4e61775320554\",\"version\":\"4.46.37\",\"version_backend\":\"cad9373\",\"viewer_id\":0,\"viewer_team_id\":0,\"viewer_team_origin_user_id\":0,\"vuid\":null,\"fps\":30,\"account_type\":\"free\",\"app_id\":\"58479\",\"privacy\":\"anybody\",\"audio_bitrate\":0,\"audio_provenance\":null,\"auto\":true,\"average_speed\":0,\"cdn\":\"akfire_interconnect_quic\",\"delivery\":\"dash\",\"display\":null,\"drm_cdm\":\"\",\"drm_mode\":\"default\",\"dropped_frame_percent\":0,\"event_time\":1775320554,\"fullscreen\":false,\"is_visible\":true,\"picture_in_picture\":false,\"highest_available_profile\":\"3df7c5aa-d9f3-4581-930f-f61ddf6e7738\",\"highest_profile\":null,\"max_speed\":0,\"mime\":\"application/vnd.vimeo.dash+json\",\"min_speed\":0,\"most_used_profile\":null,\"profile_id\":null,\"codec\":\"\",\"audio_codec\":\"\",\"quality\":null,\"quality_downswitch_count\":0,\"quality_upswitch_count\":0,\"separate_av\":true,\"target_profile_id\":null,\"video_bitrate\":0,\"video_duration\":193,\"ab_tests\":[{\"test\":\"cross_origin_texttracks\",\"group\":\"variant\"},{\"test\":\"scrub_playback_strategy\",\"group\":\"control\"}],\"name\":\"video-ready\"}]"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://player.vimeo.com\r\ndate: Sat, 04 Apr 2026 16:35:55 GMT\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T14:11:48.251897Z","times_seen":13425731,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":114,"dns":0,"connect":25,"send":0,"wait":138,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-fullwidth-loader.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-fullwidth-loader.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"3e40b3a34b3a60a80f14409d861b185c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VPkYD%2FEqQ4zwvPrWhgDdueCnf6QH7DyfcSAvyLtKcrfFErzHvVLEs7ux31rL8bmgmQ11UYQcWn9kXxf5y5OK%2BOF496RZ4wYZInNR9ReHAITMrMzn7slM8Y8Pg25Xw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ace91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fbd950b0fb6f0a02c14fb8c4622fc869","sha1":"aeb6d4c0fc034e30e8e06604dfab2ce0b480246a","sha256":"8b38dced62abc735aaac44d0aa8c6d4905533404bef9e5f3148be860079ca2bb","sha512":"7f27917140fb68564e394af28528298629a4fe6df63bb5d603c573bce83a50a0802632c87149930938fb86a4e9de94accbbf74ab319f7c2c417d3f070c3b545a","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkf1ikMLM:inrIt8D+kgdn/Mo","tlshash":"bca1661d747000fa597ba33ad5bb458ffb7510271306c4a0b8ac9c992fb1da125e6fd8","first_seen":"2026-02-13T09:17:01.814409Z","last_seen":"2026-04-04T20:20:48.869557Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/team.svg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/team.svg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"1972e355f5f2275abf5dcaa09a10b21b\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKcgxCAJh2pSlJM321O5SWEDDPptbBNmbWzTHkCdb0OdjuntyEs49zmZiiFGN%2FK4KRVDmPFkAybAZe0pyhRIRtaEkaJdtO0Dbuk268KMo8Ykfl2agh4qDADRRuqkJQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acf01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56dca5a15a48506087e1b74e1c07e187","sha1":"bc3aa63dbd559efef7b5c087f09c3211efa48be0","sha256":"6064bf8c50bbb69bf830cd09f0f3760c8ef5b897e9163abd7a276c7904849b97","sha512":"c63f5ef8ee8ceed55ebecbdb71f4c5fbc95429ccde793bc80041991771d40b10dd5eefbe9f8714aa358eb572cf513fc1d9287c0892f90b3a745c6cff28253f99","ssdeep":"","tlshash":"ab7185e4db2e167c9894573fc2382e4239a7140d78e39b58934b1d132c22e56db98cf4","first_seen":"2025-09-23T17:21:13.836481Z","last_seen":"2026-04-04T20:20:48.9109Z","times_seen":74,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.touchSwipe.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.touchSwipe.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"a14a31592d392858b7c6ea2c9f916636\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0QRc5%2FuJSbBk6ho%2F8QQyKPrzkau%2FtmoPH4x2%2FBeG3DT3mrAZeZ3lioqQjJQuQ6x7ZX%2BDVfUkWQCiiqf2nbFBRgCDnsAj0hnr1dvCQHbDllGEFvk1dyWXOQzIPvzHNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd321525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11969,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11969), with no line terminators","md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-04T22:53:03.920853Z","times_seen":435,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.carouFredSel.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.carouFredSel.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"9e0aeea0db4d034e07eb911c1f4be07f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OT1KIFUcoYREX%2F51vBagith6lKv1exQimiOb96hswBpcSDfIbip4h9PhsWjx4tFS8YMOqpAsc1jo%2FPcIN%2BCHXqJeEfygJ2eyoX0%2Fm1rBxQKGYRxqYk6S8AD8wqvPrCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba930d331525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-04T22:53:03.965106Z","times_seen":406,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/5-1-ct-person.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/5-1-ct-person.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\ncontent-length: 5610\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"802ac0944094ed74a221e249937db9ec\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8GYIHdBb1eAsV2ICZ%2FH0P600yIWDY0ZXND2vupJQyU%2FShBSVxEdMHMgfJG9sJEtSJkdhdrCMUUlduc5jHEQjkYuLw%2Bu%2BniaERXErlVJ%2BTPPKfc%2F1k21na3m9fnHcxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba993e171525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"806dae03f08c0109becd3e4d272d14bb","sha1":"d01c9ea5e69468aaa288b2d88b37aca4947e9575","sha256":"301d85824116849476525dd5cbc65f5069482fd57eaec3d14be4a654d9060c9b","sha512":"7957bcb5e8baa414f3f1f84e8a882576af991a27c3b0f125a7f87b355a3c9e4bd530a39aeb162975fdf6eadc525d3d96e2d56e665d3291c3df6864b041c0f1c4","ssdeep":"96:yZxvH/92/zTeCkk+UeJJ+lR/0U6pNk4+KOm4v77y9bAuA2wEcMWVl:sg/zMXgRsjN+u4v77y97fK","tlshash":"6fc17d57eafd280aecc5a0b40b92ed2869d60c2329574c38f36fb021f8118b33750237","first_seen":"2025-09-23T17:21:13.976894Z","last_seen":"2026-04-04T20:20:48.882504Z","times_seen":145,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/index.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/index.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"4ce30b3808d7ed45486190f17b2fe21c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drySbwFnuwrmRSBsEhBGIubknL%2Bb7qkbSPupptTZ1D4%2BPtnqcoqFzyBjzd0CldTbVU1NgqAlnVlqeEdoVmZ4LL6ipe9ooC5FxssEYgrc55ogeNr2zirFwJYipkSPwtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd111525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-04-06T14:14:49.865772Z","times_seen":149756,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/js_composer_front.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/js_composer_front.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"2e4facc1c8628fb931d4fa443776aae8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QitOS51d9iZMlZlYaoEfa3tV15C0psNag6N35mddcrrvZN6Kc0yUdXGnP%2BSL2FGT7Ypu2btYCssW6U4KASoYLvaAspXTHFS1%2FHNb8myEbUn1Nui%2BJ9RnkaTzOn6C9E4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ed191525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20418)","md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-06T08:07:13.236765Z","times_seen":2161,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/js_composer.min.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/js_composer.min.