{"report_id":"96a4d812-4206-4196-ae67-a78eae87b54a","version":6,"status":"done","tags":[],"date":"2026-03-28T01:55:25Z","url":{"schema":"https","addr":"rvardun.sale/","fqdn":"rvardun.sale","domain":"rvardun.sale","tld":"sale"},"ip":{"addr":"104.21.52.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"title":"Rvardun Token","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rvardun.sale/","fqdn":"rvardun.sale","domain":"rvardun.sale","tld":"sale"},"ip":{"addr":"104.21.52.219","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T01:55:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rvardun.live","ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T23:56:10.667964Z","last_seen":"2026-03-28T00:08:29.217515Z","alert_count":194,"request_count":97,"received_data":3940108,"sent_data":45390,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]}]},{"fqdn":"rvardun.sale","ip":{"addr":"172.67.204.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-28T00:08:27.822081Z","last_seen":"2026-03-28T00:08:27.822081Z","alert_count":0,"request_count":1,"received_data":846,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kuadin.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2026-01-31T05:58:12.107566Z","last_seen":"2026-03-23T23:33:42.285152Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1380,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-27T20:46:48.047543Z","alert_count":0,"request_count":2,"received_data":2708,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32dff9de2a5a22fcbcb16662d7679cf9","sha1":"4287dbcd30f6484bf1de22f5cd17de3186180ba5","sha256":"6c1055481eae9b1a886efcb915d8b8570011794f704d9f70e4967c5bd2169365","sha512":"a13ec90e449a9832a7f3a528cd873bf274ed582aec7c511c61890ec75e81a78b5ad35cdfa7aed27fa0da06fe3b8f3cef8f1b22e87ce0c80c2cdb53d00b908688","ssdeep":"","tlshash":"7fe06863a64a3c9942c2c5e0a028665392cfd267c48fc877c9089c4c0daa4606720b1a","size":360,"data":"","first_seen":"2026-02-12T22:33:02.03085Z","last_seen":"2026-03-28T22:12:53.928284Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97187138ff46175b8f7eb3aa4ec21a32","sha1":"aea0daa5a937617b5c63ce8161ad6bddefd6536b","sha256":"a7ee43ad86f10251bcf11d1bc0a9e4a18f9c18875bd80f294fdbc40394cfc1dc","sha512":"a97d1f3bb6cf688856384742884a183a9e286c3548b01a099266f3d73fe48f23f145b9b85a15b8a9baaba8b2ef6dc61b97f09aae47a67e458fec5ad8e4bcffb5","ssdeep":"","tlshash":"63c02b5bc5c52fc716d00ce51130623322b65316c87c885859c9c4400d30c43d864252","size":138,"data":"","first_seen":"2026-02-12T22:33:02.03216Z","last_seen":"2026-03-28T22:12:53.931071Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-04-26T17:20:01.412386Z","times_seen":12692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","size":4075,"data":"","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-19T19:53:53.668155Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","size":1187,"data":"","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-04-19T19:53:53.717669Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c76168362867e8297fd24900ee6b7ce7","sha1":"f435321ef0f9e13854612a65250dedada343ddcc","sha256":"a1879c98180fb1975fc80c8da16f7c024883b60aa21e58bd9761e20b540ee9e2","sha512":"ce4a596b0fb0ba3409b3205a44f9223ed7c4236231e4d5e42494a6b9f91c27714629d3174a783a68e5e318feb3d6e0f932cd5a5812cf57f0a89da289ae4bbbfc","ssdeep":"","tlshash":"1ec0926b60cda8990a9f7b32a076818f353595a03f8a280c542515d84bab8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03461Z","last_seen":"2026-03-28T22:12:53.933965Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fc3b18c54b9030af3b1f75eb24df109","sha1":"0458e94d3d6b1b78ebbaebd1e40ece8263e5f3c8","sha256":"4fddf0d4e9eafc065fe0300c97c051d33404dcbaa70a6c6cf381fc3414508921","sha512":"e81d5666ae36fc2fbdd610b2900ba473639492179b66586bb099b04009f738cdfdd89b9ac5edae6d05f2e7e6d483a4ef5976464659d4a5da113ed745f99c659d","ssdeep":"","tlshash":"d2c09237b0dda8dc0e9b7b37e577428f723551a13f4f2808846454d897ab4b6042bf95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.037658Z","last_seen":"2026-03-28T22:12:53.934867Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad876aacafbea1bc0b44279e0b4e25be","sha1":"fcc680d6cab3bb6c7811310669004eced66f9985","sha256":"027ad6f90f07fe485218887a482bf1a3a50c9ae25d5eb288016cf9427711226f","sha512":"a796daee00e98e59756beb0404ae7f9ca14972726c555645f3f0cb3262661256f7de2f9f6d6769677948d4d10df8efc60f8223490adaa4b9541ee0505fd290a8","ssdeep":"","tlshash":"71c0926b60cda89809ef7b73a27682cf313551a03f4b2808542515d84bab5ba402bfe4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.03889Z","last_seen":"2026-03-28T22:12:53.937447Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca451e423816af4aea44ef9965e405b4","sha1":"d5bf1b129873b75cf21c7a50145f4f9d3fafcd54","sha256":"fe3c46b02167e975a969579f6f74fcf8f9bef19e526d73c44a66485fe6dfe7f8","sha512":"53dd227134f58b2f1e1baa86b2c53e597bc4323a24e6e058a774bcf074bdc4e5c5524d60fbbb735486e8dde12bdde1cc59c5518a8d3e12373974a0bed05d37b9","ssdeep":"","tlshash":"1ec02233b0cc88cc0e8b3b32e232028f323002a03f0e280c883820c803ab0b2002bf80","size":141,"data":"","first_seen":"2026-02-12T22:33:02.042591Z","last_seen":"2026-03-28T22:12:53.938265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c189b07b8cf5fbf9320d7a763c65ce5","sha1":"c6a3762d84befa33910ac5e1cf106b81e20d67d8","sha256":"c7b29a333c06c37c75566cafb3037dd25e9ddfa7c40fbea3c78af8e23659eec6","sha512":"a78ac56aca503d3d0b4ed4a1948edd430d1826b73c2b214d248bd783a1c04e78c60a7dcacf829eb3f3049054c5ab37f1d37b4b7076122acf9eff4014ebb2f13a","ssdeep":"96:si8ckS/qv0VFm/UjCbweCyiSeh7QHAWvoyeCwQOl425k5HSPRySKSLFxPQX:UCqcDaUjCbweCyiSeZQHzgJCw/X8HSvS","tlshash":"8e023ead96f62124b563b23d1befa24435329113180bed013d5ca3880fa15765fbafb8","size":8529,"data":"","first_seen":"2025-09-23T17:21:14.03334Z","last_seen":"2026-03-28T22:12:53.940634Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e05f69ab7787d882a3379b6f3c381e","sha1":"42d4ba48f7c5f8755b753df6abd69c792c162017","sha256":"a5024c650af90792ce558469819a314ed26756021fb18ede088daeb2a9d34b75","sha512":"b2c4d37ae6e441c937e6d4eda2091a0a3fe6b7975715ccaf08897df06feab3c4a377c93d36e4629b822b157f770c0f98732e61c57db7b406f4063295c01572bc","ssdeep":"","tlshash":"c5c0926b608db898099f7b33a277818f313695a03f4a2908582515d84bab4ba042bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.047383Z","last_seen":"2026-03-28T22:12:53.941482Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ff7654e0ee36bec5a7cc6d155d06de8","sha1":"b9453f90a8d1be277c9e04015e6fc39d40110a85","sha256":"743addb91ada723e48819bd3ada98f1eec86c99ba587e63534012724cd95a73e","sha512":"ddcf1b2217759ae315c05997d803ef0ea8d8faef5f5cf5002c298d93c0bdcc41557757fafec0d193281eedbea6287e3674325f70352fc0836beabdb38941bd9c","ssdeep":"","tlshash":"97b09267649ea89509abbb32a076418fb03451a02f86280804a510d843ab8aa0027fa4","size":117,"data":"","first_seen":"2025-09-23T17:21:14.052131Z","last_seen":"2026-03-28T22:12:53.942328Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","size":4984,"data":"","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ct-settings-init-js-extra","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f6f8f4edce0ba1d35af28de8d30592b","sha1":"631bf285f35d1731cfaf94499d5f77c9215f55cd","sha256":"7da27730214cf0f47f5112d190e2c1dfae3b6c46ec56858e849435825595f750","sha512":"875732db3147d810607b5d416bc4bc2e35dd3ed84c07be40a01fbecfcf3288fd05826218f4c01ce657b1d8dd4d0be96043d697a04512622bf6a7c5ae18752d44","ssdeep":"","tlshash":"62f06863e64a3c9942c2c5f0a028665392cfd267c49fc877c9089c4c0daa460a720b1a","size":552,"data":"","first_seen":"2026-02-12T23:23:42.624012Z","last_seen":"2026-03-28T01:55:34.049127Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","size":927,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.751953Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","size":1396,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-26T14:41:42.599308Z","times_seen":1547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","size":7834,"data":"","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-06T21:54:39.712472Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","size":18496,"data":"","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-19T19:53:53.665109Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","size":6555,"data":"","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-26T18:06:50.492571Z","times_seen":5018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f59a1061fbcf41f5e85090ba2fa9a67c","sha1":"8116e9924e7156e7d5d9cf62af3bb75a999d38d2","sha256":"7196e7de0fcb90aa7dcd75f741e89a91f5f172dccef4e8acdf3dc95de355fb69","sha512":"bcbeef70b99310152ea76da61a1303cbfff76bd9b9f654f447a2a706e83e7a4f575a312a0f1963853bca33fe91f526262df6bf8c7ee81c6860a39e1f03a9f475","ssdeep":"","tlshash":"b0c0926b708da898099f7b32a276818f313661a03f4a2808542515d84bbb8ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.056726Z","last_seen":"2026-03-28T22:12:53.943067Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","size":22639,"data":"","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-26T06:11:43.478396Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","size":753,"data":"","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-26T16:56:34.767146Z","times_seen":2797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26c953aa3915f943e1d6b46422c57134","sha1":"4e5034a6912440f1ac947dad321ac1cbb5dfcace","sha256":"42482d38e1d73a9221793b4e757182a91e2fc76bc4d653175bf702b569e0a217","sha512":"965f070099ca919747a7c430714344baf399b04a15358998744277e4478225b0f3123c2b117c957eeac20c5838853bedb444275f57320c4c3c04aadb219e68b6","ssdeep":"","tlshash":"53c09227b0dd98dc0e9f7b36e676428f723651a03f4b2818847414d843ab5b6046ffd5","size":141,"data":"","first_seen":"2026-02-12T22:33:02.057957Z","last_seen":"2026-03-28T22:12:53.943767Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d83b73368e26d5a7848bde92c409ca7","sha1":"109ae6549c639a96000da5d149445c4cd0e52225","sha256":"27fd63c72b9ca9b1589d34f73a3b0b02d74f8633411be042b1bb3b0e90e8ebff","sha512":"6a1e56dd8aacde65e4abff70070316ca88781a0456da6906eeb41f11755c770143f09bab880642c9c6a8c4ee83686f201023466dde41655d3a8b32c1926074be","ssdeep":"","tlshash":"7bb0922760ce98940a9bbb32a47a418f303551a02f462808042410d84bab9aa402bf95","size":118,"data":"","first_seen":"2025-09-23T17:21:14.058241Z","last_seen":"2026-03-28T22:12:53.944532Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","size":4198,"data":"","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-26T14:41:42.947253Z","times_seen":1011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-26T18:07:53.418183Z","times_seen":691356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","size":40858,"data":"","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-04-26T07:34:43.307394Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","size":3902,"data":"","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-04-06T21:54:39.666435Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f63e2248d25d0feaa907a19c7a95d9ac","sha1":"7603afc0915ed4ccaa7da8757a22cdbcf2f181cb","sha256":"14fbf97838de472c1f1d544e7a1e5d7db0267777c9ff2cbf578026079ff1dad3","sha512":"71b1c9cea323ea311956d51eb4c073ee4564c5b1e97e453558a3caa251e24c3ef43dac4fb1519beeac4f7ec41be7d522c42f3babc7667d5aac55fc72ae3c2c0d","ssdeep":"","tlshash":"d1c09b6770dd54dc0d9b7736d576418f723551503f4a1408446414d443ab4b5042ff95","size":141,"data":"","first_seen":"2026-02-12T22:33:02.068656Z","last_seen":"2026-03-28T22:12:53.945265Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","size":860,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-26T13:09:58.782385Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","size":124185,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-26T15:37:30.658473Z","times_seen":1054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1029d319913d70463bb3531e296e48ae","sha1":"defcfda809076ecef49bb77afcd58f5015d52694","sha256":"e4395b9733d0a0fc386a7aa0b95f27d4a91cf0b968f70246003d703c5f98901f","sha512":"c5378e794fe40d744567118090942b46d421856c47e9657047fcb00b90f1557c1d592603369d7fb82408c36c0d5f92dc16e2d7263d683f5fab4090857ed6990e","ssdeep":"","tlshash":"9cc092ab608da898099f7b32e276818f313651a03f4a2808a42515d84bab4ba002bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.06993Z","last_seen":"2026-03-28T22:12:53.948423Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","size":20279,"data":"","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-06T21:54:39.698975Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/zilla-likes-js-extra","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d06ecdbc22bcf5ec006c6dc5521afb","sha1":"cd1732e58472d7a7881e20e3aedc6e6ba9a67ba4","sha256":"2c22ef9894ef1112d5a05229e3f2d8dcce429dff3dc79e64b72bb2cbb0cfbefe","sha512":"a200e060cb7c526c3853227aeeeb27e91a5233c4ead51d163cb0018ad36936ce901ece79145e3389f1d3697590a4f0d73c2e7ad644b153faf12fa1efcac26dec","ssdeep":"","tlshash":"a4e02b5bc5c52fc716d00cf51130623322f66316c87c985859cac4400d30c43d864352","size":342,"data":"","first_seen":"2026-02-12T23:23:42.600112Z","last_seen":"2026-03-28T01:55:34.052578Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","size":5467,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-26T07:56:09.577289Z","times_seen":381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed72935440ce32992acb954c8383f8e","sha1":"5fbdaa42ed18ed3860bc2f07b5f857a4fcf93d05","sha256":"59d558218b288b5c1ae7f59e6e1bade8843ee19705e5c2ff8df47b4f71fd0676","sha512":"f1a4e471b96c18a295ced2bf03650fb7885a9d22de9b352af7d7fd2bd7921e6fa865693f9049ba7bd0526a40d2389a9199c8ffa7773c50926da2d8daf3743b4a","ssdeep":"","tlshash":"92c09b67648d68940d9f7736927541cf313555903f4a1808542515d4476b475001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.074273Z","last_seen":"2026-03-28T22:12:53.949162Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b7e4c930ba72c55740bffda68fbd543","sha1":"eca741cc1e45172f70e299615090767d24e66324","sha256":"7adce50b022897e795c9e39664e34be847c9188e4531eb6d965fcac5d7d423a0","sha512":"14506fc288dec5fa29ea17dd6af3783a02896ab5a49dccab84b1d4b3e6998582b7814fba42024b9b632fb1b28ee039a0251be4013aa30979fa2ee84a3d43e9a3","ssdeep":"","tlshash":"2fb09227b08d98a5099b7f33a076418f3035a6a02f862808042414d843ab8aa002bf94","size":121,"data":"","first_seen":"2025-09-23T17:21:14.07888Z","last_seen":"2026-03-28T22:12:53.950682Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fcec6a9f9392e995a88aaf6558caf37","sha1":"446a678bbaa09d1c534f57bf687f3d5ba8b2d74e","sha256":"518870c4e3a3bdb65e3dfa3d20876331434b362b9226e3d96f71aced580f67c4","sha512":"c76a3f0d514609aaba6d1326d246117b77e6ab4a143d29bebcd9f07df9c0227d245a30950e133df21aeb4dfb6fb113f88dcba0961aac686c74eadeaf3dc732de","ssdeep":"","tlshash":"9db09227608e98980aab7b32a076418f303a52a02f8a2808086911d843ab6a60067f94","size":119,"data":"","first_seen":"2025-09-23T17:21:14.080555Z","last_seen":"2026-03-28T22:12:53.951443Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","size":7210,"data":"","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-04-23T14:41:56.926401Z","times_seen":495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","size":54800,"data":"","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-26T14:41:42.972751Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","size":21077,"data":"","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-19T19:53:53.758092Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ab67360d9298250b651560792daccd","sha1":"01092699d1ebce9da9ae06f7ccf8e957a797a492","sha256":"c77d5b329c21cd4aa9a182a8615a8d5c5c8e3d16ba261bebb84c589218f4a296","sha512":"f7d594934862bf553f32af166716cf8c6898c0c2783911611167b49cb9e62106315f96e538ef4af46cc0db6177408bfb57f6ed1baf85bfd6f4fa23a431a70c7e","ssdeep":"","tlshash":"d5b09227608d9894099b7b32a076418f313551a02f462808042850e843ab4b6002bf94","size":116,"data":"","first_seen":"2025-09-23T17:21:14.082651Z","last_seen":"2026-03-28T22:12:53.952143Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb681e1ebdef64adaae93497ed04bc26","sha1":"889fbb0402a4945d180dd0f61145ff4562cd2048","sha256":"e0e2c6a5140bc478008dbe83efd559f8886be82a4a5722382aa38b1e10f54f8a","sha512":"6e1530b457cea6e127b2140f265b749555dc32141e216527140b203fb0b868031411e15e14eaecd195c0c25dea305ea03e8947b65316bd67e340d446fc5a92c8","ssdeep":"","tlshash":"04c09b67609db595095f7732a079414f313551