{"report_id":"a5dc0133-711d-4db0-be2b-59f809105948","version":6,"status":"done","tags":[],"date":"2026-03-06T20:54:57Z","url":{"schema":"https","addr":"arbitpad.cyou/en/","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arbitpad.cyou/404.php","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"title":"404 Not Found","dom":{"size":145,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8ef8fb7bf247d9ff121d452a3758c20d","sha1":"a0c8cee69c859281fb91c0af10105e2bea21591e","sha256":"cdd23afed1c9a2eb39d5e22c7a0d51a37dd511c22a9aa3866bf789ff8e326c31","sha512":"2c7fa1153c81e521607134302ccc93f65637ae668e60b3b9b774f25c2a00898f68661764d5cef3bd362f8d6e2123691b4ee038142fb891841e940dbc0b56e55c","ssdeep":"","tlshash":"9bc02b0d7463b548dd03119056c33180d4c8c33b649bc1228802408770cf2bac4c63a9","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"arbitpad.cyou/en/","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T20:54:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"arbitpad.cyou","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-03-06T20:54:19.057804Z","last_seen":"2026-03-06T20:54:19.057804Z","alert_count":0,"request_count":3,"received_data":4341,"sent_data":1414,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"arbitpad.cyou/404.php","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T20:54:36.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitpad.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 06:27:16 GMT","end":"Wed, 03 Jun 2026 06:27:15 GMT"},"fingerprint":{"sha1":"AB:E6:6C:84:FE:98:C4:E5:26:82:5B:7A:9D:8D:5D:CD:FB:21:49:D5","sha256":"54:5E:1C:C3:3C:74:4F:E6:4B:67:5C:CD:EE:E9:06:E7:0A:6B:EA:63:4C:E1:47:8B:01:FF:49:B7:47:05:0B:51"}}},"request":{"raw":"GET /404.php HTTP/1.1\r\nHost: arbitpad.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 06 Mar 2026 20:54:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KG2AL5NXyBdcnf2Dnzzd8ICTe2X9%2BI9OYEMZIS5975qhgtkBSamRFfzwGhC1r8s5aCSvhD1zSDe7G8gKhL64H3k1gjt1nAtEj59MzQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d8441ac0f96dd2c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"cba18e2d1b95df014c7ebdccb388019b","sha1":"1205e4727dbbe294bba6ae89a48ded7b48e7e7af","sha256":"90b239a8161666333dfdf6b5d5059d1f08508381a716fd90fd86495192a5e782","sha512":"b625c764598de6510d5819a578b5c89bad7cb6ecbbe26d7680e7bef9096a6981349848cf286d40b710649a0c563c4095d33ffe7061be461d5255834eeb5bfd08","ssdeep":"","tlshash":"2bc02b2d35137c4cc563317462c37090d0c6833764bb42238400800331cf2998ec339b","first_seen":"2025-12-14T10:03:08.751099Z","last_seen":"2026-04-04T14:13:26.941534Z","times_seen":200,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitpad.cyou/favicon.ico","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arbitpad.cyou/404.php","date":"2026-03-06T20:54:36.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitpad.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 06:27:16 GMT","end":"Wed, 03 Jun 2026 06:27:15 GMT"},"fingerprint":{"sha1":"AB:E6:6C:84:FE:98:C4:E5:26:82:5B:7A:9D:8D:5D:CD:FB:21:49:D5","sha256":"54:5E:1C:C3:3C:74:4F:E6:4B:67:5C:CD:EE:E9:06:E7:0A:6B:EA:63:4C:E1:47:8B:01:FF:49:B7:47:05:0B:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: arbitpad.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arbitpad.cyou/404.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 20:54:36 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 05 Mar 2026 08:49:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 38\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOD6bWb%2Byn8WbdzAM7GMsDox%2BJBWE1W6JvoOr9sO1EoRrRTUrdtaU6VZ60jRpRL2QarX4mGxsyC8KX1vmpD180QTbzqhw2wAOMPphyY%3D\"}]}\r\netag: W/\"69a943a8-8ca\"\r\ncontent-encoding: br\r\ncf-ray: 9d8441ad9805d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2250,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"423b8d397337b9e2597dafd5373f5cd7","sha1":"2c25073e4887071f5c5508818444d9cb2adb19ec","sha256":"5b76578be6df9f0bc885737dced10173aed95fd82ea7e3ef83765e4a97614d55","sha512":"12551452b3b8558ac2c91085343b6f44769c125a8f7dddeccc4d78da2a20c201ffaa470812614f8adaf88677119dff17ac80745a14a3babf21e93c235721b46a","ssdeep":"","tlshash":"e5412ba66b3e9c1d702d01643b65c4eac4eb85504de9de57c08dc876e3ced604a78b58","first_seen":"2026-03-06T20:54:21.315009Z","last_seen":"2026-03-06T20:54:57.466037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arbitpad.cyou/en/","fqdn":"arbitpad.cyou","domain":"arbitpad.cyou","tld":"cyou"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T20:54:36.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arbitpad.cyou","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 06:27:16 GMT","end":"Wed, 03 Jun 2026 06:27:15 GMT"},"fingerprint":{"sha1":"AB:E6:6C:84:FE:98:C4:E5:26:82:5B:7A:9D:8D:5D:CD:FB:21:49:D5","sha256":"54:5E:1C:C3:3C:74:4F:E6:4B:67:5C:CD:EE:E9:06:E7:0A:6B:EA:63:4C:E1:47:8B:01:FF:49:B7:47:05:0B:51"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: arbitpad.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 06 Mar 2026 20:54:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.3.19\r\ncache-control: no-store\r\nlocation: /404.php\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BGem9XqzKI%2Fi4jiihPQHbSNWsDG%2BAsJG5%2FAD78PFpUDxxKBYdncEP2oH3ab8TSeiD%2FE2M5IWybSe66w4W%2B6UR7oQDhdjkNNMQ3pEG4%3D\"}]}\r\ncf-ray: 9d8441ab7ecddd2c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"PHP:7.3.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":26,"dns":1,"connect":8,"send":0,"wait":67,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}