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"1f232d26b16a71ae0fdb15f3014c9659\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYU9Wq63Ma%2BkYNf03%2BOvjn7YlOeDLA7G%2FVWdtQeBuSTeB45ui4nHy5bZSRHIuxTZDnjMWDR6owoOZlJEugwTT2BXXAQ4kmFvF%2BSYoz4S80GX702axVqArpqu7XYk%2Bq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929cdf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485416,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"e6049b1ca50005dcfbb1cde5a4c57c7d","sha1":"0356b14cbf3eab635b2c59565f2da80e3acead55","sha256":"97b5b6bb0bfd4413504da4a5b78546698c75a127fff51b095080ee7fd3b8ec0c","sha512":"3db95768859fd706de6887f53cb03d546446ccb3af67b9807b6230a26e510173d7947457964f1acbdd816eeb302b94547055606810dfb8ad5e69f443e4d1826f","ssdeep":"3072:vR/QvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gN:vR/3/+cQ","tlshash":"b1a430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2023-04-06T02:45:23Z","last_seen":"2026-04-06T08:07:13.247738Z","times_seen":1894,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-additional-blog-1.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-additional-blog-1.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"e991297ba6fc077a4b89041e07d6417c\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urRl47OlsTDuz5lyoR7M38tj8IhhpbEzE1tPPFdGlJPc9vug0qz06EV%2BwaulwJ9zTLSZ5Z7jbjiPCfA4ZGmGRzrM31r878WLjK4%2Ff1DadKAwT23Fu5TDmfflbyTIPZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"41c1cb59ae9ad3b862bf05b337c94ba3","sha1":"f97090d20f644702090999fb41224667cd2cbf10","sha256":"0c23cacc0f0608add0ab7de6d33abfbd5188af8716a0930d91b149bc3a737035","sha512":"012dc08b3c1c702146c1fd3ae9d5aa951d41c044423474950d7da2456b690c6209b652214834d6300239436350386972cd51562cbf54d33b130bf87ded60bfb5","ssdeep":"384:M/qJldSl65eXEnM/JdHbt/Hg75rriGa6xDO:M+jInHbt/Hg7y","tlshash":"5f720d585a1f29a9f37761ee2ffc7150ce9b68b38bc05858f5e1c110cb6830d21a2b9d","first_seen":"2025-09-23T17:21:13.954779Z","last_seen":"2026-04-04T20:20:48.915991Z","times_seen":92,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/white-paper.svg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/white-paper.svg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"c0bdb00129b3d5aa6c6c0ba58e3d73e5\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ea0srQfQqT2YbEx9L1OUEc8DVVYXkyve2ZVodKi4QNfnafxDvEdnhcVwQ0Y2FXEUjCsPh7sfq5vJ1ywvKRK%2BGfofdusSqJSQwIOdKZipfG%2FgxPCZGmmW%2FEQFdPE64TQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acee1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6b67657465ed8696c57ed5e585a400e","sha1":"9b18802b52bd6091c86b9c19a76d255c4475d135","sha256":"fb2590a7bc0f0050826cdaa0688041455765291bee1a8e05d0bc049c03b58a07","sha512":"69a5b4eaeba7a05895dd1a3e9b296486003028d914eaaee5cf558b25316432347af37f6f1b3b80dec052b5b280bcc4eb7ea80d025c7c03429f34e8d4fd1c0cf9","ssdeep":"96:QXQSfLAzn0HzOmrByjCDDaA0q5POn18Jg869I5eJHaCGTW:cQA+Rm42pbP1uDDbyW","tlshash":"6cc1645d17398ae0fcb423bc59743ac777b879997073e2a4d38b78123802bf88520975","first_seen":"2025-09-23T17:21:13.941255Z","last_seen":"2026-04-04T20:20:48.887518Z","times_seen":74,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-header.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-header.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"52de50606a53c3a461fbdbcbeca5039a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oA1V5TxhPs%2FHq1gzbYqz38pu0TUhXNfpYlYLhIwfbsXBibekOAxNkleS6OQC4e%2BepRmLVdRhnuERCxUvw9aYQ6OQkOMxfQfBJAJlMSQFKbRqd3k20xCrw%2FPcn9%2FdSYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-04T20:20:48.921599Z","times_seen":159,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-sticky.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-sticky.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"565a746834b1ca308b431b4904806efe\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0iBCUVd7QdBKF4c88biAWAjGv18NZLwWnI0KJO90Sd2sIR%2Be%2B50ulkvDwG334juRVPPxffpFOAkpz8c4k0w3yMlcDFeJQJXRYuy5O%2FNyoksmuYbMZAMd4FGYfLlpZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-04T20:20:48.928313Z","times_seen":160,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/favicon.ico","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\netag: W/\"cd60173dcab05fedb4fa629a2c5d5729\"\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWdftsUEX6E%2BW8IMn%2Fu295mJW2sf2syiBOjQgm70b3N4cwZkgngbx6bQECzwyJNLYTlO5DqknaI7AnrADDnxJXZTL6g1eXXd2BP2GWoMJtDs6ItTkfoGLmk%2Bje1L3R4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba969db51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5188,"size_decoded":0,"mime_type":"image/x-icon","magic":"RIFF (little-endian) data, Web/P image","md5":"5b16cc070f2f1f66e0cfefbcb267f70d","sha1":"040fb3b2b7c89fc1eb58565c174292b2d70bd524","sha256":"31e1fc620e2a900f0cbff84bc56e93d6fa5099ef1d72bfc271f680b34ca8765e","sha512":"ccf1e464e1cb9a745d6f6677714888ef262401d306b37e60d01628edd696ef58fcafd798c11a1bcaa93b8bbacfb1027e593d8aec12d440594531fb21f8a8604f","ssdeep":"96:MiTYwr95rm2IETsjIQCV4GYUuh2+tTCUTIVU6U0AY9fDP/yVBb8Mxy8w7:nbmQ/Qo4GGhNBCUEy6U0Asryv8ME86","tlshash":"8fb16b9cb1011f62d807fe8f5225d65b054a1f86ca4cae4c5d22c53a8a3d0ca4a277e7","first_seen":"2026-02-16T13:42:32.984156Z","last_seen":"2026-04-04T16:36:22.153163Z","times_seen":28,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/raphael.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/raphael.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"846cc2a9acab258ca3715d84c0a5226d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v73LmMddTXEY02rBBihmU2z4CYxFo6TCEbywVQUc1HGhy469BsriYiCN4BL%2FMz2f0owyw6HsZL1jLI6pQGWNdgyHmIjnBath%2FCRRzcZEOm8qogGyMZpVNQIHPfTtDjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60293,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60079), with CRLF line terminators","md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-04-04T20:20:48.870085Z","times_seen":172,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/materialdesignicons.woff","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/materialdesignicons.woff HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/src/icons-material.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 88492\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"397de425ce246af3fde97812758fb5b1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO%2FTeCses%2FbEoifgYvEBQ5d2ahDzR4baitN4YGzrTXg2VCUSrC3kS9t8JnwYGv7qeIq7J%2B%2BjNwGTmQs2bdoLDv7BskdtmUopK9Tf6D24P2tSZKz5fjQ60Kf2jopyv7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba960db01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88492,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 88492, version 1.0","md5":"4957887614ccc9456a40789924f4df2a","sha1":"71da0b3f089e0c502a25576ea931a25204819c16","sha256":"4d53fbbcf651e6ed2e9dd1a23b5e65359ff8368ba1e1c4fee3ef499510c51397","sha512":"b29455016e5707434219d839c59121b29b290e851658a27d406959a037a4ea8b08134d2ec2d1ecbb4607218cd652bc11d511e0751198565f6f74a412c9e0f8c0","ssdeep":"1536:kipw1ZxRc7lb7U9Y/yMu1pCSSyvdi7bvhmSJx1+Wb+0MQhDDDP:3qTDc2K/opCSPi/5Rx1+U+SDDD","tlshash":"05831223abcd8947deb33cdd52690cde2ea198dd1b0722437998943e82c1eee7d50147","first_seen":"2023-04-11T08:34:17Z","last_seen":"2026-04-04T20:20:48.881946Z","times_seen":560,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/odometer.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/odometer.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f4d935b2b3712b8e2d6b58ff00f55579\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RczmTqUpZYp0Ot8xn3SHVpqSBkAcSmXHBr%2BQi4sQsUfGMdNIt9Oi8zyqnikHrY3jW6NFXM%2FgXX2gP8Yv1oJQbbOtKdrLVJOh3JqxNitrevjmapb9va7sAzHvGAL1mCo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd061525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (447), with CRLF line terminators","md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-04T20:20:48.927281Z","times_seen":259,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/3-1.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/3-1.