503f4d1808142519d84b674b6001bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.081914Z","last_seen":"2026-03-28T22:12:53.952839Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","size":20852,"data":"","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-03-28T22:12:53.860393Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-26T18:07:53.454398Z","times_seen":745113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","size":15261,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.671833Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","size":21879,"data":"","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-04-26T16:54:37.509171Z","times_seen":1062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90de6d6de39f900f9656204722c5938c","sha1":"c4ebb4413fa97b0590b29f1ab8a861c6dd55228d","sha256":"fab0e29fc2752191d6e56e0ff5197fc47e4971b5d4df5616ddac8ea985e250dd","sha512":"cad24a9ac7b490721503539de167b7bb5d4fc35c6627501cc266782313bc3579c7ccb163c1dd521c1c77f5cf373cfea2036fae24ebe8020974492aeb4dd300ca","ssdeep":"","tlshash":"7bb09227608d989609ab7b36a076418f303851a02f4a2808042810d853ab4a6002bf94","size":115,"data":"","first_seen":"2025-09-23T17:21:14.091395Z","last_seen":"2026-03-28T22:12:53.953653Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","size":2214,"data":"","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-19T19:53:53.714366Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","size":9087,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.688242Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","size":10332,"data":"","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-26T17:20:10.978811Z","times_seen":12832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba0ea7bce5de110f4836624225154f45","sha1":"e0ccc168084f95854969e2148962491f3db10068","sha256":"a1305517a321e7058ef8eedbb242586497b6bd3734147f6447cc24ae040b64d5","sha512":"4cdc754ce6dad6803d4b166ec196956025146d23e8043a5e668d310f97b392f4f972ee862b15df834c8e25cf53c8d96035c85d26887c68b5121688b2c0627b7d","ssdeep":"96:cvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SP:5N0LE0+1lfYsvSQ","tlshash":"90b18696e77638dbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":5341,"data":"","first_seen":"2026-02-12T23:23:42.601422Z","last_seen":"2026-03-28T01:55:34.057038Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","size":1751,"data":"","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-19T19:53:53.757615Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","size":337085,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-26T15:37:30.665778Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","size":15321,"data":"","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a009e0dc51af74717b96afea7b52e80","sha1":"d76874964c901fe58db1a5f3e5efbd77d6568436","sha256":"0920409bca4fe227a7d7b5331840c7286953163e35ffd98e986cda0fa34f54ae","sha512":"ac1302359811802afd24a63e5bf1cd6f2eeba829e469f1cde73f8983e1fea901b32ddc3f1b336299e1fda1fb88c9a8f089178c92c0292d2be2c82bc289fb07aa","ssdeep":"","tlshash":"5bc09b67608d6595095f77339475415f713551a03f491808142919d44767475041bfd4","size":132,"data":"","first_seen":"2026-02-12T22:33:02.088444Z","last_seen":"2026-03-28T22:12:53.954333Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","size":11969,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-26T14:41:42.741471Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","size":1160,"data":"","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-25T07:49:41.931155Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","size":27139,"data":"","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-24T15:47:28.838812Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f541ee111fa40f4b14c0771a1788bb4","sha1":"c784c652a746eb5d1d6632c70fb467975b3e1e76","sha256":"a50e409667edb79d5317913654b055de96d8d1a52852acb17344fe03cdbcbb0f","sha512":"90753ff447b7f59d98de1504684e7239edea38c7630245965cb29a1567c49513ae3fad2b25e83d315bf43f2d95ec46d9669efb53ca82e6a5d1fd9c0fef39390c","ssdeep":"","tlshash":"d0b09227a0cea8d4099b7b33a076418f303455a02f462808162410d843ab8a60037f98","size":116,"data":"","first_seen":"2025-09-23T17:21:14.099936Z","last_seen":"2026-03-28T22:12:53.955219Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-26T18:07:53.460007Z","times_seen":135844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ct-menu-init-script-js-extra","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b50cdaa10def494c0bb61859eab1cc78","sha1":"e194912a149f83e05b1637c12f77af138315d681","sha256":"aee13acb7d2e3605b74de56aec7aaaaac910fa1ce2b67a93eeafe4f62e8874e4","sha512":"f65d47b2e5ca43595230bf8369aec5c1e716dd0a5d60cb728256bcb5e0e25fd81c8fb258d87ab377c71f671f4c83f98e759c92ae5395d2f0a1780adca064d24a","ssdeep":"","tlshash":"77418c88c9c9adf294b06eb09664c63342971690c43ac96c9fdc84881e309808e84959","size":2432,"data":"","first_seen":"2026-02-12T23:23:42.59637Z","last_seen":"2026-03-28T01:55:34.058992Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","size":15556,"data":"","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-04-26T17:49:39.33479Z","times_seen":14986,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c215afb4af3c167b759b28185895d4fc","sha1":"4ec0ab3911d01627e26e9348f8783af41dec4c6c","sha256":"a04ab77354a8ab2ba8ca1bb8337fdab6a58c9cb244cfffe3a9801ea2f3cd56d3","sha512":"0ae6678aa095c18da47e726344900fc4da6576b8ce2ed8647449dcc791c5c91435e7896e044fb262db3e60aac043006c1b5669830b9489340557119fa50a936b","ssdeep":"","tlshash":"a3c02b2370cc44cc0d4f3736d432018f313020a03f472808002404c403bb0b1002ffc4","size":141,"data":"","first_seen":"2026-02-12T22:33:02.095025Z","last_seen":"2026-03-28T22:12:53.958874Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb7b821b587959d4c0cc406c49077ff","sha1":"2cb4827d5cd5a05729418b369019b9c1eb0798ed","sha256":"1f93a5f6091369b8b6cdb7be01a6c7044ec8c3af0eeac05a5f0dfb3aea2a3e31","sha512":"cb99f055a8fa7834d3f693bf5c06d7622c7d9340b0147d52d4ab12cd6e1a0d1ae0553f7584cc8f682318cfeff7c34f8273dc5027206add3c1ddf57cef110a5f6","ssdeep":"","tlshash":"68d0c74caa4f605915746a169f6f62c9246d80761c8114a63e455744352581ed25496c","size":215,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-26T18:06:50.5598Z","times_seen":12608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/output-onlinepngtools-7-1.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/output-onlinepngtools-7-1.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-length: 10639\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"29fb14d0340b06b12855fde2127a8989\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjm4V52i5YmQN%2BRfql9MeXRbSOTdFDWRGe2ugYnvmANk2XwO%2BPM5hIkhQV9gMum0By14QRDQferKfSuP1P0OXXpUEzJ5L128K81yFjxSPNDGgck5Lmkm9NVXpgk3D2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302a7084c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0b20b50299e85f506e7d2148bae81625","sha1":"7abdc561c49150f584f6485b6d39caf1a68c725f","sha256":"29fb14d0340b06b12855fde2127a8989d6a7501e26bf8c9b010768a452018751","sha512":"094fea601128c455fb073b9018378b4f172c5b26c591e187d26e77f4abdbed68d7766ac2ca7d45869857b03baf2236edddf18d514cc3ec7e44d24c16c85ab667","ssdeep":"192:wQEaC7RiZ6T0a8fdKzsKOWMbIHfpM5SKJIVy6J8uIGQ0I0D5QGkRDu0Nj1MNyyZl:ZEv7RiZ3FWagfazyVSuIGQ0ICQ7RK0NI","tlshash":"bb22bf125d10929ad0a5f325b2ad158382a8bffed187824d7f15fdf63a2cad5300d30a","first_seen":"2026-02-12T23:56:19.854783Z","last_seen":"2026-03-28T01:55:33.972277Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-menu_init.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"45b8976413a9e4545363693140cd898a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nrLmuS7khle4yh7EY%2Fa7EmegTFXbwCqAjjwg5Z9Djy6vSKgOTjH55fmfoP3Kg5W4Hh3xMIKku37AsUjoN70z1cvLQlXEHcMflllKhSm290Q9pRwAJaCBVF42TxkUGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a758590b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2fd9eb6b5b7430e469cd7cf545d397df","sha1":"9869441d1d5867ca84e55b3483346869cb23b248","sha256":"45b8976413a9e4545363693140cd898ab1a13bf67ac062a7f33657e77b34657a","sha512":"56fca6a524fdf3565eb2289a5e1df38dba73d89c71ac3b9006bb33d54d5b20635adc58a34da10742eb86180a1a79b53f34300b51e4c1b499926d992aaf331fc2","ssdeep":"192:YjZMv5B1WVEq1avIWERzGBHATxF2Kij9z3HvdABs16Ib1377k1CdsfEIW/tO:3XWVV1a1mOZ6+vX6EI2O","tlshash":"a88223d4361fa23e42b7b31bd17f5589ea3dd2308206546ab4fe505c29e281753b3eac","first_seen":"2025-07-04T07:44:29.921002Z","last_seen":"2026-04-19T19:53:53.665109Z","times_seen":163,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.touchSwipe.min.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"2457851c744cac5ef83b9485017d9d17\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVbKXwda2GV9XFGEmS303UJZ93OZlZiCtmDkD0aznzaHIpn2QL1GWsxM%2BFpAKusGUpXghZA3ys3bGzIJjbXbOHFLEOV8xoz%2Fja8pBpaypkt%2FNJh1KC22lB7jKpoNdvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8688e0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11969,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11969), with no line terminators","md5":"938114de9f102f3797bdcca94089e52e","sha1":"13ea5f32ec0e653bf9f814cf1ad8cc885ae483b3","sha256":"2457851c744cac5ef83b9485017d9d17242906f10f90071b8706b7c850e26343","sha512":"8155c2ad40cf7b299ab973ac78b460017a9e0b84c22755d7cdc188023b4a8387540a20659b68c5b1762ba55133c9af4c2769a7b6c1534cc0d41476334ac2462f","ssdeep":"192:x/WeOvsOa4PUT2ua8fwSuQQLv8opVPq4hVLE0qLypcb0P7FWD02zt7tNyJcUqz5E:x+tda4PK2uaLnQKbnPpLLEfLypcb0328","tlshash":"b232858a7792f46beaed2274e24f4703503e9d970a0d8071e051eda5b9340b8a5f6fc9","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-26T14:41:42.741471Z","times_seen":454,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"314ce6baaa3218eb171fa2c278d7fdf1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDYDlz6avPhJOHyjzloo6AwMZdbuwKh49E2Qrd4TIFUGDUhSpOJ2FAcdnH0IizcYUBh7o%2F95BKcqYW6MNTVub3Hv7S0LjS75ifs1XcLONu6P8fmtXgzYyyEbgKGJcqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8287f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20637,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20418)","md5":"b00a0fd5e283160549de2c7b36243b7b","sha1":"f2401243950cd9624002921265e46a518851f12b","sha256":"314ce6baaa3218eb171fa2c278d7fdf1b9872305dfa667e9cbf2df77c83a9a88","sha512":"e5e5a424ae0b221f578433025184deab93115575391a7feb1528f45e621976b3049f6bc5e1fd484b469a60c2d4706f7156b61c614c28da5bd41e110f1e49d2a6","ssdeep":"384:sekk5QRKhEJhCoJptuxOqU5SE3RG0F+D/W5OhS4uLSav4Rd57q:sekk5xhEJhCoJptuQSEhG0F+DO514uuA","tlshash":"4492c968ba5070f556b7373bf13b3b197233383a948651106415d8783abed4e222bf9d","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-26T18:10:08.909015Z","times_seen":2290,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/3-1.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/3-1.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 56101\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ff979850a3dd684c7daaa053d592c542\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtcvBhT%2B%2FIK2U9VDhPKna8Q7LOcgmTL69REhQE3lHkoMBn6kND4%2Fl8fEkT3VFUH1%2FVok8Zg6VU8tvK%2BAXnWV51HZ0dCqVRb3JTHfy9PM81v0L6ucaQewYZ2mtph5K6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302aba8c90b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56101,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x599, components 3","md5":"4cd8932bebc3794f5db9282819d80eb2","sha1":"5d86bf9d7def61f522eb9b33ee9c9d062dbc85b8","sha256":"ff979850a3dd684c7daaa053d592c5424791cdbf6b162fdbb82dc7de7b0112c9","sha512":"3235bc41a8d8e397ddacc1b2139eab1ccea4033517bb4a94fd9d7ba123037ff3075c63111cac54b5015fe33521fb78556e1f3805ab077cced64ba036b28d5b95","ssdeep":"1536:GIZMf0uMmSpsBZBbzSZen2tfc3fpqd/oQ/8l:BZd36Z9SptfGSA","tlshash":"4e43f22157a01250e07dc3f74b854a20da9f7f566bc84c9a773ded3f312db2028ab59a","first_seen":"2025-09-23T17:21:13.814692Z","last_seen":"2026-04-06T21:54:39.730437Z","times_seen":157,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/1-4.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/1-4.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 47841\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"25cdeed5590c5ccca1e9302bf849a1a5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DVqC%2BlQtGaNXU9HE1hNfbbwidixKvpCL7ecdIc%2FgRg0NcODG5l9EMeNUPRWfUsjfpMofi19FWBJYqyYUQDPD1UU%2BLZimSJU7K7Wjqk8eWsN5dba1ad2P9ttM7GJsSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abb8ca0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 584 x 532, 8-bit/color RGBA, non-interlaced","md5":"3e770683cfdf6b856c6101560d065757","sha1":"87a8eb2a5c9e54841dc04280afa807fc033397da","sha256":"25cdeed5590c5ccca1e9302bf849a1a56dbb6635e0d2dfc9a0cadc9d3e510b37","sha512":"1f997a496650e4767d09ebfd6a6983558973d7b0aad5e3ce77d48ccfe8c1a017c11202338ebc5c11523a201068ec0d4c0ba85480533065921fa0c43a047d34c4","ssdeep":"768:sKR6uVo3tys0aTrIkJDxlM4bfit0g99KP0n0AsWju/5B/BvqTUyTm+e+fT/8:sBuVodlD02DbLLmEotHa/5eTlTmjg/8","tlshash":"8723f257e2fc9d8c2ad51383204678a2b6ff75f94d8081504ae2f1b37bd69213a16e35","first_seen":"2025-09-23T17:21:13.834634Z","last_seen":"2026-04-06T21:54:39.701712Z","times_seen":157,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.easing.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.easing.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"8924a332d10ef08e1870547aa7c91431\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byOL%2FSVVuglDnUdLeSsyzT4KH0BsCkqZQrI%2B6QFSgKHb4QC2socQkzjydGIzi%2B8TP3SLPSvLhWFrAoD79dbwnX5eLT7Nv%2FjVJb%2F6LIS%2FilE9jOuyzvWwfhYvAMINFl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7585f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4198,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d96c6dc5ebeeda3944c9d32427a60716","sha1":"64166fb45f4ae0c6ce70c8cd5e9a31620020985c","sha256":"8924a332d10ef08e1870547aa7c91431c2c79e5b1f5e2a48865385d0fa1a9772","sha512":"de646b4d8f6e596d06ea30d57721d4cc8ad0e6e1245ff97a185d8061921350a91f3bb8b392bc94ae398a255f0c5353ec85a94ab024abbeb572dff074aab1a750","ssdeep":"96:Vc4ItZ0qLkpknUhnZVqQ32Ufsfs74d9ZUO3LfRLE6a2ew2Roh/omOe0:a77zJ7eH","tlshash":"7f81284d3c6d71115333fb7095078819f62d7a674948ad05fc0c4ca11f71a669abbfac","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-26T14:41:42.947253Z","times_seen":1011,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/SmoothScroll.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"92827490d2a95989f1163e13a5de6867\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVu%2F%2BzkpilQuKfwWsrGGzEIpsUCeHA6FNhGCyS8kcmvW1u1xXszxT%2FBUp63JYDJtRE6Dtnh5HK4Chtw6HUNDQ8Zpd1UzNChq8EEtEUCOFC5NpJCuCdexNIyWXz1Iqnk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a768610b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e3231804e3d5ba9a5e75e2f3fcfc864a","sha1":"85ba8bf46f104424fde024c3c5976aeb17141f1b","sha256":"92827490d2a95989f1163e13a5de6867ba4ec33b6dd9449c4d36d692a7d7aa79","sha512":"1cd852cc929ced5ee822db4684604dab710d7d18e615217dbb6c15058ce0c19bd339a53bf021bfb62a9040f61413aa82e6cba97446b2669be42ae2e63bfac2c9","ssdeep":"384:HkQ/wP+gdvChAcc3Dv0vlxXDKW571+bC4c99pa+0SPV1upYwGjAvf27L:HkwNAcht571+uf4Vaj+2v","tlshash":"df92c89955422c62157a633edb2b92caf37500630206a115384dbed83fbca7453f6eee","first_seen":"2023-03-14T14:29:01Z","last_seen":"2026-03-28T22:12:53.860393Z","times_seen":95,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-new-css.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-new-css.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"8eef63ba91b3e9f0b5e79eae64d68b94\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWcB7kx4a0E4xnC6qThmY%2Ff9PeB0dnDUFew9tAbIQSEgZkZqmGzHme4KtQXpgE1KJjGJLL2sM7PeaQ7cxxC7GwaJhWd5G%2BtJ647CuKYw1Cfhqb4Plw8o1nUwJi2PjJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6882b0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69882,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"dadbc97d3c0617e2cbb8add82c0f680b","sha1":"baba0a88021211f22fcb1617d56383fba37d1964","sha256":"c316311eb254253a29c702891c6e1510b227e90e59352801d2bdf17c513098fb","sha512":"9ed1aa19bc8202aa50a782a2fec8abf104076b6768a3f56ce0691eb1041665efa3fd7cfd63c4fa1665bf45dbe055c2b66fee2fcbbbf5d79fb55555b0f9f47035","ssdeep":"192:4cc8lnMjYLbuPbo5YcNIiTgapyosoW7DiOCcOhpAr02Thh01bCOgbgdKzVAE7UHT:znf8dwT0C5zv82qGs2h1IeVc0y90N+k","tlshash":"b76335da4a42082e1237e52563dd1b71df576663df120124fa98a2328fbfd5d01abf8c","first_seen":"2025-09-23T17:21:13.93982Z","last_seen":"2026-04-06T21:54:39.669122Z","times_seen":161,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-perevazka-css.