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 56101\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d8b28ac3351a86181bcca1cf760181c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZ6wLSMso5y86Ll3R%2FvPTKGgDiZcSycW8kKLoqwY1kc4KZG0SJSHnn%2FhnclN3rzJQI9QC1VZn1562rmUHJ38B3Uweglj4nDL%2BMeJFSEJli0eLw5h%2B2nnWCEEx5IebAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba952d911525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x599, components 3","md5":"4cd8932bebc3794f5db9282819d80eb2","sha1":"5d86bf9d7def61f522eb9b33ee9c9d062dbc85b8","sha256":"ff979850a3dd684c7daaa053d592c5424791cdbf6b162fdbb82dc7de7b0112c9","sha512":"3235bc41a8d8e397ddacc1b2139eab1ccea4033517bb4a94fd9d7ba123037ff3075c63111cac54b5015fe33521fb78556e1f3805ab077cced64ba036b28d5b95","ssdeep":"1536:GIZMf0uMmSpsBZBbzSZen2tfc3fpqd/oQ/8l:BZd36Z9SptfGSA","tlshash":"4e43f22157a01250e07dc3f74b854a20da9f7f566bc84c9a773ded3f312db2028ab59a","first_seen":"2025-09-23T17:21:13.814692Z","last_seen":"2026-04-04T20:20:48.88011Z","times_seen":155,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.37/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:54.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.37/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\nage: 100894\r\nx-served-by: cache-iad-kcgs7200101-IAD, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 31, 17051\r\nx-timer: S1775320554.475584,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 210519\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":855210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"59c33e59c000384df6714d0d7aa1e965","sha1":"c6cbf453a5f1ebaf57c38c75530037ca21a13e7e","sha256":"15ebc07139bdf2de9e08849d0645c4bcb4ac846a9795ae9ca37282491a05e238","sha512":"9619465d806a2290fff9ab41b763d1c489eeb9796ce5a64907638ab584c9fc7f63769c134fc3805f454dc5a1c873b3e660a52392d639fda1c20379b5bc04cc4a","ssdeep":"12288:Erm8hIIeep/F0StwHR+HTpfnD+nqf6V5zw8oxGQMfQG3ez53O7TU/85jwrFNYbSO:ceeb8HR+HTpfnUY4T7vzzpvQAbyU","tlshash":"ed056cd672c6f43182d645a5a47b1203b33e169cb80d874cb03dadcd29ad945b2bbfb4","first_seen":"2026-04-03T12:39:14.670921Z","last_seen":"2026-04-06T13:49:01.658555Z","times_seen":472,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/exchange.svg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/exchange.svg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"38b2b1ee9d49177cfc45773348aaa8c3\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2F%2FU4JtgLyy7bbEF6GFYaoQ5XmBSthFx%2BaQDvyuH0QPOoD2Ur%2FGjyHKcLvhxP%2BfaZ6l%2FDkZ3KzMv5rsu3xU0%2B1KKYb865Nrc8RuvBUVTEW80cZTdUk6hmFfDO8f23oM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acef1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23829,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"036126d2a5ba6a1f01cc67f85c4adb30","sha1":"493f6c64aeda00fc967eac41099caac11d49a89d","sha256":"73705e9282b0dba49cacd92331cc581f09d25974bca0bac560f2e6e20ade6047","sha512":"a5da4853ecd5d1cda0d01029a1e73a46a6830dbcbd76b0c2c604276d23368dde3235fa89a0289b7c4f99191e510968f9dffe669d90a4f5e494f333d30bc89f8a","ssdeep":"384:cQAFUJOZmRxPE3UzikroLYBiSzcF9NLXe7gN0usfpcLAKOPbQ8fXtd4Ll7kn0qOV:cQfvxPEE2PLYBsLXeSsiA3fcQ5O04","tlshash":"dfb295db633882f57c6816bc49383ec237b564ecd5b0834cd33fa9056943ea6a628d74","first_seen":"2025-09-23T17:21:13.961467Z","last_seen":"2026-04-04T20:20:48.87683Z","times_seen":74,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-menu_init.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-menu_init.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"be6ac329611b1c1d9a09a9ade4faa547\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Jm3%2FY5QrkQUsr3vmGmGrzKOO1lCO9Ox5uKjXQ%2FsvElDQJD3Nm8ijOdCJuo8TnC1AyPynmJc1m9kfXayX4NCbbWpnBuLYSK5AYTmkK15rKAFM4mZtXcnZt3M15531xA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcfd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-04T20:20:48.862624Z","times_seen":160,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/svg4everybody.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/svg4everybody.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"0ec27227a7e4f374ecaf5c51773df2d8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYjWrqg2Lt%2B21zoN0xnYCR%2FgHfxvN%2FTrKTHaqkyXBwV8FIv8jcjrck1xfQh2P6e920gqAgMCIwZ2FlqAxuPZN%2FYho8876TMGwxngBB%2FeJizHr%2BofRhW%2BwnPOIRi3TY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcfe1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.874567Z","times_seen":314,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f2bb34f80bc435c09eabc02d9af36caf\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdRfx5a1JG9LFt%2F7U9jk6IazkYy9lmhRoMrdMagAkQWPWP%2FaCzFf6Fk2J9%2BiuIwsFin%2B%2BKD2A7V8ZJEnRLTFQlBeu%2FMBZVxvKjZ5QyqppFMXZ%2BnYsE8yy2zvl59U3C8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T14:12:06.922148Z","times_seen":690113,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/api/player.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /api/player.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"27910996f21cf8acf48c0917de468d0f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Bh%2BNCtAVr18me5z0fk2Sk9OkgQgkwpwqcn5V8lIAzSgMof5K75sxhQD5ZGc%2FWCcXr%2FLNLFroKNbBK9GUTqW04fKLElx5dLuImYvW9LBhlYLwxGXENV5EU4Kh5NzPWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24397,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24273)","md5":"31fcfe63d08e95c4473050807ddae7fd","sha1":"c517964c30c0b01e0024854f4403b0b2aa8d0d2a","sha256":"b85e1ac1fdd730657e444c4171c138bf16430adc5b697271fbe6f4e8c8fec25d","sha512":"f7ad52926e48b37b2a9b9d1e576ecf38524d57d7fdd3d1e11a8b7f3905658fcbc785a19af0016a370636ffaf6a9baab93bdf5665ef44ceff72f314ad00876c46","ssdeep":"384:XQqRq36B0PoRuCXOLGvn/GeFnqvjmh2XK3EiyiBy45BkEw:zK6OCXOLG/GeFnqvjmh2XK1By49w","tlshash":"30b2faa63397f4b1539b606e683b6207f1340fb9240d9064b629bdf67928dcb845bf70","first_seen":"2026-03-05T16:02:25.664157Z","last_seen":"2026-04-06T12:31:03.070488Z","times_seen":1844,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-form-elements.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-form-elements.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"30f87566ccb3e69a02bf9cf540420649\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYlDGPbKOHgncie95HUUnyJdsOfX%2FvehiVjYXL%2BRX%2BGYYjT9ChGm9Qm33WPozYigmpzzgqxN94qGwvKS2F6Z5uWR360RF%2Bem2lhXRp23uxCMt73adsTONVw56A20Dqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ccff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-04T20:20:48.924794Z","times_seen":160,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-perevazka-css.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-perevazka-css.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"ec7860662d37b29d4285f96bafddfe07\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BlVo9ELZw4t2U5HKLeBF2bRRrPJ0Vby9746bGJbcot4mgqD2rbtI7IURZtIo5EdYCJij5avIoqkfC1R4ss%2FGgxEtjySy3VFmdcC7M2sOCXmiZqhC4K2pY4WdlHrzFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929cdd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a436b5a41b6c43b4affd74e7c1432209","sha1":"663662ab1eb1479997f64dc16122bba828382f32","sha256":"4953ad5a8fbf630a59b8101b138c2dbc776832939fe6f19e46052d552bf22b01","sha512":"8c1b2868746b358d5cad28431c377aaeb2826c77813f5fdd064b22c61b2c0ee8eb55d6e42eae0d53c9c3551ae415091f9f69cf0392c70da6f2c73ead01d7760a","ssdeep":"","tlshash":"dd41b055a34a9f47273b5a3ca69c76104fab61d9ff830f2c7db4391210458ec233a9c9","first_seen":"2025-07-04T07:44:29.935695Z","last_seen":"2026-04-04T20:20:48.860804Z","times_seen":160,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.transform.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.transform.