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"4953ad5a8fbf630a59b8101b138c2dbc\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2B26Pl%2BBTTaAl3vS6nJWmS1f1u3pU%2FtisMMovmYlWnlLHnQ9FZH%2FBat0LmbEAfMGDxIShdHKl0TBdXOc22Qj7SMxyT5jkMrQFNSu4MS4Dz0IsLfE%2BeT6Pz%2FtvAQ8yi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6882e0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a436b5a41b6c43b4affd74e7c1432209","sha1":"663662ab1eb1479997f64dc16122bba828382f32","sha256":"4953ad5a8fbf630a59b8101b138c2dbc776832939fe6f19e46052d552bf22b01","sha512":"8c1b2868746b358d5cad28431c377aaeb2826c77813f5fdd064b22c61b2c0ee8eb55d6e42eae0d53c9c3551ae415091f9f69cf0392c70da6f2c73ead01d7760a","ssdeep":"","tlshash":"dd41b055a34a9f47273b5a3ca69c76104fab61d9ff830f2c7db4391210458ec233a9c9","first_seen":"2025-07-04T07:44:29.935695Z","last_seen":"2026-04-19T19:53:53.720051Z","times_seen":163,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/team.svg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/team.svg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"497b759dadbdb054e60e5773b8e3e9fb\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPTU55oJaAcbFD6RqEkFhIGxXNaDvB1ZKEbgr56IMVMvUSBDbKR%2FPXkFfsqha05vCGbgvzwTnSah2Qo9p5B73EDP5xftwR3Y5q6xx%2Byc8Xh3i4TBTaB1dMkH2rKlkT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a718500b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7c7156d81ed785d5baf27783fd8f1d8","sha1":"021643b5ef3b3af8dad778f247e0cbdb4c24a601","sha256":"497b759dadbdb054e60e5773b8e3e9fb0ace4b6b7f63dc82077db74f8fecb3ce","sha512":"80e4945d82045102cd2b2174bc3b72b4f1b9bd099fe327183cd9bb2f249b206143de155f3816ca8e9efd262da65fb2a4332b79f656a4bcb79d1694d96ba920c2","ssdeep":"","tlshash":"3e7165e9cb3d26bc94d89b1ec2aa2e0131a3180d75e34b5c738b95015e22f599f94cf5","first_seen":"2026-01-04T15:46:29.959104Z","last_seen":"2026-03-28T22:12:53.873568Z","times_seen":82,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ajax/libs/gsap/1.18.2/easing/EasePack.min.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/easing/EasePack.min.js HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"9d7f951efc00f4b874e6763c12b1361b\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2IUyQwoiLqy5ZwXBI4LZur3v08J0uWaY4UKuxG8d1jRoNce1REE16NQRHpq%2F1SGkcF2zdDi4WyNY2B5MnJ9wLtNmdq5Q21qkvW%2BLAheFBppb5H5DWQ6rim6xCGEpRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a718530b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"9d2271c362b9cceb4f2ab2d6db6a2f27","sha1":"11b4f8c33fd1fd7d1394cd4cb45aaf6f1a264b8a","sha256":"9d7f951efc00f4b874e6763c12b1361b8a2c86111e2fac2f9aa87f2a97ddc146","sha512":"69487bf8ac5a559f39f8a5917648bf9fc8aa0c71e320b63d360e3dfad80dbe42ecbd5ef341c86664b8ae0b7716d1f9e6a02330ff3fd1f2c4dfedc41d1863e6aa","ssdeep":"96:jfn337jspsFBicg1i5vcG1rXJ7gnrCmcy//Ay6ylByAYxOPVLrlPzQAOQ77:jEpsFPg1idcGJq7c2/X6uBPYxOPVvlPH","tlshash":"fab164893932a1994076aa64003f0107b77a55eab60c0aa9f99dcccc3e3d5d5636ef6c","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-26T07:56:09.577289Z","times_seen":381,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/02/ico_bg_image_10.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_10.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 101341\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06821ecc09227f1d795f767ac38bafc8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77P62%2BfVMxDDjn%2Bu4B%2B8XCgYByCeIjqTUbO2fa63MegI8fGcXMD%2F4AgRXtQhjb1%2BBb6Q%2FZ1laoz%2FYkBhF6shoHBhHDQLm1TGZVlYy1V8QcoBzeGoa3wGwAvExROTu7c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abc8cf0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"38f1030f349797feebb0242aeb9b4866","sha1":"6fed5f414b490e6aaa9a7741fcbf00ec582554eb","sha256":"06821ecc09227f1d795f767ac38bafc8e3f5aaf3a65828976100993eee7a3248","sha512":"9bce33fb67e3e8b2cdad7efec22f397f74362fba7255410bd55198c76a48e66d227b5a155d0017fb2d9824f6a9b06b8c9f8b2375b4e7cdbb857603350b37b732","ssdeep":"1536:NyRTqmKXoEjSN1XNoiWFbPWUvJEhGt3j+h5vXCLdGbp5U5XlFyV0C3pnNkr0wRT+:NCTDEIFkPTJE8t3j+h5fsdGdi5aLL","tlshash":"6fa3121984803d84f59d4576e27edabb2e1e7cb1d49c6b3f79c1aeb22d131c8e84141c","first_seen":"2025-09-23T17:21:13.865526Z","last_seen":"2026-04-06T21:54:39.680993Z","times_seen":153,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"cb6f2d32c49d1c2b25e9ffc9aaafa3f8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8eshEFZ52YOW6ZFZuz1AC8NU2S1cSvpSHvXN24Y2fUNNotztXHreWuTKJUXRMG9hhhiJePMGjIpADnmZvX9gj0YtD249juLhYfOCCnhk1pixPxJHtTOrPuDV76n8Dc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6d8420b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-26T18:07:53.454398Z","times_seen":745113,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-sticky.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-sticky.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"b9c08ab5c61a0f866530d88bf7b66608\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3aphtzMxgRok9JSrNeT0anAy1D5rYHxzZgLXDjjl5d4x9F%2F4xD7ASQQXH6uHeekuY%2BDWpa7DLq%2FH9sh%2Bvnhbbcu3kFOZOCp80vc9FNiwN%2BGsUzykTV%2FXonyR9r%2FOoQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a788690b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b130b246c03785e643ad6bfbac5660a7","sha1":"e0e9e64011da6c96b3a4f580b83c2100b19b77ee","sha256":"b9c08ab5c61a0f866530d88bf7b6660821a56be1b1f516462852243107b30f5a","sha512":"5286ab78afeb6d50ce5f3b07aee03cb518bda9767e1b57e70c19ee877377efb93ac2398a45ee0b90759f1daae0466dbc15f8759755ef1c58bad78574784a125e","ssdeep":"","tlshash":"02814c4b667a2162d673b77c8e6a910cf736021b208785193dfc90d92f7202552e7fbc","first_seen":"2025-07-04T07:44:29.911713Z","last_seen":"2026-04-19T19:53:53.668155Z","times_seen":163,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/functions.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/functions.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"ba8d4cc28ed1f2e9489d85f7516b41d1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4h8NKUdZ8jollbNOXjYoQ%2BP6oZM7T44fq5jgFl7Seyi6URYavBSn8fJ4Ja7HN4ZeWF073rzfTTaaPkn0AqG3urRLFSBjeeB6%2Fp6fC1g7igJjsA%2FtEGHjPUri%2FsOHI3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7886a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f1f216166c4934e1b8bb88ef8fde29fe","sha1":"1d620f5b7d5cadfdcdf9e936f8e4dd0cfd1259bc","sha256":"ba8d4cc28ed1f2e9489d85f7516b41d107009f3dfd0d37d2ca89f1504b779bc0","sha512":"a687c5cb13b1b6c0e0bc95833d35957995d9801c855064c28985f0ec910d95791691bff97b54c3133fd4dfa9f81426c12be2c90b24b90bb952b0a873469057c3","ssdeep":"192:Hd/dawE67ve+QFLaZPGvfrBPxz2LGWDI2A8fzx3cM63K7Tf:F8uvjQFLHvfdZz2LGWDIofzzL","tlshash":"5a62a494fbacb46a54773039d83e51cd663e10728b424c37fcb9912c29c15aca37ae2d","first_seen":"2025-11-30T07:03:11.310513Z","last_seen":"2026-03-28T22:12:53.832519Z","times_seen":84,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:05.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-1-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:05 GMT\r\ncontent-length: 5624\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c02de1dd4b4a4accd2e314cb2ca0d949\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MaMzahy8Hw%2BzfG%2BDxBUiIryDutKmZMjHDE2eFf9Vo%2FXI3PI90kA3yBWzRh0PJSSP7bevm6M5nNtKx9QPOXu%2Bu7NMNUBMgddqLv60J8dTs3OEdWtHPaZpUF9RqOzJXRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302b459550b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4d7fae2b69d7f2708f23ea6f60ca0cf2","sha1":"56c4dc2418ac289bf07ae1c0c6f2099d2d377fc4","sha256":"c02de1dd4b4a4accd2e314cb2ca0d94996feca82fcc6f5627ba6628359c958b1","sha512":"f0b628dee6cfc292b14719879cabc481d59e22a6abed1e1319e5c4d03f598334651b275cd022dfdb29ff58f079bad1aad4e79eeb2f79fb29f7a7906f7f039e54","ssdeep":"96:yhWFI+nPzb2DyrShOcikTUXMF90AswesSOeQ46mgvXGlsK6c:YmIUsgtcfUXq0A6snD4jdF","tlshash":"68c17e6559b6b870c482fefd83b0cbf581b64a1d1e150b2f5df998a16db2208c9133c8","first_seen":"2025-09-23T17:21:13.926126Z","last_seen":"2026-04-06T21:54:39.68363Z","times_seen":147,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.sale/","fqdn":"rvardun.sale","domain":"rvardun.sale","tld":"sale"},"ip":{"addr":"172.67.204.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:55:02.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:25:32 GMT","end":"Thu, 21 May 2026 00:25:28 GMT"},"fingerprint":{"sha1":"EE:39:32:77:F7:22:51:79:6E:CA:03:0C:76:E6:6F:19:A8:6B:5E:AE","sha256":"62:72:65:07:78:F0:A9:94:45:38:77:C6:AE:81:EE:A7:F6:68:FE:31:05:33:05:74:9B:70:E6:17:19:AA:28:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rvardun.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dOky3OQCs9vw9WuqWW1zuI12Sl8RtLE7OGjuGICEUG%2FzNPIGThhuxXjEmYot5uSeLYYavq8XW3eR8BED7ISArE1dkeidmtW6k6BfVWKe%2FTZTOTAhfqK1Ki%2FEwhiOjw%3D\"}]}\r\netag: W/\"b4e0cc85f6f052db0717150f347fef74\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e3302a2ad0d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"b684cf0bce3077167d0d31e605de2c16","sha1":"759cdf95b4c545fe25da4c8d3cd9a2e72fae117f","sha256":"b4e0cc85f6f052db0717150f347fef743af19493a19b16dc815bd782ce587ce0","sha512":"4d6fddc4458ddd3442b42a15532115d31a6cf502bd9a04d362f66147515a1aaf12c2b0a6f81dfdc99a1c828df5fd7a2cf186b7fd281828336602e89d93bb3120","ssdeep":"","tlshash":"44d012bb15c02c1a46b067b858c9f1a9a583695669882a20f5d071572ff5b15cfc3292","first_seen":"2026-03-28T00:08:37.004492Z","last_seen":"2026-03-28T01:55:33.983584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":68,"dns":43,"connect":2,"send":0,"wait":67,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/style.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/style.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"9bbc5f00a2812065135f6e4593f4bf5b\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAVnMtj8XrmDvZrXoUH%2FcuSXqD9qvSzpX9pryGR5ya3ErqIrFt7oWhWLahnO46aIDW9Yu5ZWnTjKLbVuy6Tn8EJ0E80DAgdQJALFGW0A1lQZ5AoLT42w6luS1H7NFHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a678280b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33549), with CRLF line terminators","md5":"153bed32355b0ccdb158e75fc7e8be75","sha1":"95dc8d7b3b9e6fc5069ec2b3c14d746b1c91e6e1","sha256":"9bbc5f00a2812065135f6e4593f4bf5b756a35339af4fe0031b2165fc3d1ffb3","sha512":"a6d66bc492b69e7d1a06989d1cba7fc47c8a49cbf2dd11be27e1d0d9d4dc0b43c5cf167a8b1d3ef962f7b9a689811ef5600bf97660dd467efa2f1ef1e8640250","ssdeep":"3072:Nd8rcHtmSVN5AWk/YK78eYRwfwOSqxfr9h961RR1Ro:N6Q5AW5qfwOS4","tlshash":"dd64b7a9aa0106465333df34e3d5b775ee2a21b3cb0704e9f694d5158fba94c027aecc","first_seen":"2026-02-12T22:33:01.92884Z","last_seen":"2026-03-28T22:12:53.829885Z","times_seen":129,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/animate-css/animate.min.css?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"1c3fbf3f4938451bc3b7781f832b7da8\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alfwe%2BeO6n8DNcj26YgFCT4qptfqMHG06MDAaFmFNThwuVfZKXF4%2FUqYPsE%2BFMx2UXO11elDE2YElwmcCOuM09dEwyFTzqj5UJBOAbYM9rez%2BmS5sn367TXVTgFPT5c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6f8490b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51719)","md5":"8b6dae7f49f2b5fd72f43c405d4417b9","sha1":"a10ac4645869698687a5e08cd77e3d98232ca3d0","sha256":"1c3fbf3f4938451bc3b7781f832b7da84c23eec5b979ac7541ec754e67e3b6d2","sha512":"7a49d6ffcc94fbacdab8ac8da27cd5f211122974c49eb652172674bd27c625037869831a9639eddc7d5d65b9d5d81d3c00fb4948afe45b146b3cb5b7814818fb","ssdeep":"768:/kZlIbIM6YIMIgIzwO1CA5kiDb3CyQ5xrQe/0STbsysb:/kZiIzwO1CA5kiDb3CyQ5xrQe/0ST4","tlshash":"393305af4891229991664b62c3dc5e68872dc67714621cde33817c8b8f87f9f33da607","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-04-26T18:31:22.427595Z","times_seen":3470,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/kucoin-2025-Q4-2.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/kucoin-2025-Q4-2.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-length: 9670\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"db47d35f7dbd1546f83bfbb5d79814a9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=slvMzl4XauZejjtDQLP6FruO1mPFieuQusp3vv%2FfM%2Fiqs9k4J3SNjCdsoHZ%2B98muiY92KHRtyURIpQtHGTUmEntnfehc3A6kYXAEhtXtAuPiG4peXrC3g8iiyVZB7eE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302a7585a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"9c2533073e8f452bd4d199abb0158c41","sha1":"506e9dfb938a2b093c0ecb866820d650e21d425c","sha256":"db47d35f7dbd1546f83bfbb5d79814a9b7332524e74f606a3596789eb879f2dc","sha512":"936e4caff3ffeeeaa2c14e785a953d61fa2b8d4d8b0929d080ab94414fc2ab839953f327c738b3f44082104e5321580f69a7b2d2600d9e392b412356a2d337c7","ssdeep":"192:3SsknkanQlCHJ3tPXRX5wUS0bwNlLR92DLKbJbhDIv3J+JVscXQ1WE8PgXMSkl:i/nx6Cp9pm40lLRgLKbhyQwEFPeI","tlshash":"d6129ece86e0eb4a277d7a4a49b8a3279e3716c0a483b7b528d4c9d1206d153dc0ddf7","first_seen":"2026-01-04T15:50:41.341702Z","last_seen":"2026-03-28T22:12:53.836602Z","times_seen":120,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/vc-accordion.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"7bb5b8ee58a2d2cd085abbee00c98ab5\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dgZXgCYK32nkN4CDiVNRztWjG07dk%2FjiM8LbZA72V2Tn5aI%2BXtGKcEtsr2IIOQm69y6T8BupqnEXqRFvNM7wodSHgOe0TBYUVoy5Lt8%2BRlxPqFv995tvM9myNtaM6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a838810b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17314,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"3c29cf93c3bc245080754d39a6e4d2ac","sha1":"453708fc696137e21b16ec98238da0e7d6e8aa1e","sha256":"7bb5b8ee58a2d2cd085abbee00c98ab59d7d9f32109d1b3f38f5a993a2f20fce","sha512":"ff84608389a22504a8bbd9f89c1c8058a45b0b05c9179203ab5b7c8c1d5cd652457f02671d0b69c560294b5794bd31254a4ae297bc1109b5da0b2a6b91d3833b","ssdeep":"96:nIllHzGN4FBcRW2Xj1xFb9bkeqwZ/weBsidIWrbDZNzgikvnNLwesL2TnZNbMyQz:nIl1m4IRW2XLk5fiP0ENyNRgEGQgmW","tlshash":"5c720291335c2451839fb3a7463fbe8caa3cd0b9944b60bc7874e4946ad14291bd2efd","first_seen":"2025-09-23T17:21:13.936809Z","last_seen":"2026-04-19T19:53:53.672375Z","times_seen":159,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.carouFredSel.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"3cf03a6e87ef95d866c4715da2c9845b\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uR5vF1kyANEr0jbr0Bw5VVH%2Fqc99%2F7j29QgIPYdorhn8tDwLgpQGQzeSvzMZMu1fDQhg6QaeYvnDwnPW7oc%2Bx0A5fXP9n%2FaUiYSx6Uvmm1L3K5LwZU3baOjG8%2FlWrJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8788f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54800,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32032), with CRLF line terminators","md5":"261216c12320526fa5e2d917f37f9878","sha1":"d822bf383ff9483295eba1fd4c87a108fd67ad74","sha256":"3cf03a6e87ef95d866c4715da2c9845b52c3569d7a1ac20935027fc017a430ac","sha512":"92a60ef0ac608895c77833e569c5985b50253a5dd19ab74b7c686edec9478595283fbf4e56c3f0d81eec5b1527a7fd472392ac6946a171063662578b33b26380","ssdeep":"1536:3YQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCv:z7DY9bfDjv9Hpyn8CxcMM4ODpB","tlshash":"9733d99d3044b69256ab326f967f880f7b30a093e70f6990b055d7f42970d5a033bead","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-26T14:41:42.972751Z","times_seen":424,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/2024/05/cropped-favicon-Kuardin92xKuardin92.png","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:04.472Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-Kuardin92xKuardin92.png HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T18:08:27.053067Z","times_seen":14239727,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:05.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/4-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:05 GMT\r\ncontent-length: 4330\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f0e1503933eefca5525489e23b5e0aa6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8ezT5RMvZjWWl1lvxFRseMamsFyzQQ6qYmQLmhtOr1zpV0o4PdYQWYZTmejebHE6WYaOleDq3z6KRPlvi0EkPYzBWrsj4q2ZZqoN3pZDkmOP4ZpT8eubwNC4HLey8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302b4795b0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"71f5c1c49263d5057bb25f58466fd988","sha1":"e4c41617bed780a190cf1ddbef03327ea9e943bc","sha256":"f0e1503933eefca5525489e23b5e0aa6ba9b381987dcbe50fc2d0da6267ecfbe","sha512":"d4d18b9cd5839abdba8dd83a773a2eb1eb5b8810179b85ebc885a5ac3d8f29e6aa5a2960ee529b06cd4aa895a0532baa5cf9a71d99b78425f52a02c64796477e","ssdeep":"96:y15qh/dTsZh2RDpyz5D9P37IY3OTzItfcNC23LytdeW6:25qvsZQolLbOTMpcNC2b0dE","tlshash":"82914c2eabd48e25d9e92e31dce9f64aca5715f1078993b68dd3070f4d0a20f54c2283","first_seen":"2025-09-23T17:21:13.896993Z","last_seen":"2026-04-06T21:54:39.717133Z","times_seen":147,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T01:55:02.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zthNkhVu7EWyW%2FLCyrR34vOkdn17UNbeu91u%2FZvKtB92UPi9I3tCCWtyDPdfQg%2F57P6FQ6kGR9w3HCFpjnNlIUdhCtySOUMNCDs79I%2BpnSXw3rccIXjSrzQFf834nhY%3D\"}]}\r\netag: W/\"32f20ac0523ff05b0226efd7b0fda2ff\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e3302a51e671ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:26.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Slider Revolution:6.3.6","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Raphael","description":"Raphael is a cross-browser JavaScript library that draws Vector graphics for websites.","website":"https://dmitrybaranovskiy.github.io/raphael/","common_platform_enumeration":"","icon":"Raphael.png","categories":["JavaScript graphics"]}],"data":{"size":171830,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9067)","md5":"5d2fb70fd82cc7ad0d1931614163a282","sha1":"0766bf3517c2588f3723f56d4b66e1524e82a3aa","sha256":"606af2026988e5a82a9fb5016c31cca76724a5de9ece32ccb250ea66adf2239e","sha512":"2e96930300d651f37d8e3fb06658d6fc60a7ee7e7045fd9e1716fb6b8b212cb9df51eb0333b6c7f0f2ce1d3e0de42d23018c4900bdf014bc7c7f87ea04a39aa9","ssdeep":"3072:wy2teChSJgyGX/ZvYfV0Ml3Ml0MlP1wXeBClMlrMl8MlkMlUMljMlrMlUMljMlQ2:wR1WV0Ml3Ml0MltwXPMlrMl8MlkMlUMW","tlshash":"10f3d732a859183b126716f4e035671eb2a7c317cb0789d8b3fcd2a89fc5de8592758c","first_seen":"2026-02-12T23:56:19.883452Z","last_seen":"2026-03-28T01:55:33.98904Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":44,"dns":28,"connect":1,"send":0,"wait":23,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.6 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"a4aca4b3ad7c3976cfbd935294d071c1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnlBDCxHCQ3RrcerCvqkVsTv33ZbOiaoJGnPVGz4Lxe%2B3ECzzfHYVZb%2BuLtS8x6B2z6zsnnqljfkDzSe%2Ft1eOgL0REUQk847crmgHsVtp8a1Rnz0rjIaUQrtf4f6vUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6e8440b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124185,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42889)","md5":"e5cd17674ab1e7e8f556707b9e894175","sha1":"c1b2a4a4f6fde101fc5bb4918c75fe8c2b163eb8","sha256":"a4aca4b3ad7c3976cfbd935294d071c1e276081e7a8ddeaf030ab5b5e280204d","sha512":"7da897d1b48763afd7e941c5a2ff10b58e0edbd511fcd2cc1ff9369fdd5ab03666ac3173f3973b4306c8c24c39c7e9acde15217fab961f122e091cfe9c59309d","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0KK:a66U+9UWRW7CK8s+muaydMr/IMlK","tlshash":"04c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-26T15:37:30.658473Z","times_seen":1054,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-header.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-header.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"93b43a812409aafada24dd8efc44e94a\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJ3f5LqnSbI%2Brdih7HrzS6QNomfwmyJVHtoyxHvyGA2wTeoCxPDjL4fnXSFpjT1siIgGvFUx2Kgmq2HDWjFAsrTFLg8gM7UMDDGN7JJD398%2BhF1DXaEuEVvHPzsM2es%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a758600b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"7ef00cd2d9c2f86846104284cf9bd9e9","sha1":"b18724c7e0974cd565f22587e8bb4c7ab2f08c01","sha256":"93b43a812409aafada24dd8efc44e94a2e0b479f44b9c70a922aee7fcd8c31eb","sha512":"2d05b2e9e68af110d213103ed150b07dc5e14455c0430cb5d4e130264dc7ba6b7c928b5d1051d97f6712af8b56603b5f925e185f8773d6d77fbe8d3a30ba8680","ssdeep":"384:DrqH5dirmD9jHz4UdE13wG/ZtxxESJICiWreVOvz3l:Gv9jHz4UdE1P/fxxESJIb0eVOvz3l","tlshash":"8f9293c4b38d756bc6d733a8803f9988e63cd035905540bd75ada0e668788bc9372d3c","first_seen":"2025-09-23T17:21:13.892888Z","last_seen":"2026-04-06T21:54:39.698975Z","times_seen":161,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect-drop.min.js?ver=1.13.3 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"998c907ff28ab2440868816edf736766\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRkO51dpnwlO%2Fu8ItQYo%2FyHEaXTsMBmJhnJmcg97Q3D4hdGviHSNS3ajOlcAsSDy5gXa5i9fSg%2FDKAEJD3a%2Flu%2FWqet%2B2pRqRgUHPiFbogr1%2B5o3DtOQac6OVoyxKrc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a778660b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"6a5de31476265a9359d9caf2d0888679","sha1":"c2a28d252aea9643e66c75cbf6d040a81a909f4f","sha256":"998c907ff28ab2440868816edf736766e878d222302f22f26f7e486d6c82e9e4","sha512":"6fe2dae30e4d7b3afda3d044be9aa6aa13f5bffc6d6eca9f9104b4c6236d775990d3fad655a7a2ff3ad28d8ae494e8659768e7f9eee2c0ca52c2fd1d2e8f1f84","ssdeep":"","tlshash":"ff01d0dd61893e4e02ea1bb3c01fde5a912a462f354a044eec51c8fdae6b95c4262c94","first_seen":"2024-07-20T11:44:11Z","last_seen":"2026-04-26T16:56:34.767146Z","times_seen":2797,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/ico_bg_image_21.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/ico_bg_image_21.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 73867\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e8c9be9e4900e6c017e17a426d7787d2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WygiF7nPHFn5fbEVEP2c2Ho5zjtk79bXZdl6aBmxwKsM8hMwJ6fnN8UYC0chxE3Rv5W7Uwp%2F9cF9KmWWE3N6qWHq2AGn8g8ASn801n6IeH2ieH0wShjIMSgVvXEH8M4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302ab28bf0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x942, components 3","md5":"458a0e14f470dadab5c34323e17c17cf","sha1":"2ebf6135d3b2557b40068fe7679b7a63a8ea0786","sha256":"e8c9be9e4900e6c017e17a426d7787d276594de17c45703d745a4848f740d05a","sha512":"ee4459dcf0366cba28f94e422df00576ffada051ab05b547387cd6127e90afa7fd86cc3d0f2f943c7e226512d96a7bd83d73658f77dbddb475dbb829a9c3c81a","ssdeep":"1536:NR6ylmQrNMaXX7z6/2je6bRyOOGOJKYfJSb9OkB8vZkv6D2duL9epfyE2vEjqijm:n6HmDy/2jeK3OGEE7qv26DzL9epfyFvh","tlshash":"0a7302cbb70d0daef9e49038ae4c1b4555bfacd245c0061d3c05d0adbe19397b96d1e9","first_seen":"2025-09-23T17:21:13.917053Z","last_seen":"2026-04-06T21:54:39.700298Z","times_seen":157,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-reset.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-reset.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"be4f6284aa304b9becf68fc6c817f938\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18H0Bx9khovIUsSurgCj3t220tjQXSGqGfHnt16bWakEjbHcr%2FzQyHLQTK126FcnNtoCPEMJez46Yh88Cly4b7S0%2BOQNcfM09tH4lm6aN6c%2B%2F6zoEoILCHtZe7BBqJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a658240b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b3c589bc9c1635c3a6679dd054a4682","sha1":"6ad887b2f4dd83c695bc661ff1eded4131d3f632","sha256":"be4f6284aa304b9becf68fc6c817f9384ce831d9d14f708a1211c4e59c3056d7","sha512":"f7e4cf88a10192ded4d9289440acf82a17a2962b0370bc1fe6c33dce258a91d67258a06a149a2d641480e082a446b7845498c5b70147e4b5a1781ef168f258d3","ssdeep":"96:GTBNWefkzbdR+tIMfW/5cG1JqBdDEcPTDEXLgEH7:GTvW1d/MfkDuDVDkgEb","tlshash":"ee8101fd660012cc93229f58b7f2af645e1001718e1f817ef890adad92c69152af2776","first_seen":"2025-07-04T07:44:29.918936Z","last_seen":"2026-04-19T19:53:53.761211Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-fullwidth-loader.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"dc00316a4d0556b0452bd5d1e9f85214\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVFbfm7G4b4zkOVrDWLvq49e7ZmfXp9lyU0yYZ3iH0fVa74jW%2FFr4wriIN1PhGgO2qr67c0G%2FdzWOrKAfQdEqA8%2FZF4V9gSs%2BzsG2yu1l%2FCZa5cveLxdu7UGs%2BqxgEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6d83e0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dc962d39be85ef44b21982b97e7a64a0","sha1":"498ca29df0bce0700107917533136934ddff4258","sha256":"dc00316a4d0556b0452bd5d1e9f85214a95857434cb138cb3c7e11637daa6e8a","sha512":"d1df30f865702a0f4f3ef8b81050818eee217b102a518b0efe1213b3b5c8f30a804c9b4aae0afe92a4aeedfd158124c3cc99f334b54b55ba27dd64f4bd87e63d","ssdeep":"96:S/eWn5xeReoJ9eFet8D+ifgRRX5PyA07xkdik8LM:inrIt8D+kgdnv8o","tlshash":"37a1671d357000ba557ba33ad57b458ffb7510271306c4a0b8ac9c992fb1da236e6fd8","first_seen":"2025-07-04T07:44:29.949614Z","last_seen":"2026-04-19T19:53:53.743824Z","times_seen":146,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-form-elements.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"7efc548a27e354ca6f68c23b2955532b\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0e%2BC64mSAxDPDrxYDrMzaJZdym3uE3xSKnGDJuPnHMW98mnBVFwM8VN%2FiBYLVNKUGHjR8HpgwJ2xG0xWyO3wAMapA770KNMqqu5Qinpn3TPLCnHdxkO0JV2cMdJ%2B%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7585d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1a3695e2da5368c85db981a9b74fe28","sha1":"0655da7015f75e5f525fb7e063a2e39153b7a387","sha256":"7efc548a27e354ca6f68c23b2955532b9f78d1db0246f12077664d89cfab9e97","sha512":"5d1a264ef5c1b76e10791af06ed135d0041878beb80f49f994a1db3ed2b94391678b18f952a3dabe16d03d2bca5b673aa9a0563f1c9d93abdbc1f0a0667870b3","ssdeep":"","tlshash":"aa317aac767d28ba40ea33b6847d9984d53dc176c20295bbe4fb54900ce6449235396f","first_seen":"2025-07-04T07:44:29.915712Z","last_seen":"2026-04-19T19:53:53.757615Z","times_seen":163,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.transform.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.transform.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"4e529704bacba1a50034a78bbe2ae83d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRGQp6SMnDYGywzFUOl5pAF6E5zzIxX12XhuwQ%2BZ5joRuX%2F%2BWr4he97sPYvoZ3aMzXCd1HDbPRHBXnp2RqHadS8spyagvfDsbCvXcyAzL1PiSkhim3VJiWIMAuoNyYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a768630b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8bf005dc2176ade3111d3c0580d01c6d","sha1":"33215d357d55d6c0aeae9bcf4a1cc88d42083020","sha256":"4e529704bacba1a50034a78bbe2ae83dcb4361d2a56ade0726d060a8f480bb20","sha512":"cfc1b22871907dfecd06327be4de1584b417579e3cce001407fb7728f3bb4dde296d593e7ee1527a222e048eaed4d973200f99801aaf919c13469f4c0aa0ee45","ssdeep":"192:3qEDSXlzxt9sx2lQtT5e4MOPIA0ALGwlLj7BtW7V5NVh5PpTHKr+1rm31e00Y6NL:3J2Vzz9sx2lb4MOgA0j937","tlshash":"2a627358772f000dcb522352e5ff0f49ed7cc1386532899eb61a805a54a585ac2f9fbf","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.671833Z","times_seen":295,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc-tta-autoplay/vc-tta-autoplay.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"6c176a55f46c95137c6700b0777db499\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2u9%2Bax4%2B7MnPkjOG%2BDVHrd9KYr26mm8HHk6dr4pUMI%2FDKHFhiT36ullYt01XfpNKn0gbXKgbR6c64AWsChAAlptciVC%2F0S0RM3fHZtdzw6H4HBjuwu%2F42DHdhVUg8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a838820b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2545,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2326)","md5":"ec326b42443a0157a582537ef34df2f5","sha1":"ab66c9ec3093da4e360b62e13074caef8ca787d9","sha256":"6c176a55f46c95137c6700b0777db49956705fe356f8ed5ffcb8b450f6d96b57","sha512":"86f59f4b483698b197a53b49a5157e10fc0bfdea56c4be44d2635f87ff7a9accac0bb5bbfc58b70ec7860343ec2cdd45bca3989b4d608f9af5e14b86a08b35fb","ssdeep":"","tlshash":"d051bc0f7410704a0adb2192d2bb1a8d633bffb81409519c31bc99e5ad7ec1e7613bb9","first_seen":"2023-03-07T12:10:54Z","last_seen":"2026-04-25T23:12:40.154424Z","times_seen":490,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"d4efe709c65438ae90dff385486421fe\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwdQ%2Fj1hMnEORD2biJacb0u%2F7OboWZ0OPlP1zpG72Z8pMVreeBnQq72oCKhHPW%2BkTOOFWcZXfq3DIMDTwm%2F6Nv5SpU9Lpllc0cV6%2FYy45t7jZtr1BknJe9eIJc9dIc0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7b8740b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-26T18:07:53.429304Z","times_seen":134203,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:05.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/5-1-ct-person-1-ct-person.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:05 GMT\r\ncontent-length: 5610\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"301d85824116849476525dd5cbc65f50\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l90D4whUq2Dg0duY3n9cX5UxzSELYqUJ2AemXFtrEGkogmCG5jbPTV1kIYzpjTz43BD7hq8lhemTHHIDj22rXNCRsgXnfW5Tspx6e2PlQbZidvZH%2BCWzzH8HzI1iWT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302b469580b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"806dae03f08c0109becd3e4d272d14bb","sha1":"d01c9ea5e69468aaa288b2d88b37aca4947e9575","sha256":"301d85824116849476525dd5cbc65f5069482fd57eaec3d14be4a654d9060c9b","sha512":"7957bcb5e8baa414f3f1f84e8a882576af991a27c3b0f125a7f87b355a3c9e4bd530a39aeb162975fdf6eadc525d3d96e2d56e665d3291c3df6864b041c0f1c4","ssdeep":"96:yZxvH/92/zTeCkk+UeJJ+lR/0U6pNk4+KOm4v77y9bAuA2wEcMWVl:sg/zMXgRsjN+u4v77y97fK","tlshash":"6fc17d57eafd280aecc5a0b40b92ed2869d60c2329574c38f36fb021f8118b33750237","first_seen":"2025-09-23T17:21:13.976894Z","last_seen":"2026-04-06T21:54:39.738304Z","times_seen":147,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-settings-init.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"543c4d50d21606290baf64841ad9c672\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnykRo2f7a3mXfqyui6g1yfxgn5MBEdh2vVBoUu076oO%2FG1RjxUHYw4TIgNS9pZ16BanVDniZyiHN%2Ff4VNwNzNwUkQf5b4sdK8A1aaKJEQfpYdbuvYY4%2F6lZqKc1Thg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6d83f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2214,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7124eef2105e189c466ea7fe9d5d19ce","sha1":"a945b8d14dc5ee31a2c80df4e36e9ba72381ca6c","sha256":"543c4d50d21606290baf64841ad9c672a045fce6b8112d5b26736792b13b22fd","sha512":"1164dbdcf82670840e5673b2c5e4a55d8d93aa9011f8ab2a49a1076ca6c5c7771ec2d397ddafe11a8b1f7bce3cb43f2184185136e007c820d895bda54f8be6c3","ssdeep":"","tlshash":"464139194120723111773325be6bd31afb33993315472a12ba6d864c3fb2443a796fad","first_seen":"2025-07-04T07:44:29.91364Z","last_seen":"2026-04-19T19:53:53.714366Z","times_seen":163,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-hovers.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-hovers.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"942d403c2442a35bd98c7a6779225cf5\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfDI%2FnPzbgF3INPQRKIIapLui8FY56SnDMKYbPwt5LJ4viBKq2DPuXeqPv7r90SPPQP%2BUcJ1hBglnfsHhMC7C5U3yJaseNi%2BJ8k%2BM028%2BONrdxm91CPzlf4k7wl3PUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6a8340b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9b48e06470f8617170ed7681312868af","sha1":"68d3b3cbab72dadc5ec1df59560fa3b2c7687f5e","sha256":"942d403c2442a35bd98c7a6779225cf5140f85cd2d07a6a3929956cd96a4cd73","sha512":"2f609a1881033c33394c83bf684b30360411b646f0f2e72f7e4d78227905ea1674c362cd70570ebcb541cbaa7d3e9c9fdcf470bbcf909495d0f06ae7d68a7d44","ssdeep":"1536:/dNd3d+dNdodqdcdpdHdgd5bdLdOdedudwd3d6d5dId7:M","tlshash":"7773ed3e1704254493ab4a04b3fe9738af2ea171fed615ef755a5a4f8333b1421237a2","first_seen":"2025-09-23T17:21:13.891107Z","last_seen":"2026-04-06T21:54:39.728788Z","times_seen":94,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer_tta.min.css?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"dac931a95dbb1bd18a6440cae735af9d\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGDIgqUx0M2nFf%2FaCZo8m34Eqg7mTcx9Lu%2F25F4eqepGBY39v%2FF2AFJyrhe9w06b8rghNc1BdE3OqmxTY4IaX0K7Cl4QH%2FHG5zVnmnqwAss1H9LDLBw9kxRWvkBsqDA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6f8480b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"7ce23df41f0df13d8aa07058990195e6","sha1":"c01b09e729d3e094c91a9baa9a6e4a3c2df4f8dc","sha256":"dac931a95dbb1bd18a6440cae735af9d8c52b383d426379c3bd9520ce375421d","sha512":"a400560f1b2a3aa1064d70f64a26edef459950a3059682d9ab412ef81653f5ba649515ff34d234b1f57c87b95c77d23902b4f54105fbda91082ec14998714905","ssdeep":"768:bxzNdWjDhTsG3iD4Wjt3hk2wnKicP1PVW48Ycs+lx5PVGm7IsgpspzdlICjqC4B9:bUHuUiusij8","tlshash":"d5441360b9400697a61f6c7c3594f739280776b2d24e9fdf7062ea60d6882cf752e31e","first_seen":"2023-04-11T00:56:32Z","last_seen":"2026-04-25T23:12:40.143233Z","times_seen":500,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_tabs/vc-tabs.