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"27da4d60461b3dadb7e90833c435ec9f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ck41shn0NsY2o5T%2Fl%2F6Gi8nY8PF0%2FKNoolojwy9dTK7eZJg9WyCgrzUUxryAkZCCgYj94ZX%2BbkdW%2BxVPcRjIy3t7oDUV0EHwrCj8djIflg8KQVd%2BJ6uR1FGkeWxPB4M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92cd031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.925365Z","times_seen":285,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.fancybox.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.fancybox.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"4e454ac61e7cf64e0651f57e3e7a492c\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wOosna3r4ZC7LwTf%2F0%2BRDmo33WpKigssOxRMgDbUSvgTXqBJh0jk7nnYkS%2FUaTg5I73b44mHoONL7y6KEzZddu2%2FlPZvOI0MFlN7PkAAioaFvqooahjOI08gY6zW2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"caf2bcc067214f053488ce0906bd11a5","sha1":"9c2023253751662efc2bd5f5b80ec333fe16d412","sha256":"44ce7be5b22ba80e67c3f7cc0c3682ba98f3aab5def5332bff9fef1d83bac579","sha512":"cb39a93d9f9006ece0dfe8be246af13356a80817275df7d2d2cc16b0e165da8e4bb25489654a412e5f586b8791651f8b1c115580b710d1066dc69210559841cd","ssdeep":"96:wZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnqbz0zO2brwa82M:w/JN5kB2sEBqA7SU0zbrDM","tlshash":"6991cb6e9655300aa037af84a7bf5a56ce700451ba0701bfb0ecf12183d57fa71b28dc","first_seen":"2023-04-07T23:48:35Z","last_seen":"2026-04-04T20:20:48.883031Z","times_seen":274,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-countdown.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-countdown.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"bedba6b4e8a94c07a501314913917c1a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXdyDKXIixTZFm3lYqYDQaBnUePi96UXyT%2BWTPtK5IwSjnoZeyRfzIizxmhcD4jmw1fAA1%2BXtvi8K4PbFzakklDRq5ojeuctaYXDi0kACWnb9ZqiWMZEVO%2FsH5tQbL0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd271525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"92572004288bfda60ad8b184cd57e50a","sha1":"08fc3b134ec78d3e18de73497795c459536f6958","sha256":"15588e0ea0a0ddd7a83dff027fe98a528929134ee6ab15d247a5928a46309f88","sha512":"e0a0b632f800ad6cef33107c88f7de7c6ddf2bf3a326b6039335031721834551775ce2e7aa6932b5358762ea840d61530b677fa3df92850f3b0f2822a47705b2","ssdeep":"192:5dmS0RrndfAZtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0e:KFRrdfA3uYFRTdZTaXif2c2D","tlshash":"88328644cb7a13384ba3e25d53cd6a88faad6183d3094c95fcbc8d096f69c7d7118d98","first_seen":"2026-02-13T09:17:01.81966Z","last_seen":"2026-04-04T20:20:48.914104Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-vc_elements.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-vc_elements.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"8b9c03bbec980274ba301800761cb825\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Loh%2Fizu3tY%2BXLSpVfk1ODpW55ZIYjBosOXlQFUk%2B9Yu8Ufvxpo9XK8lCTzLCNAhACCWXTitJ1m7e%2BIBc1UWNqNkc%2BYD%2B98jAE9nmPAeJAefsNuYte8JOhjAVPPblPSY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"84108daebf35697ccbbb809d0c7b7926","sha1":"8a2fbbbbf1ef10c61e0f167129fa87c311b6d603","sha256":"eabd0522a5694f6aeefbcc9e76e6951e6326da3436d0b183e737587ded428e86","sha512":"7e27e282ba1b730ec9f11933231fb654ddacf1f17871ccd125ef521b00a3add351f784783d37e208fe107058e5a46f360c604c1578984e11ccbe55d2e0302a08","ssdeep":"","tlshash":"9a61327434a63dcf76036f8a67bb622d5e0694a4fd8b2eadb7dcd170e6095081830196","first_seen":"2025-07-04T07:44:29.955259Z","last_seen":"2026-04-04T20:20:48.885843Z","times_seen":160,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/functions.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/functions.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"04961fc3a6ebc67a658c70a5a5fb98f5\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2C1akaiwbMAhVya%2FOYl%2BlfSklHyjkg2td21ymGelpGO40064k3F15q4ARuX%2BElDnobh0b9vjimZzh8tviJdfOv1NnLang7UgqT7RlsBqRHWCVJyaN4nxo5LfS2FqWT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15606,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f98c6fad4758e0e07e2245cb8d8f9080","sha1":"9fddc211ba32187f0471f38be543194c8918a40b","sha256":"10f6faedca553ee882a56e90d811e1f14a0eba98359f7beb8e57c97bab0c4068","sha512":"35f7fc1430abcfa3337227e1e8bdcb3bd779f00f26cb39ba1f18046f085bb1d13a60c81bb3a7e7cb99518f87555bc5af72b10d71952d3a7c15bc97c7fc8e3ec3","ssdeep":"192:rCCqIqXM37Y79+ne2kxMfOLBNPxtqHhfxoArT6DLI+lZ7Tu:wgLY7KeImdNZtqHhfx96nq","tlshash":"b662a5d0b31eb96e49f73339d03e9548ee3ee531830242b6f4b9902c69d0584a376e6d","first_seen":"2025-09-23T17:21:13.838324Z","last_seen":"2026-04-04T20:20:48.894045Z","times_seen":75,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.mousewheel.pack.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.mousewheel.pack.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"31cf198915395cc2f486af64c0583ab6\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0vQlVTBBBlRWzr%2FPMC7KFe4Lw2%2FmBuMB4CxYZOqI9v4xBYrSCw7NJAlfodwpioPqS4hWRl6uI1%2Bqp%2B019EuXfbXOfHjP1YabYvL6rlikO4SrjWcxQfTN4vpXO3C3MA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92dd0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524), with CRLF line terminators","md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-05T11:12:46.59027Z","times_seen":1466,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/js_opt/modules/utils/vuid.min.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:54.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /js_opt/modules/utils/vuid.min.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=2592000\r\ntiming-allow-origin: *\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 16:35:55 GMT\r\nage: 1934854\r\nx-served-by: cache-iad-kcgs7200052-IAD, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6094, 224950\r\nx-timer: S1775320555.016609,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-length: 985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1839)","md5":"83583a4061ddc27e8b6ee0dc269519cd","sha1":"8b1c0acc28729208f640473eb5d8fb82c4ba3e15","sha256":"c051b8b5eb2a0aef699780f15a449491868faa6f8b39b684b5ae8f64f345b94a","sha512":"3652ab4345c138245677f415607e6447358dc064b8b3ad7820f34bf225a0d70b0820afd87e5d2235919afc703248da54f126df8f793dfda529d1fa336fba22c3","ssdeep":"","tlshash":"55318449b1e270b743e7029505ab245ab2f49e527cbf24049802f5e038357b2de7fe35","first_seen":"2023-03-07T01:14:34Z","last_seen":"2026-04-06T14:26:55.64678Z","times_seen":25892,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/styles.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/styles.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"a8c74656f9e2e525dc638ca94190a8a6\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KV3%2FzEKZtDwaVsBwkX%2FPQGSaawrADyBTfQ3TJMiWKFY%2BOVKeO6gB3lrlxSjgqKC2fbagoAQG00PfGGVPf90NgSvNTRm8oRccZs%2FzICc1NP%2B84DMHCm1DZaC9riwMQas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba929ce51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-04-06T14:14:49.896409Z","times_seen":99598,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/coinbase-2025-Q3-1.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/coinbase-2025-Q3-1.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 6656\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2fd1cb2b3dbff60e6a4c191fbfdbe88a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkq4FbW%2FKU1xLBCYtGJ1Mb8pPK2QEDlgnAD6dx5%2FKxKhQyz0R1ruF6DDVktvhH%2FcwJowv1lWUniGCtJOwYrNAURRiG6CheIAHXWD%2FFpm0r4F3cj1cfTPiKkg9upPwaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba92bcf51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"007b6f89d68b2d804a7b8d2c3e596e08","sha1":"f57286fdb53c3db183510588720aee1646057a3a","sha256":"0017bdc627716fdf77cb616bb5c1cd7f589531fd60458e0ea6bd9f3b27ff59f6","sha512":"085c1b6adecf09a922d7f44c74fa3b131884fa6f7f700215151665ec8b09ab67b21bc7eeb583345df713d3035957f34f94e68abf3c76fcb4f86b10835c3c25dd","ssdeep":"96:SSii+I9QSsVLZvOb941AxWrbnnv51ztpP5iRLjnf6d/9hS5vZjQtpcJI:SSzpQVvOO1Ax0j5V5Uz6d/jSZZjQf","tlshash":"c7d18def871268c485a239519807c1fe8d141e7e44fccaa0491ff17c11fa368b668c6a","first_seen":"2026-03-06T11:55:03.705185Z","last_seen":"2026-04-04T20:20:48.873995Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_21.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_21.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 73867\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"aea2458f6494423cf6cfeb15ba470484\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6JzQiFliL4tACuYHmchmvJJG9lLIBIWCxLZW4qp11VxG7pDNebgO3LbQcT3p%2FfZLU%2BP7%2FOBUb6KIIG01CTLhJohmvAyyNl5fGzKIwI329YE68jxxj%2B5dq8X6MvA1SU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba94ad741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x942, components 3","md5":"458a0e14f470dadab5c34323e17c17cf","sha1":"2ebf6135d3b2557b40068fe7679b7a63a8ea0786","sha256":"e8c9be9e4900e6c017e17a426d7787d276594de17c45703d745a4848f740d05a","sha512":"ee4459dcf0366cba28f94e422df00576ffada051ab05b547387cd6127e90afa7fd86cc3d0f2f943c7e226512d96a7bd83d73658f77dbddb475dbb829a9c3c81a","ssdeep":"1536:NR6ylmQrNMaXX7z6/2je6bRyOOGOJKYfJSb9OkB8vZkv6D2duL9epfyE2vEjqijm:n6HmDy/2jeK3OGEE7qv26DzL9epfyFvh","tlshash":"0a7302cbb70d0daef9e49038ae4c1b4555bfacd245c0061d3c05d0adbe19397b96d1e9","first_seen":"2025-09-23T17:21:13.917053Z","last_seen":"2026-04-04T20:20:48.889561Z","times_seen":155,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.37/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:54.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.37/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\nage: 100894\r\nx-served-by: cache-iad-kiad7000063-IAD, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 17134\r\nx-timer: S1775320555.711002,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"4ea61648d86a1581260c70029fcb0dbb","sha1":"e6acb5018b942132d802fc8473b1c364829b6903","sha256":"75fd4478b91247330e79dfd6ea1a7056dd94fdc24eb9f20086da0e628059d7da","sha512":"fcebf9ae2a66a7e3e750fd9336d0a276e2cc6c22d6f9c75f97fce0724ed0503b3a2fc138d04e431645f0e842c2acfc65ea7675f6ebdf57dbbc5880746a25a6b0","ssdeep":"6144:WxrQb8XM5U5dAbYwlkc9IERDGRDox12r/l5lD:Wx/85uclGmroD","tlshash":"1264f7dcb2d6f07143e774a6403f200af23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-04-03T12:39:14.65652Z","last_seen":"2026-04-06T13:49:01.660123Z","times_seen":472,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/zilla-likes.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/zilla-likes.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"4246d10d2b2916f8ac319ae99cdea463\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FK3GXxzsE1vT8rv4M6vHtEPvuiiumw%2FluEiiBhUMaTqqORnfUfN2v0QfLb3A4QwEGI4fyNe49kJBH%2B8oBo%2BJgAmt5lsCVLqlegeO1JeTIr1d1DmBWwwj1at5rcTiEs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acec1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-04T20:20:48.910383Z","times_seen":460,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/animate.min.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/animate.min.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"e5c5908b43f078e0a79914d0713e0ed8\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0yPaDjdWDovW8%2FGjXCIvshNdL2an38C98ER8m2s0zfGNleaI4DNXVFaZRMngBQN1Eh%2B2WGNBuD2v%2FH1OT5k05oIoaTIgaiKm8%2BPPNcNypSe7NHWBeEhU9fXPdnvd7wE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcf81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51719)","md5":"8b6dae7f49f2b5fd72f43c405d4417b9","sha1":"a10ac4645869698687a5e08cd77e3d98232ca3d0","sha256":"1c3fbf3f4938451bc3b7781f832b7da84c23eec5b979ac7541ec754e67e3b6d2","sha512":"7a49d6ffcc94fbacdab8ac8da27cd5f211122974c49eb652172674bd27c625037869831a9639eddc7d5d65b9d5d81d3c00fb4948afe45b146b3cb5b7814818fb","ssdeep":"768:/kZlIbIM6YIMIgIzwO1CA5kiDb3CyQ5xrQe/0STbsysb:/kZiIzwO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"393305af4891229991664b62c3dc5e68872dc67714621cde33817c8b8f87f9f33da607","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-04-06T12:02:02.139459Z","times_seen":3280,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/jquery.dlmenu.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/jquery.dlmenu.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"22052df4b2ff22faa67cc0a50c1bde4a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrdHcB3BrCVO2u5UjGPzTaIRUrCcE9yx%2B9csC%2FgtWKg4UdiWS41a0MO0bovBDwbMOF6faTeMIF5SH7yybdv48v44yHbHVzOHiNKgnPkTSgRtdvGNLlLKfjZiSEbeIVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcfc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9087,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-04T20:20:48.920659Z","times_seen":171,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/vc-tta-autoplay.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/vc-tta-autoplay.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f2641dcf293ec6a0a4f6ff15263faa3c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4AXIQgwSDJCbaWsr2kP%2BbpwKX9q2wpChKmezNXkYwul1WN6cwSHFime4lFPp4PcuBsuCRpjjsJLAtdp4fk%2B59cTInMbvDcH2DB58b3t2UCB17PQtU4%2BlTp9EMBTozw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ed1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-04-04T20:20:48.913617Z","times_seen":467,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-grid.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-grid.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"bbf9c91a7b6cfd848556a46608ff8574\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yl8chHBybVrjRpV7%2BHW8Pd2WOPyZ2jw6i3XJhV2tM5u66rjfqXYfW4c%2F4nB%2FU2nm2sPAI0Jy%2FfBDS1UEZG90clEs5D9%2B2LQTkXU5YjabLP2JKQE3OGTKcoQ3LZQHqvQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cd71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"716b42dd6db95c1109ca1142526d352a","sha1":"cee0c2db7f5e5a2c425c5310931b630e27f5be47","sha256":"c9dbf396d0101888716bb5f49d7173313f8e31cbaefbe8012c725346a7ecc7f6","sha512":"230821d05ff726df935fae4f98427b9bcd3b4357c7aa2fe391ca3efeed09a5b2a8bfca83439ff7a0abd2ade7c140903e184400864f715364f962b9cb7cce0e32","ssdeep":"96:eX/KNp2Pg96+KQzbIIJJTmBMbtenxCZM6dFUCNBz:eX/6p2W/sCZMre","tlshash":"a72280c569a11c1f4265cf9b71749c2f5e39a4b77afbdceff2e61c06c0a980a44a1483","first_seen":"2025-07-04T07:44:29.942684Z","last_seen":"2026-04-04T20:20:48.876281Z","times_seen":93,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/logo.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 4990\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"953c29f8e0b51fed6a3cf5bac09c0f5d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIkt6rls2CTszWzCH3ARyIoUgR41kRzPGiJnJN%2Bx7qkeRuTEhDCKyMDfNw7MLHS8HrcnoaovJWKQlyyXn2xz%2B32tkDg51LgAcpCDmepc9%2B1iL2Pb9FmkDNWD%2BthFkEA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba92aced1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4990,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"787800673856eec532c693fa30115e72","sha1":"9d338d272752f396132c262129031894e9fd29aa","sha256":"3eb174eae1cf34b19950de247d137d42dab30f94741a6a17c8de35a198ea3fbe","sha512":"1141ccf8e9da3f6158525320020ee2b052f60a0fb2a2d8653313a362f787e3b0080950dad2a814146955b737d83620f615a897418d7324071cde2ffd2cefd389","ssdeep":"96:qCCgOfZVkrz6QOF3mITG79TPnlMqeYUNBZgwKnkMg0sY1r+tMdEOhg1s0M:qmOErzP4Y79bnlMGUN/g3kMP1rYwEGge","tlshash":"eca16ef1d778fda86f075093268f652e70c2d4dca9b1bf091392621cfab15a79102850","first_seen":"2026-04-04T15:49:35.345123Z","last_seen":"2026-04-04T16:36:22.177126Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/easing/EasePack.