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"df34f3aef92fa54088e14b001bfe002d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dlxFluQfg4p3GYB7wP9sL6IGwUsUZhF6%2FszjP%2BbtToOxT73RW9%2BVFdkIrJH4gtyBQmIvIr2l7cL%2BcPpZGs%2BZWoA%2Bv%2BNwOnlKImC9ycv42R9YwAUOOS3WEPpgUj0TNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a838830b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4192,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3973)","md5":"2f470a58760eed9ec50dd7e6992198d3","sha1":"84bd23fc02189aec468209610e80a6c2a593723e","sha256":"df34f3aef92fa54088e14b001bfe002d36ff6d765b24cbd9f47e2208e103625e","sha512":"e7675d597056d853027e43328f4443010284fbd0ae72b3faf0e7521981fc0b483e4d21e65cb701dba18a9b4e66c3322aa1f6b6c2d8e57a481d8eca135079109c","ssdeep":"48:f2O3fh38YGfZ1NpuWouwcteWZyxwpYw4enmkFfDkH6s2/wPL9geCkxph:u6XWoJcteWZyGpH4mmkPoPL9gYxv","tlshash":"f68112c7b35430a0535ba1db912b4b1ea22a35be400a105cf875d4e67f799062aa2b7e","first_seen":"2023-03-08T00:15:09Z","last_seen":"2026-04-25T23:12:40.143767Z","times_seen":194,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_waypoints/vc-waypoints.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"357ad057de8ffc0fc9df301dd1873c3d\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5wdK5ycOOCMPPa%2Bszlh%2BDtnqSZr%2F9ZyHloCsOF77hatBz%2FQd7wNsNeHT99WEF2QjAZ8VbEECHubBW00tifO9LahEZVBq1WEqcAPxqSvxkFNN%2Bwwbke%2FTm5jP4doIWA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a848840b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8853)","md5":"5ff487a413612cbbf6bc391c10ff7bac","sha1":"acbbd8a96ecad33158f29e45afcd41e4b2dd6579","sha256":"357ad057de8ffc0fc9df301dd1873c3d482e926791195ee262da3886269f84d8","sha512":"9af6cf849fcfe777ee1daa2e5ccd79dc1b11013470db78b4c165a81573ccab4f6f1757082cf0fe643c95afdd42283ee0ee89522923a0e1c1303f5c07a8f3ccad","ssdeep":"192:tE/kIozT9DjFA6hj8jAanJVvfikr5IuFQYzpN0c7yPYRXFARk6kJrrAlr:tEMZzT9DjFAC8EanJVv5IuFQYn0IuYRu","tlshash":"1c1251897a0574220bdf80fadd2f834aa337582c640640bdb0d4d4ed19f1529637bfb9","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-04-26T17:05:34.049257Z","times_seen":6570,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.pack.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"3e366186c798c4ea66b36b7c19da53ef\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goH87wUzKtlnfcmPh0gMJlnd6m3FOs4KTIQI9BDdl3aHQZfArtGAkwnc9njZctj45BZTVmhdoUk7aWPoZNiuk15tdQGtc7nYLOKyqfnlGqwYJjllbkqVafR67dSrgQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7986d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (623), with CRLF line terminators","md5":"040bf1868af574af7fc2bae859610dab","sha1":"0d9ea5c972d2654ca096abcbba05fdaafde5c0f5","sha256":"3e366186c798c4ea66b36b7c19da53efddb835fe41a045bf659631fefb12b535","sha512":"d88ce877b6fd32d2e74e0d4e8e52fe970212606fc43c773887e0a3d84f1b489191f675e85ec99cbfe064e40d57e137d1cb675f35f0fe4c39404821d17844c89c","ssdeep":"384:dNNT29YgJNPymD2mKshcPGa1MIciM/AxQNX+ODW5LJN:dN8q+NPyWzhcua1MIcimAOiN","tlshash":"6aa219a1b2607d57c07b2622514f510ea0320523fb078dfa747deae45aa5bc822b7fdd","first_seen":"2023-03-07T22:59:57Z","last_seen":"2026-04-26T06:11:43.478396Z","times_seen":371,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/bower/chartjs/Chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"b24666135c9845314e4dfb7cc1a7d7a3\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfU8Rfc6uwATFGF8LQD%2BWwlybJ49aO1MuOAaJ3TyGu%2BUmk2%2FarSummKSoxnd8X4Qj4f94qL40torjJjAYNTou37maxv8oidV0F4IclSI94cPzijSpVdyuA96TEegO%2Fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8688b0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"a5408d409564a6760732e4e109be2d14","sha1":"d3aec6649da5c307fe7e9ac984144a25262e3894","sha256":"b24666135c9845314e4dfb7cc1a7d7a350082eb9c8e24fcb5a305ae8230d28fe","sha512":"bc1e6ba15e7ab6e7a540f2acd6d9097d06e9093a8a792b8b079fad1f0686a394ab64e030c929fa7aa1d72bc3a5dae705688a38b2af8e062e6a9e68b19c808be6","ssdeep":"1536:cj8SDd8Z8Wa02mUUPxyU6WVsCRx0hX97Y9e/nkt0wgsmbaHRTMWLNMjD45cCQL:UqmotQSE","tlshash":"f873ea4cf306626a85ab1395340f178d913732602587a92c74bca5e2a5acc1e36fff7d","first_seen":"2025-07-09T19:54:12.258708Z","last_seen":"2026-04-06T21:54:39.699612Z","times_seen":156,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/clients-grid-carousel.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"57b94d2a4d25cb3de3634362e4d9a9b8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WM5V%2F1i5uByFuFSRKawNcViZ%2FU7mI2fpnShU%2FHdDy7C1jGR3SYiZ%2FnGGZ4phgEF1IW26shBheR37%2BO08YvE%2FbyTX18N1Mme2kNGIe38HrcTN%2F4bU3stHDfkCkxKVcgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a878900b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3902,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f2fdff594e5d4fdd3c5ac893b1c40a47","sha1":"d457c76d73132f56adb6819a0f9705fd7e1df1b1","sha256":"57b94d2a4d25cb3de3634362e4d9a9b8525caaf2ddff5107645070310d3b2d67","sha512":"57ce67522f25483e0fdbd84575ba62704e9deb074d8ec61dc6f6ef94f8640540528f008b3179d7604b1bcacd949319f075821ae71818984d6791a42a956fa785","ssdeep":"","tlshash":"468155a1b2af79b89ca72319c13edd4bb63da826900bb424a4f3445c0fa1f59179dc5c","first_seen":"2025-09-23T17:21:13.889031Z","last_seen":"2026-04-06T21:54:39.666435Z","times_seen":158,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/zilla-likes/scripts/zilla-likes.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"34bf1c5d8c775f2578a2f3c3401969f6\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1h6j1Z6nKS7Ep69cgMygNFtmbMGndNFg2q6oJOQ3XK37Uc7RAsxqiShaKbyhegBWttrmTcPCLhnLfv8qBssqeduL0tYabbU%2BcsYNzxb76fd%2FoIzzuXaU3QFYLfdt2WA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6f8470b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":860,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dad8b8c214b2f2e2b4db0f0772a33b80","sha1":"b62a6d21e76f157735ba73dcda2a562dde3ff8b2","sha256":"34bf1c5d8c775f2578a2f3c3401969f62381261aecbe50233d7ee2167cd453e5","sha512":"b708db25b565f9c79aa9de057b1a17ae49e8ba625007d40e99d45568d12d0903a2b6dbb44f8d8914033d949046c34eaf5ce311f3de208539d6401fc4fdce4291","ssdeep":"","tlshash":"3311891ef9f275a10833307e4ebf4a017ab911135024dd88b9ed89805f8592c6476eb6","first_seen":"2023-03-07T12:59:23Z","last_seen":"2026-04-26T13:09:58.782385Z","times_seen":495,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/raphael.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/raphael.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"c717bdad5e5ddfd453c9872d1efd5095\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ralCjp1QSg1sdrtwOfRuKFI1J0kyMdiODOnEu3Ns7vxfeVB26FOTTSyj8EjSqvUGBNkw%2F%2FTVTBY91k3tbK9oK0hjwVkK9gV434uVzzl77k7cY7TY%2Fo4MfKt%2Fq4bhM%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a848860b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60293,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60079), with CRLF line terminators","md5":"32e8807da0ad8402be1be8bec9c5acee","sha1":"e9d46ef5cea4b8c425360593409bf82a66d61fdf","sha256":"c717bdad5e5ddfd453c9872d1efd50954f553e0d4cc5555fc477f728da6a3b5f","sha512":"42fd11a0d902098ad1cd05ea62389ac954ba87dd4cf80918911b93a2987c714aab3c2c8a1e43dd6b679f82f7a8564714b649b7d98e1cd1016c1a99d8037d21e8","ssdeep":"1536:dQYvQregCAWnAwA6/ebeO5XcK0/UEe3vdF+ZoQmCQqMik3qT:dQYs+O55D+Zou","tlshash":"76434bd933c530a783a5b6e1647f1607b02ad898b64d8c5eb108c1c6adb88d5217bffd","first_seen":"2025-05-18T21:06:06.138845Z","last_seen":"2026-04-18T02:31:12.268921Z","times_seen":177,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.10.8 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"58aaf7420e6e102792fc1495be678829\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TxieIC4Iwdm31I4Ep2QuoF6P1pQm%2B8BVb%2FM%2FYmaGmfoX10weBoU7Ohz68NbPQIzQbek7WYXzc3Pv4qOXd2j%2BH7cPJPCnOXwOxymCqq5sRWAu3CfLAiLfcCQ8063740%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a888940b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6555), with no line terminators","md5":"0d7f6b4930df680c368db0d604444b39","sha1":"41239565cd5c38258512b07994ed4519b377f3b2","sha256":"58aaf7420e6e102792fc1495be6788297845f3faa42dc59ed27d9bb0944e5fca","sha512":"7b4caee7407b6edf25a24e66ab0eac1398a4c39a937a2d3f92c1ddfc0bdc5f432626069b6f11306f83612399571c16df33ee04b5fbbaf9bb5ca2ae2b64bc4266","ssdeep":"192:urKG4shSuvZL3+ya3vBrPh/9Ckh/xEkmcXV0Ruk8Ie+j2:urj4shSEZL3+ya35rPh/9Ck1xEfIWukC","tlshash":"20d1e86c3695747743fb81e315bf5250a1322789790a8a84fa28d8e328bcd5347c7fb8","first_seen":"2025-06-25T18:35:12.413482Z","last_seen":"2026-04-26T18:06:50.492571Z","times_seen":5018,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"545dba3956c64fe4c4d9180ce27a6bd1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FzFPO7WpuvEmXSEbcA%2Bw%2BHNu9%2Fu3lCte%2BgE4M7BP4A7NEcPsamjU2x4jJx79LGEMJMbAvH12WQj%2F5XdHfJ3FOXw2sc%2F6vywRWR%2FEAYD6zMj7VMGuN1ic%2BoWbb06hQc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8187b0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7210,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7210), with no line terminators","md5":"9b87f794937c2ae5df31e5e511fe318e","sha1":"01a6d9cbe423a8d3bb2885ce81d72d287ca79e88","sha256":"545dba3956c64fe4c4d9180ce27a6bd1d99c590d2542c20458d75f9480f2d1f3","sha512":"5e20138e4664b884cbae8ffda7715c7a244b9fb5ed4273aea1580f30c44f0f75fb2872bd645086763eb2b51ed8bda8634cf5cf310479eefe5e6a161a6b5db8cc","ssdeep":"192:Kf9RlITvkEHsWRTRpHXHVrO9X/JXPr45VdLyB0I0cFz1OSmJ1nL4J+W5l9l3uX:Kf9LIlTRNXHVrO9vJXPr453LyB0YsSm1","tlshash":"43e195f32e2c2870daa3c06f38a918d44d3513d2e3601294faeedb2b34e574f561a755","first_seen":"2025-11-13T05:54:05.473487Z","last_seen":"2026-04-23T14:41:56.926401Z","times_seen":495,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/presto-player/dist/components/web-components/p-BxRAfMA5.js HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/wp-content/plugins/presto-player/dist/components/web-components/web-components.esm.js?ver=1765352451\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"01101fecbb128dc360358c28e75e5ea4\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY3jUBdLSGA0gqUs%2FUpZALsrqKhJ5mOszLppDPxdYUjn9avD9MCKb%2BfBQtyyYwb7EJ3X2Udk0OVHuyMdBOL%2B32Be2c0ku6NswsFBRyEj1s3cT39W6XYuXaIDYBa70lg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302ab18be0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21879,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21879), with no line terminators","md5":"c027b3130557bf0fd5f9a4e1c62ffb30","sha1":"0b14479bfa821ff397b2d81193c3bce537c270b6","sha256":"01101fecbb128dc360358c28e75e5ea478df4dbc54ca05b7cc08b740c2d2dd11","sha512":"48118d616880378f2ef5ec5ff34e738e0ea293bb10df1f398aaf7e97e87d69f94f02fe9fb1b0711e6ab4e2bdbf53073b9ed76883b16d40a90ea8f65ff6842443","ssdeep":"384:8aRZEdAYTvbA1yFIWkphtJCLuKda/4YZE+TYZ21lGgR1C9OkRa7Ph4IIRGy8iD++:8aRZEdpT8AFfkpPULtda/4YC+TYKGgRq","tlshash":"a7a23cba2950e2742af54aed44765062f360362d304ec4f0b24e8ebb147a69b91f7d3d","first_seen":"2025-09-11T14:53:19.592051Z","last_seen":"2026-04-26T16:54:37.509171Z","times_seen":1062,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/ico_bg_image_14.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_14.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 20399\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"50323967d41b7789c88c0322c8636bc7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6wCp0I9fSaOQ5S11K93hYXpI3eIcu1eVVwDuR%2Fy7ZUhOLTqGyHBgNxx8IXZ7uzqIHrxnyVOG33CIjyaDFMJZTZW4TxylS1lG1QzoAp%2FuvAyySB4%2FSXA2YYva3A%2Ft44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302ab28c00b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x577, components 3","md5":"4ebb60c90b921e74f1ccc5cf12f8fa0e","sha1":"0ee975023d22ca00478be58824bec08e6caafe71","sha256":"50323967d41b7789c88c0322c8636bc7106294b15f0df21f31b22f9ea8832db3","sha512":"ede18a7b347596aca735e06be50894db65391196d61a0aaf809eb9e52d061c46f9763425867e6ea53957e1549ae9443b9c5712e1e55d49103d725a2173fd27af","ssdeep":"384:2Zkv8K4B85oTDhVvf/sHborXK81QpvntlDpcAxvF3sQl4NeKRw:2Zkv8xB8GJVn/sboDK81w1tXxN3sI4Ns","tlshash":"57926c120715871bd88da3b22c874260be659d4df525400bf2a720b5af9d3fefc2d1d6","first_seen":"2025-09-23T17:21:13.950169Z","last_seen":"2026-04-06T21:54:39.700945Z","times_seen":157,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=bitcoin,ethereum,binancecoin,ripple,solana,dogecoin,tether,usd-coin\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rvardun.live/\r\nOrigin: https://rvardun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"d1edfdd2a5a808204804de41fc40e15c\"\r\nx-request-id: 35db1914-6e62-400d-9dbc-bb3031ac79b8\r\nx-runtime: 0.006560\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e3302ad587c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05f3f240f2a8691fc5175cd7291053dd","sha1":"db2f5a3db78a8762bc2dc676f4dc60202651abc6","sha256":"38c4706e34dbbf1dc3510f9be54ca9b72a647e2a09d4eb1d6754861b350ae454","sha512":"1d3cc3b8dd90b8640dec5498736e3619f0b24f7b3d1e438173166168e8622bb7fea6480ecc663c5506636f64ec71c2212435b5fdf0bba3b5bd4853738da23d6c","ssdeep":"","tlshash":"47d01284a070097b191a0cb5881277b0e99b8674584c031f96dce5921cad3ff52814e8","first_seen":"2026-03-28T01:55:34.004849Z","last_seen":"2026-03-28T01:55:34.004849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":38,"dns":3,"connect":1,"send":0,"wait":145,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:05.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/3-2-ct-person-2-ct-person.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:05 GMT\r\ncontent-length: 7534\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f59e579de32ba2c8469073d12ac77c54\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNXJDvGHN%2FoGf9CmR58N9WDiwdNmoxaKjKedIlgOWp32CInpjolCbTVFfn%2Foy%2BpEpVJxlxYFBGFjJ83HUu15h8%2FLJpLRd8DeSWFuVZqRDroEjbqTC2PtIubNC4NvKQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302b4795a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"320dc3eb07326903bfbe06fda8242a05","sha1":"da0ec61f0b0d5ce4b6a93983d5686b3bc563aef3","sha256":"f59e579de32ba2c8469073d12ac77c54adc8d5a1f43e03e7921351c8469b8037","sha512":"9f0d5be981bc53aca2288a1f8a8b53878bfcf5b64a40185de5209a8d0023aa53c7681719019bfe9f2935092867f2fbe902ce00023d2e454880a3c238ffe653e6","ssdeep":"192:h/CrfYOk55HplUhIXxuflDv8N1zwNmCZtxV:hcYOApgI8p8NKoOf","tlshash":"65f1af8dcb58042fe5a31233c51fee375f6a029936bf19e95a73b2c6540b228f0718c8","first_seen":"2025-09-23T17:21:13.840373Z","last_seen":"2026-04-06T21:54:39.667104Z","times_seen":147,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-additional-blog-1.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"0c23cacc0f0608add0ab7de6d33abfbd\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODoOZy2mys6AsT5Db4AJ3dfbH4prwJrgOpl04zuwBYS5PA3oNhU4tfMF5Q8UgTmiznQvij4P1Y%2BZEP3IA5dtPvMvbsU7J9FW8HXB6rwumICdx7a4PAjkTAi1akzMm9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6a8320b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"41c1cb59ae9ad3b862bf05b337c94ba3","sha1":"f97090d20f644702090999fb41224667cd2cbf10","sha256":"0c23cacc0f0608add0ab7de6d33abfbd5188af8716a0930d91b149bc3a737035","sha512":"012dc08b3c1c702146c1fd3ae9d5aa951d41c044423474950d7da2456b690c6209b652214834d6300239436350386972cd51562cbf54d33b130bf87ded60bfb5","ssdeep":"384:M/qJldSl65eXEnM/JdHbt/Hg75rriGa6xDO:M+jInHbt/Hg7y","tlshash":"5f720d585a1f29a9f37761ee2ffc7150ce9b68b38bc05858f5e1c110cb6830d21a2b9d","first_seen":"2025-09-23T17:21:13.954779Z","last_seen":"2026-04-06T21:54:39.728182Z","times_seen":94,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-vc_elements.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"eabd0522a5694f6aeefbcc9e76e6951e\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ujutu7V1necO2bNB5sqODW0Swar9umnwzDmT0yO6LdC8St7BViUI9GwqeTGrRgNdfPaq8YBOfgvUOPU9O39HlzpPU3gEuzYWaU4FvffoKnv5FuEwptsx16lwcNomQLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6a8370b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"84108daebf35697ccbbb809d0c7b7926","sha1":"8a2fbbbbf1ef10c61e0f167129fa87c311b6d603","sha256":"eabd0522a5694f6aeefbcc9e76e6951e6326da3436d0b183e737587ded428e86","sha512":"7e27e282ba1b730ec9f11933231fb654ddacf1f17871ccd125ef521b00a3add351f784783d37e208fe107058e5a46f360c604c1578984e11ccbe55d2e0302a08","ssdeep":"","tlshash":"9a61327434a63dcf76036f8a67bb622d5e0694a4fd8b2eadb7dcd170e6095081830196","first_seen":"2025-07-04T07:44:29.955259Z","last_seen":"2026-04-19T19:53:53.743314Z","times_seen":163,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/ajax/libs/gsap/1.18.2/TweenLite.min.js","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /ajax/libs/gsap/1.18.2/TweenLite.min.js HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"601f0ab20a5f199857278b26f2128d77\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6COQ0FzLrZs2ZVBIzKZSYWudK9xVJ7bOTOjf8%2BgMGKIpl0RAhFdpnEP067b7ucbGUxT67GUtmphAjMFQdq%2BHQhXpRdtpQkoOynsX0S19IgToTg8cBd0wb6mIgOc%2F5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a718520b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27139,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26755)","md5":"eef8d7dad371b6888f3c81e8b38fb0d4","sha1":"c9e3884cdbb4c1c9fc89513828ab3ff76fc39842","sha256":"601f0ab20a5f199857278b26f2128d77b7a97a6166a231d8efda0b7dc5743c4f","sha512":"b35a703affa2dee2c3c29587d4706648e1143ebf5eff94dfec07ef07f3f75e2fa298e32363132c3c8082e47c66a2e0c92c9125c7b79b092a87e587968f31ec29","ssdeep":"768:jaPMHFrEVEyNuELvXVWWCAcE7qjzt49k6VNOSkmsjp:j3fCXVWWCAZ7x9k6/OD","tlshash":"43c2b6c67212615245da11aa593f03837337c9eaf4584d3cb549c9ce3f1dd8822abf7a","first_seen":"2023-03-07T15:28:17Z","last_seen":"2026-04-24T15:47:28.838812Z","times_seen":255,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/svg4everybody.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/svg4everybody.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"dacfd6e3a4dba21c4477b41192719929\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgmtLL44V%2FDHoK2aLR5btqFqNT2zy8c3sV%2BNTD0RT5ymJXQ9gJNWHZrWlHXsFFyDo94thgE8HvQJJ3ESWGXbI9qOtE8ybYQs5JO0lFd5sfxXiFMtJtzh4xA%2F3QaTnRA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7585c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2f37ee5c2b7f1377e4dd767e6da0462e","sha1":"3804e18a5af7ff39a01c5baa0e955fa36d620c04","sha256":"dacfd6e3a4dba21c4477b41192719929ba989ad0536d681c31ec69d6aa336216","sha512":"2ef5b21a30437ae4ce3b8c3b42423eed6ba4574353c54eed90c8ac13d473d4d43280e38951ea22d3b15c3cf9f2b3a3144841c69f06cb5e3f2bfae0113c743c88","ssdeep":"","tlshash":"7921a8aa9d1231e30e3726fade69914ceb60411b14015a833a7da8808fb047987e1cee","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-25T07:49:41.931155Z","times_seen":332,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"6d60e3b25e56d35148888b5a08c8eb0f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsrMA4Oc9DEoqdDlZLsl731Kade3QTg87pJTOJcRmsyki4B8tSqHOCqiHaF9Rh9myU6J05vZcrzED48BmG9JScZWwRmkuhaTWmxOXTSzZbDKdkhp7BTVvDiEqtgZ5nA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8187c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-04-26T17:49:39.33479Z","times_seen":14986,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-content/uploads/20Kuardin8/04/3.jpg","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.687Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/20Kuardin8/04/3.jpg HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T18:08:27.053067Z","times_seen":14239727,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=usd\u0026vs_currencies=usd,eur,gbp HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rvardun.live/\r\nOrigin: https://rvardun.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"50dda23e41be2c1131d37277169de3ca\"\r\nx-request-id: 62b8fb5b-d1f3-4242-ab45-df0ad3c18242\r\nx-runtime: 0.006477\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e3302ad688156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fecd85e37cc119a408d1aa908654bb67","sha1":"88f419f7f1a745cf95d73b78db223e3bf0ba4fb8","sha256":"664087206470fb597e11e61b714ff0d656cef74ae2dbf890a9fcca4b095b364b","sha512":"d10285e002fceed7f82e52cf9c53cf9e46032dfee03c77f7f5ea627ca9ed862af2389e30736bd879c44aef08861f91e1c33c844f5db7bbc00d90cfe0f49c2a43","ssdeep":"","tlshash":"e790020092a005275914786a1c066344e453a7555acd06012008cc45149e0ff60060ea","first_seen":"2026-03-23T23:33:49.689373Z","last_seen":"2026-03-28T22:12:53.923557Z","times_seen":17,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":40,"dns":1,"connect":1,"send":0,"wait":142,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/odometer.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/odometer.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"7ec853ce34bd953427fbbdb816ca1ef1\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0Au5nozrUnmpXKC3IIESwhIkkjXefetLWvTwN2AwuNCb2uRQBul%2FXVK5zVezhS2d%2ByOXPk8BcuMFn5TCQ5BSAjbO9kIZghd0BMZ1P6CxvGKnQWOnyiM1BITXswEWCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a778670b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21077,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (447), with CRLF line terminators","md5":"f9c04e8d7af6e9d51f8566d4f472f494","sha1":"fda7f6180887dcd21517e3575650834be5330323","sha256":"7ec853ce34bd953427fbbdb816ca1ef1ca7a20f70ef4881f25028475e37a1afb","sha512":"3f91fc1aa8ee80e3c782c3dd01c78df6df02a707d6e0b5bdeee865a2e23f00cd17749e83d823d6591fe60700166874d8953ee4b05375cc6f4aca5f726d078eac","ssdeep":"384:/7CmeCN2OvYxE2W/McVcRaP/S4vLTCsbojVFIC0sW8rzQ4S1tOGEq6q:/7Cme/Ov/2kWRaPa4z2sel9ZQ4S1tO/C","tlshash":"5a921d8a6e9623599733733aaf9b1108ff7b482720115148be6c50c56f7293092e9ffd","first_seen":"2023-03-09T12:13:02Z","last_seen":"2026-04-19T19:53:53.758092Z","times_seen":267,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.6 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"c33a810443a267c359c2566b2c9b1a70\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ey8wzNJuAiei0C9DW1euGGm%2FIDaoqCPUsaX7LrAkRBCQX%2Fw8jFFhrGrK3Y0mukOCJs6wWWsiSiID0X8k0T8HrFAxWTB35vue50eeVmP9ocGK8svXsSrAmqnY8xBNgnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6b83a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60333,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"61e8215810a2bb1b3508e130c80fda90","sha1":"caf7d572582d14abdaf4410762ca7115c2375de7","sha256":"982c1f335963f2284703682fb6251346477f078bd1f8ea9c53449b7a5c9bd576","sha512":"1368b4707be9c3732ad129116ef7a6c7c6028bdad2c2b6a29488e252e0d4ee73aeb9053167b46ba37045a042ee9d29dab9ed8d0c7ed7ec487d90a44e61505b53","ssdeep":"1536:26hMbEX0uzVQw/kubIukhqQ9HmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:nb/kubCs","tlshash":"ae43c67198921da82327ca81e7ec0bd49e25cd329e030cadf597321dc39e599467e7ce","first_seen":"2026-02-12T22:33:01.919088Z","last_seen":"2026-03-28T22:12:53.898134Z","times_seen":129,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.6 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"e99d918c3c8ba1f2969ee1ddf46ef087\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iui1IlnKnIAD7qGooRoaVrpCFy0mynA7%2Fx8SzspV1vazHj7ROC885nrqSe%2FD363Gnm7xSOn2QBq4kxF4cFaOkUGGv5ymidlNC%2BWOfA6Xx1WHhOiC3LSO%2FFf%2Fq%2BtciYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6f8460b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64270)","md5":"cffd0a1a3f066b4c698d79e5bd8fe124","sha1":"e042a9748e92e2f45e133b57ca2052ceb25ef98c","sha256":"e99d918c3c8ba1f2969ee1ddf46ef087a09e819c141cfb9aebcf29e82ee73fbb","sha512":"d3aacd9f216547f38f4cbe67ddfba2389a7526a04d7907b76b29cdaa48ed143c69fcec703e807ebfa115b566cfca33a2b89ebf76c4d5bfb9f30755219d85292f","ssdeep":"6144:IPI6TQxgMH4N7CXH2pD5p+v9NWF0QJpkXRdud/RDrnTKbl7wnoyJD6BWSIle:IHsH4N1gv9mJpkXRdud/RDrnTKbl7wnc","tlshash":"2f644be8e931787a04e742d7d05a440433b5e92da30785a2f2bbe1695c5c68d02ebffd","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-04-26T15:37:30.665778Z","times_seen":531,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/white-paper.svg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/white-paper.svg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"aa5961e259f40a4a90d1f7e049520e07\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cv9EfQ7eNGJPhdPc7%2BdfC07mJ38mJlnaMukoRcB%2Fw8ObD6q9Ci5yzrEFXxUJohxtx529C48hiLgVFHra7O65VRX2bY5lsMvffZrKugjwsp2fzIp%2BLbOZBER0XNpurA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7084d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5759,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ac7604fb6549093533bc763e9a91ab8","sha1":"4fa2ee7e08df271a5fdc392d073bf90168ba40f3","sha256":"aa5961e259f40a4a90d1f7e049520e0719df41f700db6bffa796291556407d78","sha512":"d51673fe512dc47e48622817d5963f39a0356532ec30b34d2b11b684840542a246782aac20f9ca99ecb5a7ece4af631621901b87df4036f99fc17f56dc69fecb","ssdeep":"96:7tz1nnHzOzr2tjzDDaNGVzdVOpDeLdfSuOPQy3jd60T4:Jpyz8n8GDVT5SJlQM4","tlshash":"dbc1445e073d86d4ec6c63ac69b635cb737879acb472e294e38b6c0528017fc19609b1","first_seen":"2026-01-04T15:46:29.871275Z","last_seen":"2026-04-22T06:04:38.442894Z","times_seen":96,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/coinbase-2025-Q4-2.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/coinbase-2025-Q4-2.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-length: 10706\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7e0e563404a4c6459c2c7fe6b8e20807\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DcA77ayQQkxKK2kw3Pxjyk6Sh0T9C6OruBzUJhho6qOddaCgaJVAPzhWCm9B6Qkirgq%2FoRQqqwKogQ95wofliBZ44vC%2BFiBx2S1bH1X5oNnVRu5lx5Vq6xUQ6cIB%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302a7585b0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit/color RGBA, non-interlaced","md5":"fba92594ac075f3f248ee46d2592498a","sha1":"20c7aed53a79c8a1b1729f9bf9350b670d6630fa","sha256":"7e0e563404a4c6459c2c7fe6b8e20807427d5a0267afb34ab3dc825313a621e2","sha512":"c989e3d4fa8f68d88cf1ef249c4a5ca99aceca6b5375e4d70fc0ae157ea30944c3a08df75b18c2a171af913448d082a5323a182e9dc2e8e0261e8d5831169743","ssdeep":"192:3STkngUgnwaleF0gGPZsAg67egPsOU3tgWb2XiXx0Lmi:i4ngUPqiKP1sdHbAiXx0L/","tlshash":"0022ae0af48dcd10930ed55a99d26c334ab76184ffe1ec2e94f818a7607857a8c3c9da","first_seen":"2026-01-04T15:50:41.385843Z","last_seen":"2026-03-28T22:12:53.828094Z","times_seen":120,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-countdown.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-countdown.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"845d2e6d1b14e199b65a530a085ca256\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vwM1psefMoSf5ABA6T3%2BAHHYu05sxoy50ZIR85%2BUzDa%2BOwcyMNHaC2F1HOAvTXTmGWWhbbFLJdaDwZhpi4CoDEqxqZHU3mBEwyuO3kArTvCFxw09f1pi0Q44%2BF3U7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a858870b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10981,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b53c15456ae849b6978f22764cc8545f","sha1":"8d523359a44058d7b90a38e968d3f3f4a3329a09","sha256":"845d2e6d1b14e199b65a530a085ca25671f426adad4a058dc0f22e1f8a5ca008","sha512":"ca1dc4f6a074a6cfd70169764a0223850b7149e2103a226ab20a3e7ec8b36571d74bc6788333f52e0da7a3d4faffa324a851f005b0da26e90c7c3ad198ac7ff2","ssdeep":"192:5dmS0ZbhtuFmS0RTd2DITa1GAjuAloK1qld2lRBo38qlV7E/lYD9DDDHDS0x5dro:KFZbPuYFRTdZTaXif2c2D","tlshash":"2a328544cf7a13381ba3a25d13ce6a8cfaad6183d3094c95fcbc8d096f69c797118d98","first_seen":"2025-09-23T17:21:13.9739Z","last_seen":"2026-03-28T22:12:53.868308Z","times_seen":136,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/isotope.min.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/isotope.min.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"57a45007f24b920e1cb59467217fd99f\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0u0eqZx62m56IygbsZXE2DMqWNp1xjReYhiJ7BWVb8R6JR0I5CDW2shmoyYssbqZh27uiJltAVXE1EOUY%2B0RbwI8NQqPvfl1Wii%2Fcen7EQi9QYRkLTaulEv1yv9Yagc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a878920b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40858,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32031), with CRLF line terminators","md5":"27888208753e5e26022f374afc4a78c3","sha1":"bd4ffbf2d51242e94f5ea8e7395f14fc1452301e","sha256":"57a45007f24b920e1cb59467217fd99f6b7aca9806c31fd2fbdf8ba38df471b4","sha512":"02d8135ccfdef423038d2d04dc43e67e93bd5a10e88176d0af44387661b8110f5f207649964a38faad50884b2430f9ad9be5cddefdc41ae6894d836a25c99d5f","ssdeep":"768:jG+z0BFKEyby+HvOWvevgOkYtUdEvWBzigMPpIFxIFkuJKx3D+5+gY07E6P2:jAybbO4IUdEvPgqIFxIFkUe3CcgY42","tlshash":"d0039549b74435208387b5b5a2af010f723b94bde94494bcb699c8fa2db6c4d1133f79","first_seen":"2023-03-07T01:06:19Z","last_seen":"2026-04-26T07:34:43.307394Z","times_seen":867,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox-init.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"ab7671fe8daaeab204b145e20b7e0585\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxsGTfiVvOeQIzY9QUE1CNYyzv2tpRW3RxPeQky4k9YJnox51SnQKtL5o2h1NIpNnr7JvXE9rvUiI5vGt0aefrVWWIhcIJFVv8Xy3DOvbT%2FYM7xPIOHTQ1QFDyjqYJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7a86f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e187592c12567be861c07161dddf24e1","sha1":"ae2d0b80128fcf0b3ba03f1f07d6786c7166e76f","sha256":"ab7671fe8daaeab204b145e20b7e0585502147c23f9ebc0afdb4bc527c28aacb","sha512":"d253a28aa168e389e1b1518468d044fffb043af35ad8e7506f46bdc66e5da5f43709d7123fe53b8bfe62c0bf378d15a7db90411509424b201de44c07760568df","ssdeep":"","tlshash":"7811dca2b1be1a1d8ab53b5caa3be1388e3fc415c04388b3e5aa505811d0fc012d77c8","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.751953Z","times_seen":175,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-preloader.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-preloader.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"567319f85d81a0b9d661c472bd31e418\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AzoJiabYmTP1g2DlHPbRfUFdbdkPT%2FiSPrYdIrlobOAQ4DGfEQyROuwqhKoJyewVS5J8AM1d5dygKVBtOyMtTNbC3SHFf%2FOX%2BM7CE8pxeLOvdt4CsIKUzxwKOeiw7Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a648220b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f67d979c93da4ae5cb1ca62261d19df4","sha1":"8ad553fb8f726daa1bf40c730c0627806d530adb","sha256":"567319f85d81a0b9d661c472bd31e41854318372040fae4d140eb96301650b37","sha512":"a15e574490b23878614345d2b82d17bf4a4893921de79c9b9598b2f32d56a66814e57d573ae42fcbf6bdfc994ed5900d708e432862df9dd45f22506a0a4e1156","ssdeep":"","tlshash":"5b6168b87965c1825622ef19b7f44e300fd872739d56c4b7f0922c1dc2c06ec9a329ab","first_seen":"2025-09-23T17:21:13.857918Z","last_seen":"2026-04-06T21:54:39.721387Z","times_seen":161,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/custom.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/custom.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"57296865cacf7ed59a8a50c6b9580f3d\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaMDpGDWECc7t%2BwnngBERo2h82is32jPq4zg4XMsHDBAGuPhiGfstZO0ESZ7qgxqEWDe2iLw5FsFaZ0jTFVc4zJTz%2BVeuUGWex4xTycWM7%2BbNvKSgvxdgzqWSsl2uRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a698310b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8115d79b41d838bded6d1a1126ed51e1","sha1":"ec06add4a5a3c847716a5e33c8529f9980361fd1","sha256":"57296865cacf7ed59a8a50c6b9580f3db6c6cf2e548b6765afb7bc7780176a01","sha512":"85c3ae3e42080450fdd6fb1248f71581d8ed7007f6a8375d59ceb889bc01d855d3ce40ab0cec5df9aa27cd0ebdc563b6bbb9ad53ecc47c00fb1fc8091a21b476","ssdeep":"1536:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvLuZNLCDVVx3AVaV5MGAXrWZfY72In9bgF:gUuvK+s+q+3+GLuZNLnLuZNLJLuZNLvH","tlshash":"e293411b96152daa2e77532d998e7880ef127373c381d42bbaf1c2154f7884897b2f4d","first_seen":"2025-09-23T17:21:13.94536Z","last_seen":"2026-04-06T21:54:39.692326Z","times_seen":156,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/css/dist/block-library/style.min.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"b4cd2f5507698b3ebd388e2d1ed31bef\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xz3PGkFbN84D4Z2%2BSJM3%2FcbokYmjWu7%2F1t%2BmAWfrXh9%2FkvJpZwlDZheFQFBBGAAp1VN7KGP3RjURPKD3tKtBuYpNpwZPyF%2FZkQ9i7wXe%2FQfJjY6m9DGxb8RsvirtmIA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6b8380b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-04-26T16:00:52.911919Z","times_seen":20973,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"ccd31ffa708d025833f954b3e0560ced\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoOEdRdE0YQbHnoGCtQXXVDMJDbL0yi5s32IyEyg%2B4YhET6UwBBrJzyPQdULehj3nTRv4QO6KsLSDIkcqZq6C0zf%2BQsXc8YL6R1OrPBAeaqTpfWwDUO3Dbk9iArEcb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6b8390b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-04-26T17:57:42.764459Z","times_seen":75031,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-js_composer_columns.