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"6a368a4df0f5e7641fb60b076a2ae2fc\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOkDDyAxhoFrCpyD%2FvtGSHWAlRV4ISmFEUbp07LZJ4588noVNWfKePGfG7toO4b%2FwB9WUimKS8iYAEjrQMvHIWS7BsAoJHflANTU7v02gtqUfu%2BOZ%2F%2BJBRYGhnQ3FaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acf21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-04T20:20:48.868442Z","times_seen":362,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/binance.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/binance.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 5534\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c123bf6023a2438bc203f520ada3bfdf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KfZU4gHQ72i3%2Bhy8uAkr2mgZV%2FJAOCnCExWbgAevKKN8tagGx%2FHGCZljS7sgI9tBtvnScBstfjwdG7zNKbRDeByfo8c5t15fbWpDDeGCZhPlkRI5NZhzxoCbNVXDiE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba92bcf31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"98eef2ecd52c7ad02a26c45ee47e27f5","sha1":"c435cee84bf557ffa5ec09ac24f7500abcf49228","sha256":"78d682c107fcfd8bd96d1ea62bb8b718ae309ac487c32156da77b5d9b2d6045d","sha512":"c318db3a9fa930db4f406e2dd0915e8d4856553934188e7360ee60a61661ea5b680c3d4d2ae9987e4b3911a10cc975195807980575c022df33dd15354197c782","ssdeep":"96:SSPiOVdcnNsom1007id48FJtVpC3J+mzPkQdC88NFAKhxiYgKjL:SSXVCsom1007t8RC3J+mzPjdCnb1tL","tlshash":"cdb14bb8868f7a661b67426544cd0cca601c4e684e3e6c5faedeb114b531b3c94c39a9","first_seen":"2026-03-06T11:55:03.732225Z","last_seen":"2026-04-04T20:20:48.88357Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/quickfinders-effects.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/quickfinders-effects.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"600100670132086efbd5f75abf87477d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOuNETephsYGyvhYhYU6Jv1L2h1syvdOgvGDC70BQZD6OwcZOdrMCtX4OtBPP2nNyqCGQmKivx1Y7rQ9g%2FcMa%2Fog%2BReTWyR5hj%2F2C9gRM98BEUIMlMMURUlt5m7fnn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92fd311525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-04T20:20:48.889061Z","times_seen":156,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_1.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_1.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 6732\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"eb81945f923fb5c7be44fb7723eff11d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJP5vXL%2FPh2nLF%2Fm7Hy0zfEjX6CNLWkAiVsy2loP0rT%2FV7XTIGHVhBxW9DgtWoV%2BcxQcmsyWPM1Um3sxB3p1Kl3LciifvjIwtn%2BFJpCaKQEykLzMbV%2B72NWkynmpo2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba953d961525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x354, components 3","md5":"a6444d582842d7178c462499c49d2b8e","sha1":"e3f2c15698e90668e13ed2cad7cf92d848426ff3","sha256":"10daa070bb1c3cb4aa492d52cd7e33c47da45e041684e5aa1a921365384b8949","sha512":"6ecbd626384f0d9b5eb5102afc1f857451e27ac778ba3905f693eaebfb024a9c360101a53142497c0e3f1e15fac4d01acb136e5228ae2c4a963fea2449c192fb","ssdeep":"96:k/hoJJTgqetm80GkXBvNhx8XoVlxHR4xerak1HZRZ85vE/m6Gzh:T4qe4c6xooVd4U7g5va8zh","tlshash":"edd13ba3d704a267c41d173140cfbab2bf661d62ff90072a1a9944669bba3a07e43f01","first_seen":"2025-09-23T17:21:13.863238Z","last_seen":"2026-04-04T20:20:48.892485Z","times_seen":155,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 11:43:09 GMT","end":"Mon, 08 Jun 2026 12:43:03 GMT"},"fingerprint":{"sha1":"37:DA:D3:BD:14:C1:A6:71:41:94:06:93:64:AC:47:79:17:22:28:23","sha256":"37:87:46:5E:7E:5F:2B:A2:A8:B5:67:14:B7:F8:9E:63:4C:DA:D4:AA:C4:E2:06:1F:3C:7F:28:F6:98:38:A6:2B"}}},"request":{"raw":"GET /video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tardven.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 16:35:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: __cf_bm=0Djg1xVKYUUswpnEXF2C.Zzh1EzoD_N8_s1cauBnLSU-1775320554.1633575-1.0.1.1-jgyjLKvvoJTEJg_Im4DsuxJaj3lO1t0BS2spnokdXiKpNSZU9G6IaMdRE4RahM2VwbHl9cn5dEHEYiMaUApVh_OJFNO9dhusATJ16kT5h_RRQLN_ps2_OZlkVR4BKbX0; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 04 Apr 2026 17:05:54 GMT\n_cfuvid=CcOFcjJGApUyBMKLF927mGFBLQmvIcgvyZCH6_Gp24k-1775320554.1633575-1.0.1.1-R6iyVPuBSKOSaK0u4lnWe49fpJSuRyBY2ndmKM9aLEI; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\nCF-Ray: 9e71ba978ee53181-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nLink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nVary: Origin, Referer, Accept-Encoding\r\nVia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6d7bc8d7d-d4m42\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6d7bc8d7d-d4m42\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000147-IAD, cache-bma-essb1270054-BMA\r\nx-timer: S1775320554.176225,VS0,VE120\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":20719,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (12385)","md5":"95be785627dfe4b5bb0a17651fec7058","sha1":"3ee7be4d74a1cb4cb2bdfaddd89de03582ea83a9","sha256":"285758c587a281230a331bbb59fe67582a3520481392ddd06b1a44d4487d59e4","sha512":"a3fc1450b6e3cc649219d73c0790fb2d98328fc9c8498264d27dce0dc01f00e845fbec038e0bac8af6ca56f94e7610b40aee808e12d3e3a92749dc699c24e6f2","ssdeep":"384:Pn1deGjxlJlJuVUMUwlpjlp5popv7IYWstEINtbqf9XCJ7j1WSPqOdM/+MhHFgf9:dplJlJuVUMUwlpjlp5pop0BINtbqfNeP","tlshash":"c3923c33f5d1b87586a51ace2f2bba0930b6110b6e46cd54f09e964c2bafad335471c8","first_seen":"2026-04-04T16:36:22.181391Z","last_seen":"2026-04-04T16:36:22.181391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2130636459-9f25540755bad1b1f8df8fdb3d8f282342dbf0a57eef60a7f125ce1f9413934e-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:54.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2130636459-9f25540755bad1b1f8df8fdb3d8f282342dbf0a57eef60a7f125ce1f9413934e-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"cdffaee69cee4f45e4d284ae8f61698c\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\nage: 761281\r\nx-served-by: cache-dfw-kdal2120022-DFW, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 30, 1\r\nx-timer: S1775320554.475423,VS0,VE1\r\nvary: Accept\r\ncontent-length: 1482\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cdffaee69cee4f45e4d284ae8f61698c","sha1":"bdedf7f60c022fcac64a50c17f80b835be1bed84","sha256":"e83c4568f93663cbcc9b84369ca3a3bf13f0c76a4bae4cd5b421fdd3ced2dc4f","sha512":"329a410aeb7b1d51ac5cf514ed53e094df522711f9af030e7542d507e0253a533b6a4e6389ca0dd530d63b36f1c2a288079923aa7ff7061f43ff7a4a866fb09d","ssdeep":"","tlshash":"4c319954b2350d9ae82902377d050f673685e2b4777cb9c7f4e9bb0f68941a1ca06f40","first_seen":"2026-04-02T03:17:59.453127Z","last_seen":"2026-04-04T16:36:22.183515Z","times_seen":9,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/forms.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/forms.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"f6c2e03a9f180431a34637f4d01b3f89\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PD9EJhCGbhfkFRC%2B2UKO2pxHCuRlBy8MquYIo6de09vPY0Ya45CBFI3fMDedstL0SPJOyWmJxHXJtsb0VFKV%2BZPf82RuqKAqAh9ShwAO0CyDyJfQ9Xwf97FDbJzcgjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba930d361525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-06T06:06:06.819949Z","times_seen":4844,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/6-3-ct-person.png","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:54.