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"c387ffe34498c31b27c52c4786d10abf\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cEngLN7o8%2B2dTKXA24IYuwhi2OWvH2SXcWLnw411wVbAc38f6rBZykzNamdoVtgWRtI0HJjPNyYdO4BAWjxfyLJEdCOBPfGQX7UmPqGz8FEN7XX1A%2FEr5ex1lq%2Fc9RY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6b83c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c9e5a1353c92ea618b0cadc5380eb31d","sha1":"9927e4eeae41885eb2b7f7993d72fce6659c5c20","sha256":"c387ffe34498c31b27c52c4786d10abff34cdc98fb837fbecb545c34d192de32","sha512":"fc1da2cbb1f86d90fd0dea50f272594d370e3a292613257d8f59dd0d012d2c95329ac1e06fa5f01e06e570c91d631d1f7e9c52a40ef0948d7a010acbc4b1099b","ssdeep":"","tlshash":"bde08c654fa02ca8807645c6d3f299248f010852036e8caaf100e50ef89013e283d1c9","first_seen":"2023-04-17T03:11:31Z","last_seen":"2026-04-22T20:35:49.572832Z","times_seen":120,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/icons-material.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/icons-material.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"999b3ff1e204d85707226e7191480f81\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXL1prGgT%2F2wwfL6GppywUMm5eA0231Xna9dJ194lpnpfVvmGzrfW4tMUBWAyYoUwGkmGFLLhErFAfBisDMe%2FURHE7De3FGNQXdwW90LJ%2BWtDxcPTh0yd%2FD4rBdpr0g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7084e0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9aaa085b9e60c9e64686bdc5b503db2e","sha1":"461806c0c6891cdaddb093b0cca2eba1ef018250","sha256":"999b3ff1e204d85707226e7191480f81ab7c847d5b1ef67c1d9eb037939fb8d0","sha512":"f1d3441b88abcf8d5670943ab9df601cbafab97b77360d0d2d700fe8a38f98158e21dbae849ec432ba3295dbb39b949990dbcab3ecee25f21db56d118eb13f46","ssdeep":"768:n7xYmW5iuG6UcoJ307fxgxXWB45H627v2S6zvERXsE/fNY0Eu7sxst0OW2ho:2zgPtVe","tlshash":"3e53ddfcd94d00ab9781ea81e3a16f921b0da5fcff42195dd1463d0ea5c762339823da","first_seen":"2026-02-12T22:33:02.024438Z","last_seen":"2026-03-28T22:12:53.806593Z","times_seen":129,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/diagram_line.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/diagram_line.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"8310f3b925f0513da6d9d90f28af1eb5\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spsfn4r9URtPxDlXjsZ%2BkCvzKwMWnVUVa8HYtIabZi8mAru%2FX6frodM75RvCgJEIyp5FOKM6XEZ2Y4OcI6SkO%2BYlqve3IdaayKBlnG%2Fpc7PsB9SGyxLPNNKdPkTXJHc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a858880b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fdd5d3007f950d7ce06ded6ab40eba01","sha1":"fdc5e5909c613a82ff03de097b74dfa6028af50f","sha256":"8310f3b925f0513da6d9d90f28af1eb51a2f3326df70056e6c0c958c20b8c728","sha512":"04722a163a5f9f9682ea4c9717dbd00d702fe894eb38b74a9b4722332aa0311fb009efcaaf98f605d5bce8bd69549a223ffa0fae970d28bd1f80fa4a08c3c561","ssdeep":"","tlshash":"97313294b029644d1b7b2321743f4a0fb53bc453b52a90d8f9d980a33aa48623323d6c","first_seen":"2025-09-23T17:21:13.947389Z","last_seen":"2026-04-06T21:54:39.698242Z","times_seen":158,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-vc_elements_init.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"af5ec9b3861f037a982059c7f18e5fb9\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQ1kiPvL%2BLjw6JsUfcpTofmULqWVBw48qom2%2BiXdU%2FQrmVZSDG1N4yzu3Z%2BMhAaK19lihWmelgQH8CIfMK8i7RnXoLjoRI%2FYtION65dKPKieuWGdF9ofc2ysxQ1AZHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7a8700b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9b206bdc6bd5666e48df4f0d11529f0b","sha1":"bfc8b5e22e0c7b9289afde622f4551ba95994d80","sha256":"af5ec9b3861f037a982059c7f18e5fb994eabb9c2cc6bcfdaed6b7cbcefba1af","sha512":"c3711749b9162a280f3f615fbefd7a16daf8aade451d7322f13e273105090042fff674ba926cf65f32ee4cec987b60b09e69dd3da00d97a024dae6f8d8be72c0","ssdeep":"","tlshash":"82216dc9b31f74bac5a2fa24863e9e4c443ce0f95008306d7886552c7fe46d8abb2d1d","first_seen":"2025-07-04T07:44:29.953526Z","last_seen":"2026-04-19T19:53:53.717669Z","times_seen":163,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc_round_chart/vc_round_chart.min.js?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"aacbe6744b8152b23dae219633e84b88\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIwOtdJaDVpDsEBC0x%2F8HRI5P2qnfaWslRE8Lh%2BWSr%2F2Fe5HTu2ExqLS06OYFkQBl%2F6l%2BNpl5XQtXarrdYcCmoLnb7%2B136lzBhfwt7exiB0mwsGk%2BW5%2Bp%2B5WhldQ%2Fls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8688c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1667)","md5":"74217068dcea35165be6cd790b15aa7a","sha1":"b5cb5317196fccd62bcf22216b4370a6ed4dbcc9","sha256":"aacbe6744b8152b23dae219633e84b8810d3e52e015ea24e9f315e9a7eb35e52","sha512":"4ea87c037dd2fe9f8f5701f50fa73614d43ea468f3263e992aadc4e383636f062c7027dad76fce5fe43e1e7c628cdac37df416947f93cf633d9eb85119e62bfd","ssdeep":"","tlshash":"2941edaae520289762e72297862fb39ed313b27d0d52312a715484fc0e5a91f343ad3d","first_seen":"2025-07-09T19:54:12.267616Z","last_seen":"2026-04-06T21:54:39.720572Z","times_seen":157,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/quickfinders-effects.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"1f849fe25ba4bf7809712d20569e3d1c\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXR1w8UiwexiAKtSftHUzn26sskWePiKunvjZX%2Bi0F6wJe5FX27ta0hg%2FOy54ZanmthBhvuyRZwQ5dvV%2FQx34QBCF9F%2BHX9CpFaSKfFROZpE1RwpssWDkcyJoN7hJzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8688d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7834,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3952202a606168bcbb375a47ebe715a","sha1":"0e67fd3eb8a0caa9ea818b03f30cb59c92cb00d8","sha256":"1f849fe25ba4bf7809712d20569e3d1c87b5c97dbe17f352d26d3c612d75765e","sha512":"3b32b37d07ffb20d46fd28689bf0a14d06a67d72762c3af4e76f70998e13b0a0b65bab3c01374cf49fc72343f292b582eed00dae6ad980bf75b14c9143acd614","ssdeep":"48:Xy59uhu4LdzCC0YPu6luuzXqu3GGYTgunWjlg3/L0+WKQ2QALX2K2qFx2mxSYKQa:i2FxVa/LZ/BjuBjq+qd/LK4o","tlshash":"e2f139c179de290f13fb62e95ab9dbf1870fd424dd90061af6b140b04677a89463bb38","first_seen":"2025-09-23T17:21:13.84476Z","last_seen":"2026-04-06T21:54:39.712472Z","times_seen":158,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"ddcce687729cb358abf9d0d8e1217a09\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPJ%2F22uHcGzLUTXO8mXl%2B1G%2F%2BHvvfXZ1mwcklLLsHkf5WHyd83P0UU4ZCM98d1WRZZIIwd3LdClODpT1xGaTyPHYwmXBPMS7P%2FkZ7t5OvpIOIQ2JdrsWrPey0%2FqnzWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a8187d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-26T18:06:50.426172Z","times_seen":169963,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/02/ico_bg_image_1.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_1.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 6732\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"10daa070bb1c3cb4aa492d52cd7e33c4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzxzcgmscD3j2RxiIfjk6ttIbS3WtkmBeTuYccJCtrYkZ3e02oKg7KPmS4yCLhFFsxxWjiJkNFiB%2FzPW2aujVzYFyZVIyPKDNAy5YGhOGP3aWznruapW%2F9T6csjWRfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abb8cc0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x354, components 3","md5":"a6444d582842d7178c462499c49d2b8e","sha1":"e3f2c15698e90668e13ed2cad7cf92d848426ff3","sha256":"10daa070bb1c3cb4aa492d52cd7e33c47da45e041684e5aa1a921365384b8949","sha512":"6ecbd626384f0d9b5eb5102afc1f857451e27ac778ba3905f693eaebfb024a9c360101a53142497c0e3f1e15fac4d01acb136e5228ae2c4a963fea2449c192fb","ssdeep":"96:k/hoJJTgqetm80GkXBvNhx8XoVlxHR4xerak1HZRZ85vE/m6Gzh:T4qe4c6xooVd4U7g5va8zh","tlshash":"edd13ba3d704a267c41d173140cfbab2bf661d62ff90072a1a9944669bba3a07e43f01","first_seen":"2025-09-23T17:21:13.863238Z","last_seen":"2026-04-06T21:54:39.716453Z","times_seen":157,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/ico_bg_image_17.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_17.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 181984\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"5ac795ba09b7890a433d7ab2909f2532\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TeTNyVm10bKaHVFqIGKvhEGXclYjcb%2FubWtkbeYMjcRIg6J2OjeQw%2FRxQErX0S7q9If3pFlfGMmlEfDRPM9ONV8lbiP1BRKD9ayiZJMrmCXbDtGK8l2axE7RaW8ZdaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abb8cd0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1176, components 3","md5":"5f4937231d239f01c8503d7bb7cce83b","sha1":"c801abd3e5d669897a891fe66ed997eb13de5073","sha256":"5ac795ba09b7890a433d7ab2909f2532a2d9e0acc415dfe57f6e2bd62f31e38c","sha512":"cf95aca979a28da1ee8cf823daab8c9f866cc789005d9f7e1ce69022de40da396c12a79dd95cc195beb912885374bb1cc8dd1e6ff6796b588b1ea2ed28d1b57e","ssdeep":"3072:ioWCJz83R3nk4ESh9s03FWj/5RFkTLKvqxNtdgmpn7AtftxhxjEETbuq2x+NB:iuz14ESl3kT/C+UNtL7aTfjEEfZ0+T","tlshash":"960412a2e5d934f9c0bc5bf1038213368e67e5e99be7710d4f1544ba2a0839aecf7164","first_seen":"2025-09-23T17:21:13.816899Z","last_seen":"2026-04-06T21:54:39.702564Z","times_seen":155,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kuadin.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"kuadin.com","domain":"kuadin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:04.237Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: kuadin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T18:08:27.053067Z","times_seen":14239727,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-grid.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-grid.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"c9dbf396d0101888716bb5f49d717331\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77brFDeP0bVh2Ai8FQEHdlqYKXzoNUmFittOYCuN%2FQhRyRW7rPNvWDm83v7cpf6S9X52vTy%2FUQ98w0La8kB%2FovefGUKMn2VUyEW3QG8aE%2F6IW4PukFylmdJWPVGpIso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a678270b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"716b42dd6db95c1109ca1142526d352a","sha1":"cee0c2db7f5e5a2c425c5310931b630e27f5be47","sha256":"c9dbf396d0101888716bb5f49d7173313f8e31cbaefbe8012c725346a7ecc7f6","sha512":"230821d05ff726df935fae4f98427b9bcd3b4357c7aa2fe391ca3efeed09a5b2a8bfca83439ff7a0abd2ade7c140903e184400864f715364f962b9cb7cce0e32","ssdeep":"96:eX/KNp2Pg96+KQzbIIJJTmBMbtenxCZM6dFUCNBz:eX/6p2W/sCZMre","tlshash":"a72280c569a11c1f4265cf9b71749c2f5e39a4b77afbdceff2e61c06c0a980a44a1483","first_seen":"2025-07-04T07:44:29.942684Z","last_seen":"2026-04-19T19:53:53.760683Z","times_seen":96,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption-child/style.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption-child/style.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"4246028fcbae512ffb144dc94ecd5d1b\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTaTnT3sTjKObeNJsc6mE4GBm1IKS1vnsJzmXWLzE9HUy3fnXQupwtNIBp6qfC5ww2sDqEEdnC%2BeAva9HBDHXd5cPwKLIrAqbFaX3dxxdpN45VsmtH6QSiapkthGxTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a678290b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"34387ecab3438430e1db1ddabb819392","sha1":"2399057aed36574d63c95999ca748524b46feccd","sha256":"4246028fcbae512ffb144dc94ecd5d1be28f406833fa3c950a603e6f00f0a2bf","sha512":"eb9367ec5a2261705ab1ca084205438f784849fcc90f5e22c76ccaafde4c9f53c820ab0356c26809bd4007e3dc06d410cb46b9bf059662d7faaff791721d2d1b","ssdeep":"96:nbhhUXNaSCMhZCfKgX+7C1V+ZUXNXw/qoaG6cRxR/CzwQnxTJZxRsp0xy63zCx3u:RMh8zXLr+CUq/l4S26exe","tlshash":"afa186d6b6b0920078e25a647a63fb467738d417c30adfb8bad0201c9fc53c69662b5d","first_seen":"2025-11-15T16:36:12.602426Z","last_seen":"2026-03-28T22:12:53.822827Z","times_seen":85,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.6.0 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"9882a286ae102ec1c390fce55fb105df\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4F6K6kKzSTWszMGMVvFaMObDdK%2FsHNZGYyxgzyIMwFweN1w6sJs1aUZJaxTSDMJAPmoh%2FlfL2wDpfB7V08V9PFSiqvHWJwJ59wnEsVs6%2Bif4iCoRL9%2F3RPSsI7MZUA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6a8330b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65358)","md5":"cf41d159bff445828e1ea9dba51915e2","sha1":"41b76a6e211ae7817be30d052e4a642d734e13a7","sha256":"9882a286ae102ec1c390fce55fb105dfa3adf34f60f4cb0d45bd347c2ff64363","sha512":"ca84ae65aff496de2763d3acadf15dd010f4a866485676a0398e1c0f7f558ba526b8cbd24c68703f2e5744706b9a0d440a3fffcbdb68b2f9a89606ef7de62407","ssdeep":"3072:vRuQvmKEBVJh/PJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gg:vRu3/+ch","tlshash":"aca430b2f894241f23674cbd30e0b92abe1701f2d5c21fae7568e6945e0686f353a735","first_seen":"2025-05-14T13:55:44.787961Z","last_seen":"2026-03-28T22:12:53.804761Z","times_seen":131,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.fancybox.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"44ce7be5b22ba80e67c3f7cc0c3682ba\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uDhF3Pmw25gNPi79Bfl1C4vMOa9kRC5OCWglmcl7bIFXXKnidL2sT13dnL2J5cuTS6s70fBk9eFvtrFr9aRuZFMV2lNYXpo6Ei4R1oyW7F4nKQ04nJ512OQy3VkM50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6a8360b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4388,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"caf2bcc067214f053488ce0906bd11a5","sha1":"9c2023253751662efc2bd5f5b80ec333fe16d412","sha256":"44ce7be5b22ba80e67c3f7cc0c3682ba98f3aab5def5332bff9fef1d83bac579","sha512":"cb39a93d9f9006ece0dfe8be246af13356a80817275df7d2d2cc16b0e165da8e4bb25489654a412e5f586b8791651f8b1c115580b710d1066dc69210559841cd","ssdeep":"96:wZ3IuNurbCJNn5UHZXaa2sOTBslSpUqSnqbz0zO2brwa82M:w/JN5kB2sEBqA7SU0zbrDM","tlshash":"6991cb6e9655300aa037af84a7bf5a56ce700451ba0701bfb0ecf12183d57fa71b28dc","first_seen":"2023-04-07T23:48:35Z","last_seen":"2026-04-26T13:19:56.455056Z","times_seen":290,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-countdown.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-countdown.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"21ab083fd5b52f1126073fbe4f8a7262\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErKoy73xBHYS1yEr0Z97rol3T5SXI8uhwz1EN0o6JmwwnWgRw8xf92uKLXYh7iU2q1io%2FIA5wSY013CLqlU43wLZEfQdsthhxnEYD7NKd7buyus9CiTkujWMPV07jI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7084a0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c31a892d0a01babeea0871aba951a00e","sha1":"23e0238b8ae3ce0661fb1c9d49390f149382bf22","sha256":"21ab083fd5b52f1126073fbe4f8a72624f2d4f8eb8ad028f2041f2801870ea94","sha512":"d1c33f86106b377823d091473397ec845fb2bfd1d5ab100517e36c52ef0de8832168ae8409f021e822561c8dbd3276d8006458a03f612645c5a91ec37b49a0bc","ssdeep":"96:KV06ic6zsTJq5yGIClfjK6T/C4IazUSlAnC8MowvYSMAN0JK/JV2L4alwC:KVlS51K66MowvYSMAN0JK/JV2L4alwC","tlshash":"f612d0c45a31133a6e93e0187bcc270c1fda5903f70f9c5972efa51eafae4b4426a549","first_seen":"2025-09-23T17:21:13.861277Z","last_seen":"2026-04-06T21:54:39.73723Z","times_seen":91,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/jquery.dlmenu.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"bcf3b7824f01e6df13d4c6b789117e99\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjYRr2TUFaeegXcqOmGJxDgIWzI%2BQDZt42nnBgIsTCryRu3hHgaa9%2F4scjkPumlRcmo8VekUwv54N1mGMRWShy%2FzlSJwIca%2FkR2AFcaga6ucRpqOW%2FFSDY7hzopSCqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a758580b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9087,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d43500d68f963d397e43a2e28e36ab4c","sha1":"e266e2a5e0928c616a0bd522b0286384badbbb97","sha256":"bcf3b7824f01e6df13d4c6b789117e99589814b10e5c54289b824e9137c3b969","sha512":"bfb82a0414c5041c0bf58d84988465791851eb5faa28acd8546994846d1a97b9ef89932775132064064848115f46ee54e3edf6984d37e63d68f301f97c9e6c67","ssdeep":"192:OidEVHbqA4JfG3+gZf5Oy6a8oalaIcpbJDlL2HS:OuEVHbqA4JfGVbJlL2y","tlshash":"041242c4330f376b96ab733194bea005fa3ec572a00d116e79ba25de185605953e3ebc","first_seen":"2023-03-08T05:41:37Z","last_seen":"2026-04-19T19:53:53.688242Z","times_seen":175,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\netag: W/\"87cee5f49ba0d3017efc409579fc58b9\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moKPB97I%2Bku3RyRGsBXWz0umXps5l0L4vPWArVPFb3aw3vpHg8AqV4u30n197kScwUe4DHiPiFvzjlI10wYWcpbwoyprDk%2Bq7R1q3vUMxCXRRvzyf8YRnm73yaWhA08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7b8730b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-26T18:07:53.460007Z","times_seen":135844,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/02/ico_bg_image_12.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/ico_bg_image_12.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 16183\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"aa0cbc52f570f875871f6c6a14a978db\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2B7i0Cxdgh8dYNFPWYagiL7uUm5fb8VASg%2FfIDjzJmNHPbi2c6HfnR7AumhOCAxEMXLDE7TDhv447%2BdlzkMSlZyVzL5JgIC79VegPcPfxvbS3tak7v5bibagNRt88kY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abd8d30b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16183,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x864, components 3","md5":"1186878c2256a14df4b09506be6de099","sha1":"875705fa45727ee610e128af394794199065c002","sha256":"aa0cbc52f570f875871f6c6a14a978dbb4df3423588fbbfa925416d6b26fe2e9","sha512":"dd9525308b0e89bf6861ef62c8bb5b55f2a79046599cd4d0f8d0eeba86dd72266fa0d929109f3e0a69796a5dc02a825b4d6ceac078248e91786db476bab2cfb6","ssdeep":"192:YAFgLoJcHU6bxWEf8gBO5MMMMMMMMMMMMMMMMMMMMMMMMMMZrQ/U7141hKTeRQOI:bMoJc06bTSHZrBJTS0LMhZMXhnuAbyYb","tlshash":"41723b52ef0250e6c40e273159da272eb6231d767ef0055e8f8b40b5b9a63e09d1eac9","first_seen":"2025-09-23T17:21:13.84674Z","last_seen":"2026-03-28T22:12:53.882034Z","times_seen":133,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /css?family=Montserrat%3A500%2Cregular%2C300%2C700%2C200%7COpen+Sans%3A300%2C700\u0026subset=latin%2Clatin-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Cgreek%2Cgreek-ext\u0026ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-length: 1337\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d2b7403eabc369604f0075d559bd87a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPEA3itRde%2B%2Bd9lyKXjPRLpT9%2BbC3WCTkhuzvI%2BLJ48Jk5eLvr9G1ualHulI4cwUrsefO6Ho2EextRfSTkAeI4QFoqzTJC%2B5cqhQL0EO%2BVIDpECAC6a6ixFHpMH7FwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9e3302a698300b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1337,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"d2a67530d371b67731a651279001414a","sha1":"49cc9a0232e6d46376b6e8356654e95d770cb918","sha256":"5bba85f7dbb5e6820ce1a880862269b76ee093208a0fd29a943b26b00707631f","sha512":"1c4103541f3131f2362979ed50c22cc8b3239935d3bb06dd99bce487344706c82b2c327b2a48f524740673147c9495e219e32d1798ba8d6d62bfd9825e574314","ssdeep":"","tlshash":"a8210500200aa631e6101d5d33cf7f298d9e386621a6c06d6b754c38afe682a4362fbd","first_seen":"2026-02-12T22:33:01.960642Z","last_seen":"2026-03-28T22:12:53.918454Z","times_seen":129,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2025/10/exchange.svg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/exchange.svg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"cdb5e844aacebe4a6133defb09a27494\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Dd5bUTjXu0sZLSAFmq18iuXzDyR%2FkkHtx9Y5Ou81sgpW1CA1HRNuJmDfJb%2Fuv7OIO3HToi4EDTFFZ%2FcpxODT7ZU4ppU%2B6w1E0tXCAadK10Z%2BSkQCe8zTCKcrEEectQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7084f0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a69a67f83ea54c19898a3eeff671a312","sha1":"452cfac167d7b3848110792e04aa7cb7bcd5ade7","sha256":"cdb5e844aacebe4a6133defb09a2749451bcc360773de958cf6fa92aea49b498","sha512":"8c66353844ce34b164add4646e363ffe5e62c79e8f24406729636698e111d84b5b1fb9764db974f949a40a4bd526d68b3330f31f6593d746022167bf6cb0143c","ssdeep":"384:Jd1qObtPD3k6xzkUhrlyN9/1ErNLkeBgV0Sq5rcLFZYz90vnL1tdvorJFhTH9N0a:QcPD0Az7ryNELkeKqGnt56/PN0a","tlshash":"17b285cb473881f4785c53bc5a7a2ec7337564ece4b1864c937f99046943eaa2728ea4","first_seen":"2026-01-04T15:46:29.930321Z","last_seen":"2026-04-22T06:04:38.449747Z","times_seen":96,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2022/03/binance.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2022/03/binance.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\ncontent-length: 5113\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"89816f3f685191889ad1452c6f00a1a0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuxcClTK139qjWe0LKMFgcrPy6Ey5%2B9hztNYc%2B3FH%2BFw0%2FfcnftnAOhxpEoBBLFlYZRYj4HNyB%2B6QLBqD4rg%2FRDeO%2FXESmYa7mZ2SHzL6DmB4W0c8krLPGapJoOGYvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302a728550b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 164, 8-bit colormap, non-interlaced","md5":"9d999e5d22850968f7dd2d0841627bcb","sha1":"949a9ddbbc2832957739c78cac64fe3a74f12aa2","sha256":"89816f3f685191889ad1452c6f00a1a009eb37d11f4947478b4eeca0cfaa1da4","sha512":"b7e0a01c047c1bf2a7e212fe0e2ce79eac1cd089ea778551b3fcfdc8fe9925a7b704990a967c07bfec1d6d7c3a1d7cc685cd9d0961f18d146e48f2ba23cb4e8d","ssdeep":"96:SSPZU/7ZxI/GhTn1roDcq4Hn/4h+5F2aRnbYitmn7aQQbcSKyFL5X9J:SSxu2GroAq4H4+FRbYZGVYS3Fpz","tlshash":"eab17d7debd825929dc72a7744f8255c0b344d9b349251888a98360c2d7be380b80f9f","first_seen":"2025-09-23T17:21:13.859538Z","last_seen":"2026-03-28T22:12:53.807504Z","times_seen":145,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.13.3 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"b7f28f2464e085279a304d2abee8f0c8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hX0PjpHzDqEr9o%2BucdhgWB3tLjQk22Qg7KTIXibwYux6PBPvdhAKhVH6rwwagOUV%2Bn1PgR8PZwQoqTHV4sgCEIc5qjPW3lPq4SnYtLZuN%2BplDXxB%2F7kuwNyNfl3OGY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a768640b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10332,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10150)","md5":"6bdd4dca7cb09218e1860e6e0ca8a823","sha1":"dff6ac08d3ccf6f1d4f31c2d77ffa19e5ed112ee","sha256":"b7f28f2464e085279a304d2abee8f0c89f82077338dfe0dd44882ed0d53d018c","sha512":"69c128b655b22b150090d585fae2d1e2375400edac8a8f61a9fd12cbee07d464af43820bbf32e21ad55ff12087f9172f51f70943e301a2301c2e5e3a90993990","ssdeep":"192:TrxXtNLOw5Lx/jq/XOnAm5M5f6IyfGmojJnd9:TrxXt4AN/DNxojJnP","tlshash":"e622d89cb44178254ae7a372406f9e0fb031585cb19b4544f239c4e9a9be98e5037f7e","first_seen":"2024-07-17T00:03:41Z","last_seen":"2026-04-26T17:20:10.978811Z","times_seen":12832,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/ico_bg_image_15.jpg","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/ico_bg_image_15.jpg HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 31371\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6738f45cc12be7faf1a7072db6140caf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT%2FvoAdw%2FrlfIybcXjok%2Bp8KGAhrD%2BKv3fF6OoAZx6EvvqKvc2KErBsaj6G4iwlIE8%2BhVG9y9nP31FPWYaPeHJk4txMehaxvsM2wwDp7vQsq%2F%2BbgiZjTRqR5qZ4cJ3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302abd8d10b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31371,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x999, components 3","md5":"786b62a430113bce0d29bffdc7b74c11","sha1":"5d788d55b79fc7732739decc608d5fd595930132","sha256":"6738f45cc12be7faf1a7072db6140caf8cf9e55ca4f59f9fffcf9d802eddb5f2","sha512":"ecb33c182acfc6c4788a528e0f367c38e31524861f13e13bba7dffd38b109e84863c8f1a2ed9f3fff29eb6801614f4785fa2e666c376114a2419e66a7fd7f5d7","ssdeep":"768:pcHpb7mDKuJDEOp7h62aAg4B+S/mpXljR/:ypbKuuD1pdng4A","tlshash":"84e2be3ef20cd486e46b46fb6892b3696d36bdd2740d1b24e50380df2782b3849345eb","first_seen":"2025-09-23T17:21:13.818499Z","last_seen":"2026-04-06T21:54:39.703371Z","times_seen":153,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:05.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/6-3-ct-person-1-ct-person.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:05 GMT\r\ncontent-length: 7703\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c00a1808e9d3c3e023acb957df85c6c0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTJ3UzREPvxxFlAxsP%2Bs%2F%2BE2wWB5tHueoFXw5J2nvL2L7naMek8f7sPRbHKK62t%2BG7A9Wb6NjWr8HcTzcZRNizMAHFQWK%2B%2B0zt5K4lMG3oyuXZ3mbHRUZW481eF%2BKN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302b469570b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"139587ee1590b65ae116ee0b53f408f3","sha1":"989d2d9ddcb42b2c723f6fba4be89d21185c4d1f","sha256":"c00a1808e9d3c3e023acb957df85c6c02ffd617ae7e2a9f5e733541fb727ad61","sha512":"7ea5e9db4529c83ed6214fc37539ecd55d6477ffe38fa285022c4e72705bc758f0650edc2e8bd4bb951a3388fcd44916b5d038bb2eeebcb5248ee06ec3cd5139","ssdeep":"96:ypL2iKWJArcGvbGEuUZkXw51sRJbgFeIo3y9jWaxhLMDDO8p0xo4PX5M52iqnIpx:u2YQPviUuX1B5C9Wa/AJpUUchNBcx","tlshash":"b1f17d85c2139025f3a693377df7856c087e4cde9b63afaba25356145c82b4914d888f","first_seen":"2025-09-23T17:21:13.830132Z","last_seen":"2026-04-06T21:54:39.73292Z","times_seen":147,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"5274f11e6fb32ae0cf2dfb9f80432728\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aw9rX8%2BpdeyZGDVeHqSaiFE0xtzxP5jHEruawpaiBYt6EANiGKt1MFQkCl8Je8hkoNNIIb3BamgxD%2FNpz%2B7SbPMSjl0z2A14XwG12h3LuQG0xkpceBRp7q0Ry457LOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6d8410b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-26T18:07:53.418183Z","times_seen":691356,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-widgets.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-widgets.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"d36e14f8e75d0bf691403c0d5b463aa7\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90%2ByJIj7%2B0CncInvSzTiCWNcybq0C1yzokxoUEwuo8RPRB%2FIrH2KjxdVlLnLrA98%2FWCX8AH8VhbJkTrrHC7J8do9T0Dhf9Qi1FZkhhUAlXyEnOphJxqPKLD4vwcyq1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6882c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83308,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93bdaf73f3fc24703ae635e8a95d20b1","sha1":"f8ece8ea1556a3b467adeede8cba565448f20d8b","sha256":"d36e14f8e75d0bf691403c0d5b463aa7d292697f7e46f7cae9709b877a777a24","sha512":"df032802f6961ae979500263eb8d33f74a5eab81170db6363f899b60b7db3759082cd8091bc8ea73981c97a21b0171b50de881491e312cc8861b6f22d1ba7f0f","ssdeep":"768:NjO/RpmKWcIo9x0nk6kAkikmJnk4jdO5B2lcemJFSmAe68:QHxok","tlshash":"488353aeda1915467237991967aa7ea1ef9810d7ce03096cbed073014f7a4cc0a73ecc","first_seen":"2025-09-23T17:21:13.851769Z","last_seen":"2026-04-06T21:54:39.660815Z","times_seen":161,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/ct-lazyLoading.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"d5e2c551ce5c731d97827275aadc2c47\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9mgKOalImhJjdhxW2YmsNFfE3WMSenWRblEr1jobuuo1L8VGMTSd%2BIJr183utnJFeR4ILbtORrdG5h1K%2FOmOsOOhPUOURAM10L00oxprO255QIwrA91CikgiffOKUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a768620b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15556,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9e48f74ff2ec65ade3b0485ce35fdf51","sha1":"87041cd6aef74b8f0ab3d1ae2e03e2ca0db14cf0","sha256":"d5e2c551ce5c731d97827275aadc2c47329529d8a022739aaa306b8d7344f802","sha512":"3f8bd4bb1f29d83293ef4d18a5db6d7d2d85e3dd5604b9b14f1463ccb56698dcb420e1e79eaa4734e36b8cadf353f26c7bcd4ab272e59ce472d2ba8485a06d45","ssdeep":"384:+gpDy3SLtWmOeKQCfa2ZouzFHK7zRr6IAs25qDohbZxG2C7zKr6FpvqS:+gpDDt/EfaQzFHKZuxs25oohbZxG2C7H","tlshash":"af62fdd8724f266f86ef33ab913f464ef83dd532440901bab47951d898b5c69a342cbc","first_seen":"2025-07-04T07:44:29.938072Z","last_seen":"2026-04-19T19:53:53.663165Z","times_seen":146,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/js/fancyBox/jquery.mousewheel.pack.js?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"89063c896f3ff978cbecd97312879f28\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZTOw5glyfQk6c2bYtLls74%2FhsEGqkFNY4jQ%2F2QPAP3UBhaYpRSaSf72IRZ%2BjbgbRY7UaR5wMBCL%2FUvqaeFXQPIuUZsXIjmUcX5%2BcJuAZFeURASdiQ8ZIAWJ5NWc110%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a7986c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1396,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (524), with CRLF line terminators","md5":"b0f7225166e217cfb64b80ae8ebbb604","sha1":"5d6f224e3080fd4066f8ef5c63d3f467e9d29e66","sha256":"89063c896f3ff978cbecd97312879f288e207d519781425f0d7f9dd203dff653","sha512":"6fc1d6e2d9e91598d77bef13232821318141b0a628728d005f2fc9c954c848e07ddea881e33d37350aaae056d9da1836095eacddfb45f758c1050e7a993664d3","ssdeep":"","tlshash":"cc2171403b8818eb55aa9bb2a92b6343f0ba909290433c8f70b09cc0ab90dc54331d2c","first_seen":"2023-03-07T01:23:16Z","last_seen":"2026-04-26T14:41:42.599308Z","times_seen":1547,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/fonts/material/materialdesignicons.woff","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:03.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/fonts/material/materialdesignicons.woff HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/wp-content/themes/cryption/css/icons-material.css?ver=6.9\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:03 GMT\r\ncontent-length: 88492\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4d53fbbcf651e6ed2e9dd1a23b5e6535\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWyf8mohW%2BWWcSKnpYBD4iT9zkUs57%2BR5suiVANsFnIbzbO4P5gZT07L6%2B7bMIHrgByuYv%2BxE%2FJpYnQY1K%2BSdoy3zkhmuYuTOjcHZ3MjiJeF9OjaBq6xa0YO%2FtAneN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3302ac18d80b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88492,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 88492, version 1.0","md5":"4957887614ccc9456a40789924f4df2a","sha1":"71da0b3f089e0c502a25576ea931a25204819c16","sha256":"4d53fbbcf651e6ed2e9dd1a23b5e65359ff8368ba1e1c4fee3ef499510c51397","sha512":"b29455016e5707434219d839c59121b29b290e851658a27d406959a037a4ea8b08134d2ec2d1ecbb4607218cd652bc11d511e0751198565f6f74a412c9e0f8c0","ssdeep":"1536:kipw1ZxRc7lb7U9Y/yMu1pCSSyvdi7bvhmSJx1+Wb+0MQhDDDP:3qTDc2K/opCSPi/5Rx1+U+SDDD","tlshash":"05831223abcd8947deb33cdd52690cde2ea198dd1b0722437998943e82c1eee7d50147","first_seen":"2023-04-11T08:34:17Z","last_seen":"2026-04-26T17:53:32.911712Z","times_seen":592,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/uploads/2024/05/cropped-favicon-32x32.png","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:04.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-favicon-32x32.png HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:04 GMT\r\ncontent-length: 10639\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"29fb14d0340b06b12855fde2127a8989\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vG4JwODtQfRopBrntfWK6DwXlJaiKVJiJMAQGDXbpUxews909C9LrvKp4JW3Cu0ArhksG9gKUuXA7epTaXLpk%2B7xV9sdKk3yYDp9vDlmYLnDY1RARCiH0%2BQfSV7EdlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e3302b0f9210b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"0b20b50299e85f506e7d2148bae81625","sha1":"7abdc561c49150f584f6485b6d39caf1a68c725f","sha256":"29fb14d0340b06b12855fde2127a8989d6a7501e26bf8c9b010768a452018751","sha512":"094fea601128c455fb073b9018378b4f172c5b26c591e187d26e77f4abdbed68d7766ac2ca7d45869857b03baf2236edddf18d514cc3ec7e44d24c16c85ab667","ssdeep":"192:wQEaC7RiZ6T0a8fdKzsKOWMbIHfpM5SKJIVy6J8uIGQ0I0D5QGkRDu0Nj1MNyyZl:ZEv7RiZ3FWagfazyVSuIGQ0ICQ7RK0NI","tlshash":"bb22bf125d10929ad0a5f325b2ad158382a8bffed187824d7f15fdf63a2cad5300d30a","first_seen":"2026-02-12T23:56:19.854783Z","last_seen":"2026-03-28T01:55:33.972277Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rvardun.live/wp-content/themes/cryption/css/ct-header.css?ver=6.9","fqdn":"rvardun.live","domain":"rvardun.live","tld":"live"},"ip":{"addr":"104.21.83.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rvardun.live/","date":"2026-03-28T01:55:02.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rvardun.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 23:00:01 GMT","end":"Thu, 21 May 2026 00:00:00 GMT"},"fingerprint":{"sha1":"B4:71:FC:37:DE:AC:58:42:92:AE:4D:85:FD:93:6A:25:5E:EA:AB:B3","sha256":"D1:62:63:F2:0F:66:C2:0A:4C:88:D1:62:7E:D1:09:32:A5:16:FE:99:C7:DD:CA:17:A8:CB:08:30:AB:93:47:71"}}},"request":{"raw":"GET /wp-content/themes/cryption/css/ct-header.css?ver=6.9 HTTP/1.1\r\nHost: rvardun.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rvardun.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 01:55:02 GMT\r\netag: W/\"a44bdbaeafd8b3eacfb06bdadf22054a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oels%2BgxSlq0ciCqOB9OevKxGcdzQgMXQJ5sh43fdpgWui14BJ%2FYU4ClrERIqL4mQSFCvCS3KZctEs%2Fc1NxUjWTP%2FTnxxbD7t0j6E5wa1V5MQR%2BvYNxDuNJVMWHssV5I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3302a6882d0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c1b74ac3c28ea6e13c46f55460c046f8","sha1":"12fc3cc175bd95fe327b9d8d703c0308b20a7a75","sha256":"a44bdbaeafd8b3eacfb06bdadf22054a16b9109781775b189b59346c3b702322","sha512":"b0a3c0905a5f272654b450f1c0736f9afa29c6366c840e838180f4c7745227b38019fb58693b30dff1f9b4f839489b1b15fc64ac989680079c68c2eb5b97d78f","ssdeep":"384:KdTtBtzbtD4dDAGit9Q5r8k3uiXtYlY0IVGVYO8YNl+BvQeYQu+SBS2+Y2q9E9MX:KrzbtD4dDAGit9Q5r8k3uiXtYlY0IVGR","tlshash":"a992735ced9835681312ba69f3f26fb06f384054ff135864b2e5272f8249a5c5273acd","first_seen":"2025-09-23T17:21:13.968289Z","last_seen":"2026-04-06T21:54:39.659001Z","times_seen":94,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"rvardun.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}