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/6-3-ct-person.png HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\ncontent-length: 7703\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"710f027649af935a40ecdeb9b1096da8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2xi6K2Fz82izbzIX%2F60WwRaOVPWan4val4oYgkn03Hklel7UNHp834%2B3xCtvOHwB9%2BkmKBLHKIBc7uDwBmjZUiF7j1kbCOspKZukGv1FlAnx0e6NwdybNYhF1mxeZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba993e181525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"139587ee1590b65ae116ee0b53f408f3","sha1":"989d2d9ddcb42b2c723f6fba4be89d21185c4d1f","sha256":"c00a1808e9d3c3e023acb957df85c6c02ffd617ae7e2a9f5e733541fb727ad61","sha512":"7ea5e9db4529c83ed6214fc37539ecd55d6477ffe38fa285022c4e72705bc758f0650edc2e8bd4bb951a3388fcd44916b5d038bb2eeebcb5248ee06ec3cd5139","ssdeep":"96:ypL2iKWJArcGvbGEuUZkXw51sRJbgFeIo3y9jWaxhLMDDO8p0xo4PX5M52iqnIpx:u2YQPviUuX1B5C9Wa/AJpUUchNBcx","tlshash":"b1f17d85c2139025f3a693377df7856c087e4cde9b63afaba25356145c82b4914d888f","first_seen":"2025-09-23T17:21:13.830132Z","last_seen":"2026-04-04T20:20:48.879585Z","times_seen":145,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-new-css.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-new-css.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"29d06b32ebdf97dcf0c2992cada10cfa\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uulHq7tl5Qb5tMQ5XYlVWmnRheG%2BdSia5nzTS%2FwihOb5aa95kbg4UdFiy3Rei49vpQPbZQhjxgJXEsAA17XSkOs3Kqhbu0IZzoDgNpzyIa%2FYHs%2BZ61rOd%2B7HznV6Ec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba928cdc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69882,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"dadbc97d3c0617e2cbb8add82c0f680b","sha1":"baba0a88021211f22fcb1617d56383fba37d1964","sha256":"c316311eb254253a29c702891c6e1510b227e90e59352801d2bdf17c513098fb","sha512":"9ed1aa19bc8202aa50a782a2fec8abf104076b6768a3f56ce0691eb1041665efa3fd7cfd63c4fa1665bf45dbe055c2b66fee2fcbbbf5d79fb55555b0f9f47035","ssdeep":"192:4cc8lnMjYLbuPbo5YcNIiTgapyosoW7DiOCcOhpAr02Thh01bCOgbgdKzVAE7UHT:znf8dwT0C5zv82qGs2h1IeVc0y90N+k","tlshash":"b76335da4a42082e1237e52563dd1b71df576663df120124fa98a2328fbfd5d01abf8c","first_seen":"2025-09-23T17:21:13.93982Z","last_seen":"2026-04-04T20:20:48.915501Z","times_seen":159,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/TweenLite.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"70b91d90a210188676c474bc53124a74\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsxbYmHCwBEbgVSyxL2XniPDy5Ku25v28oW53Nz%2Fq2GzHSkyBQF68jDAzvAKRIq%2B2p3HYrh0QhRyEv%2FlADsZ%2F5Vj3QXzFpDx6owBJ98QAT1tnPhcJNRrGmZtAeZhGI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92acf11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26755)","md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-04T20:20:48.873158Z","times_seen":249,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/isotope.min.js","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/isotope.min.js HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"461b1baf42bb1afc09137ce0d2009a1e\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dw%2BO0sPzbRrMdRPFoyKjAgVlBDf%2FsQmr7ujDZanHvpkiqvrwPRdOlZdb%2Bz7QxIkfZtDSZoBnK8Z2gY%2FdQF5ybWMY%2BHwLtIbgRiB3BH0odOZaynXkU8r4kRsVxxbI0bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba930d351525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32031), with CRLF line terminators","md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-04-06T09:30:55.999052Z","times_seen":827,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.128.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 11:43:09 GMT","end":"Mon, 08 Jun 2026 12:43:03 GMT"},"fingerprint":{"sha1":"37:DA:D3:BD:14:C1:A6:71:41:94:06:93:64:AC:47:79:17:22:28:23","sha256":"37:87:46:5E:7E:5F:2B:A2:A8:B5:67:14:B7:F8:9E:63:4C:DA:D4:AA:C4:E2:06:1F:3C:7F:28:F6:98:38:A6:2B"}}},"request":{"raw":"GET /video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tardven.cyou/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 04 Apr 2026 16:35:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nset-cookie: __cf_bm=Y9OOeiQkejnFQXClKtG6M0_j9E4.ZKFNpOarYJaTRxA-1775320553.804025-1.0.1.1-8PGT9jghsmKn6R65r4N4mogvIQyeSAhWGLAaC8VNmQKBQ.DbK6kBgr._i27RWX5CDeeRxH3W2uIPrybsC2gTAm5Mzg86AXqikcDepj1z1_P4W8.FxjRgjfEe1eqWmOqW; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 04 Apr 2026 17:05:54 GMT\n_cfuvid=HunoPDenej3TWSZ5wOYWCUyOlQ3bygwbdGmTKaYB6G8-1775320553.804025-1.0.1.1-cK8f5JgkPyAwc6spLt.6YZSILdMoeteh03JriF3t63g; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\nCF-Ray: 9e71ba9548cb3181-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nLink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nServer: cloudflare\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nVary: Origin, Referer, Accept-Encoding\r\nVia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-6d7bc8d7d-2wqfr\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-6d7bc8d7d-2wqfr\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kcgs7200141-IAD, cache-bma-essb1270030-BMA\r\nx-timer: S1775320554.825724,VS0,VE188\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20719,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (12385)","md5":"302a0d8241759aa66a1514ba65bb2daf","sha1":"7bb07ef0930d4083588ba24a1ffe0134f93ad812","sha256":"eaa05c4e014b1709a3f335e9f1f6430d72e13fb1f57573ea920b2925159cc6ac","sha512":"4d45bd02a5263cdb6472fa527204cd1706418e47595c5d4219981c75091976545099e83f415e17e3df4b10ac8824ea124f4d481235b20f4e8300766f70ad8bcf","ssdeep":"384:Pn1deGjG646LOyjBZv6fc6fhfiff7bYdwstEINtbqf9Ch3CJ77WSPqOdM/+MhHFI:dLjBZgv1QPNINtbqfo5EWSCOdehHFgf9","tlshash":"ca922973a5c1a42692d019ce5f3bba0935fa12077e45ca54f19ff25c2baf993390b1c4","first_seen":"2026-04-04T16:36:22.188387Z","last_seen":"2026-04-04T16:36:22.188387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":219,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_17.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_17.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 181984\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c65158a84e8b9b0e3bb122c9d6f66962\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKAimMD4L44w7wv2xycbjkqAUzDg6Osx2uUJMHWOAeTZK0Lhbb4LUIyy44vGwYambk7bmwq7fT%2BpmzZQ7fn40SIbB5SmP13M0u884SygcY0OlNoi43TTw2vyV6jrV0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba953d971525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1176, components 3","md5":"5f4937231d239f01c8503d7bb7cce83b","sha1":"c801abd3e5d669897a891fe66ed997eb13de5073","sha256":"5ac795ba09b7890a433d7ab2909f2532a2d9e0acc415dfe57f6e2bd62f31e38c","sha512":"cf95aca979a28da1ee8cf823daab8c9f866cc789005d9f7e1ce69022de40da396c12a79dd95cc195beb912885374bb1cc8dd1e6ff6796b588b1ea2ed28d1b57e","ssdeep":"3072:ioWCJz83R3nk4ESh9s03FWj/5RFkTLKvqxNtdgmpn7AtftxhxjEETbuq2x+NB:iuz14ESl3kT/C+UNtL7aTfjEEfZ0+T","tlshash":"960412a2e5d934f9c0bc5bf1038213368e67e5e99be7710d4f1544ba2a0839aecf7164","first_seen":"2025-09-23T17:21:13.816899Z","last_seen":"2026-04-04T20:20:48.880632Z","times_seen":153,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.37/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.64.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1171206421?badge=0\u0026autopause=0\u0026player_id=0\u0026app_id=58479","date":"2026-04-04T16:35:54.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.37/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 16:35:54 GMT\r\nage: 100893\r\nx-served-by: cache-iad-kiad7000045-IAD, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 42, 17476\r\nx-timer: S1775320554.402613,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 22364\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":211102,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65490)","md5":"1237d39c025e6b5f22ce04e456b15d9e","sha1":"6160f037357d839125d3b49b76da4603a55b3217","sha256":"deabbb59603d42d59f08f572d32fb6c07d91b02d8d6662bcf4548994f9baf010","sha512":"fc54b3bd79e34168adfa8091ef87a72d2c5a3821b85ab830cfb4560715c81860f3836ab59ff29c822b3b00a39ee5c73d376f68fe4cda8391df86273e45ffe8bb","ssdeep":"1536:ed1fPBcFdFgF7FW8RT8RX8X98z98pl98pgv5BencLDZspnq6kMgLdvHIhRGWdHHZ:+v5BLwnq6kMg5kxFfR","tlshash":"202491d816f6552b605f6ee6f4c21848fcac43dc97226f5af00e79cd89ca2660dfd206","first_seen":"2026-04-03T12:39:14.650734Z","last_seen":"2026-04-06T13:49:01.67338Z","times_seen":490,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T16:35:53.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhgNZTwwzBCdvJHAoCuClOiPK58cMlQc%2FOka%2FPSFL%2BrDWm4D9wZRX6Kp%2FurZX5IcQ2fptHU%2FzknpIwLRyZBUY071fqCMipNS35E7RcyIqBQgJHrMxwHAvhEK0ixgO0s%3D\"}]}\r\netag: W/\"35e46e1b1946145c1cb250ed8389f6ec\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e71ba914d234e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]}],"data":{"size":250833,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (750)","md5":"888a8aa435fdd5471c28e23021974372","sha1":"2210b27afcfdfa037f130b815e1a676193570dbb","sha256":"b643b378925dc6efed4d9ea231e183310a737faddd8cf8342bf2cac97776aad8","sha512":"ec5961df503ad02b9b94cf2f55602d17b8c3628bfc0268a65dd9b145ccb627ebeaebf6008602ab9c717a4d1133cf80ef75c79aece957dfc605297c775f087b72","ssdeep":"3072:zmF5vXrdrTMYX9G9xunxugxuCyUQux6Yc:OdrTMzxunxugxuxUQuc","tlshash":"1434c6119a9d0c3b011312e5a031679935afcf33db1788eaf6ff92605fc6de85a27099","first_seen":"2026-04-04T15:49:35.329569Z","last_seen":"2026-04-04T16:36:22.191909Z","times_seen":5,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":48,"dns":35,"connect":1,"send":0,"wait":20,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ct-js_composer_columns.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ct-js_composer_columns.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"52c88705ca1983888ba846d94ff954fe\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yne7v5iRSitIk4eyOV5%2FJED9FRUN9MgrohQOPCVuaUDxMFynOoPlXuo5%2FkW4%2FQhOxJTezb8l%2FmgpOHrFmaHpji%2BbIyEG7qgJdTCKocpgpaHc%2BaY4vAfyb0SrsuEciFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92ace71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9c990e8152b0a456a9ebfb4f8cf12432","sha1":"f2e11fd548051b429142253e5e0222cec68bad11","sha256":"a42b9ac91793f095da55c0b0dc4b415e3e31c2227e40e9b3c36ff65cef42f395","sha512":"8352a1e0911ed7140555ecdb1570268461da0a21ec80526782285c390edd50ac16a626132eca45eb9d1cad87a3b48005cbac5b4d49dc1ea7f0cba993dd52ec8d","ssdeep":"","tlshash":"b2d05e358fd03cb8407a45c6d7a2aa708f010953032e8ca9b101f15eeca013d683c2cd","first_seen":"2026-03-06T11:55:03.748161Z","last_seen":"2026-04-04T20:20:48.85876Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/js_composer_tta.min.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/js_composer_tta.min.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"a9543abdc084a2a4f0859852497b0215\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzkKbV%2BlWAEyXJOSelx2Iuk7QKqnJiT2f8E6blsYPcQu5oiH4%2BYC0X7d22y81VjttNOwrkKb47EgLIihbCMk5sZkiQqUVWZ3g5DUaxa5xKtyQNdF2A%2BLfUr1nfmZLtc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74cb9782b33d884b0522a7b688aaff11","sha1":"e2dcfd6eb5bc08695ba49f1805dd6e7dbd5c14dd","sha256":"a30040e4889f13ebf3a1b27853e687b174c73e3e16dc3d617ae8b262646e15f2","sha512":"7b6d1d0279b4f9cb7d0a4e677a52ba15c0f1a9befbef886bf8d352f96a1d970059a215ae9de42648f8d502e064108ff1dd0df52bfdbef9863c04e586a3e4821b","ssdeep":"768:ZX/7IlwFsPBLFQF2FlFAFGFYWLIbGoxb9ZY7C6IhL1DSwgAsgM7nf1DSszQc8TOQ:ZXOOMDe8pZbJfa2ywlnP61","tlshash":"5b541410f9a10ad7550f6cbc3198b7792a1736b3d20e9edf7262e610cb4828e753d68d","first_seen":"2026-02-13T09:17:01.788631Z","last_seen":"2026-04-04T20:20:48.918907Z","times_seen":15,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/ico_bg_image_10.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/ico_bg_image_10.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 101341\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"54ad602982b03720e4f27e846bf66008\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yX2xBO%2FkyaD6Cu1SiBhLeIKtCIg3HU4ofwjC4ssc%2FuFtsjL03qY7MPkefuiNblk%2F1eiZggAOZPh%2FtPv%2F9gbxjPqE2fep01ECE1YB93MWpFlNXNObWd9NLL7UdYg%2BQCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba953d981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"38f1030f349797feebb0242aeb9b4866","sha1":"6fed5f414b490e6aaa9a7741fcbf00ec582554eb","sha256":"06821ecc09227f1d795f767ac38bafc8e3f5aaf3a65828976100993eee7a3248","sha512":"9bce33fb67e3e8b2cdad7efec22f397f74362fba7255410bd55198c76a48e66d227b5a155d0017fb2d9824f6a9b06b8c9f8b2375b4e7cdbb857603350b37b732","ssdeep":"1536:NyRTqmKXoEjSN1XNoiWFbPWUvJEhGt3j+h5vXCLdGbp5U5XlFyV0C3pnNkr0wRT+:NCTDEIFkPTJE8t3j+h5fsdGdi5aLL","tlshash":"6fa3121984803d84f59d4576e27edabb2e1e7cb1d49c6b3f79c1aeb22d131c8e84141c","first_seen":"2025-09-23T17:21:13.865526Z","last_seen":"2026-04-04T20:20:48.923158Z","times_seen":151,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/3.jpg","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/3.jpg HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\ncontent-length: 257645\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f757b6ba28a33cd72da8585ee5eace94\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOps10zIVSn%2BOwImnaM%2B4mihZasJQoC4O%2BzZcmxG2Sc49FFDpITAlO3k8lh6joi9ACGeRO70JLZ3dmOAN9nAbIKoVN7v5rTJysSCP1tsxCBglHJ8lHrvoDMszeEk5Tc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e71ba95fdab1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257645,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2200x806, components 3","md5":"9debdf1e4db94e97c93369a0e2767e89","sha1":"d5bebfa92642b5251bcee41c3b6123266416a3e4","sha256":"ce29b06f7d03329a64061e721429651fc7d54d1e92adaa64fa042c8e0389c7e1","sha512":"c2df36242bde5bce5f32fb7974d6adf30887dc7dacbef29e4d067f89bb48f2c809ebb45a95f9ef605b6d27a0aa2064136ec9e5292e582613458d6eaaebe4e36a","ssdeep":"6144:aBJkjPI17Fue1HVYWn8sSxK6+GZRS8ZvXHi7b8OB/2G:aB4PCFB27JvfC7wOB2G","tlshash":"d144122e387e0d2be8e6cf74a89764210c4d457ac72f970393856e61faa1f859cb404b","first_seen":"2025-09-23T17:21:13.91114Z","last_seen":"2026-04-04T20:20:48.881105Z","times_seen":72,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tardven.cyou/src/icons-material.css","fqdn":"tardven.cyou","domain":"tardven.cyou","tld":"cyou"},"ip":{"addr":"104.21.31.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tardven.cyou/","date":"2026-04-04T16:35:53.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tardven.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 16:48:48 GMT","end":"Wed, 01 Jul 2026 17:48:45 GMT"},"fingerprint":{"sha1":"14:89:40:09:D7:B5:11:11:95:76:D2:44:83:B8:FE:14:CF:DD:5A:66","sha256":"89:1D:7E:BB:16:E6:B1:38:DA:99:69:53:83:AF:0F:04:8B:F5:5C:D8:70:55:A3:62:07:8D:D3:73:5D:17:C0:FE"}}},"request":{"raw":"GET /src/icons-material.css HTTP/1.1\r\nHost: tardven.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tardven.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 16:35:53 GMT\r\netag: W/\"85f03b54da40f4334fc3ce7301378ec0\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4%2FMAa2Ju%2F6RFjjEwcqxQ4cFYtSOYav8txpRLdx0DvnlUbzdv1%2Fj7etYIB9Wi5C478ygjYJdM0kqQ7RWf97Eg%2B%2FWTNy7tqVRzpbpsCOH0%2FTgeJW45FXZK5TMUf9BgC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e71ba92bcfb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65073,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eeb6f81442808aa8db6a2c0bb86361e9","sha1":"aea28de50d8660164bbd0b3a2bcddd0095a4ccf0","sha256":"3bcb857882007f16b6927be5b4aa7ac1400b0101febfd16952b6f3d012e5a727","sha512":"0412e3ecf3f213938f94dc80da22215196d00e5dc76fd3d5100b6cbe4b78149325f005563c4b0668f6b4e42666e257e2a00df5fe719527aa844629cca46406bf","ssdeep":"768:W7xYmW5iuG6UcoJ307fxgxXWB45H627v2S6zvERXsE/fNY0Eu7sxst0OW2ho:9zgPtVe","tlshash":"3c53ddfcd94d00ab9781ea81e3a16f921b0da5fcff42195dd1463d0ea5c762339823da","first_seen":"2026-02-13T09:17:01.802776Z","last_seen":"2026-04-04T16:36:22.195834Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"tardven.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
